urlquery.net
WEBSITE ANALYSIS REPORT

https://avdveulfdasxf.square.site

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document42.4 KB409 ms4 alerts
GET200stylesheet149.0 KB297 ms—
GET200script13.0 KB146 ms—
GET200script61.7 KB293 ms—
GET200script171.6 KB409 ms—
GET200script1.17 MB587 ms—
GET200script2.88 MB5520 ms—
GET200stylesheet29.3 KB255 ms—
GET200script73.3 KB345 ms—
GET200font21.1 KB209 ms—
GET200fetch18.4 KB184 ms—
GET200fetch2.5 KB185 ms—
OPTIONS200xhr0 B535 ms—
GET200img850 B36 ms4 alerts
GET200img6.4 KB34 ms4 alerts
GET204fetch0 B229 ms4 alerts
GET200script11.2 KB47 ms—
GET200script16.8 KB47 ms—
GET200script7.5 KB47 ms—
GET200stylesheet2.0 KB47 ms—
GET200script20.4 KB47 ms—
GET200script322.6 KB264 ms—
GET200fetch216 B32 ms4 alerts

Transaction #72

Request / response

URL

GET HTTPS
https://avdveulfdasxf.square.site/app/website/static/icons/sets/square/chevron-left.svg

IP / ASN

United States 74.115.51.5

AS27647 · WEEBLY

Requested by
https://avdveulfdasxf.square.site/

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
CIRA Canadian Shield DNS SinkholedmediumMalicious
OpenDNS Phishing BlockmediumPhishing
Cloudflare DNS SinkholedmediumMalicious
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /app/website/static/icons/sets/square/chevron-left.svg HTTP/1.1
Host: avdveulfdasxf.square.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://avdveulfdasxf.square.site/
Sec-GPC: 1
Connection: keep-alive
Cookie: _snow_ses.5b45=*; _snow_id.5b45=23d0c73d-2d18-4210-aede-376edac15414.1791848389.1.1791848389.1791848389.d11b4f04-6298-4205-914f-ea7d717cc43d; publishedsite-xsrf=eyJpdiI6IkVRVHE3THl3Q0NtbmVPMEEza3UyREE9PSIsInZhbHVlIjoiWllHL3BXcEg3VjhHYUc0RjJ0eDV3bU1XdWxhaHB0VDZyTkFOTU4wNkdrVkE3eXRTOXUyZnEwbHJaQk5YdkJTMHVSUzVmdTM2a0hIRG04UzdnNXIwbmpKRXhZdnBKdHZNT2lybGRvNVV5VTUyTHN3UUlGaWVQMHphSHB1R3ZkaVkiLCJtYWMiOiI3OGE4NThiZjY0MjE5ZDEwZGJlOGMyYjI0NzU3NjRlZDhmYjFlMWQ3MWFlNzlkMDg4YTNlNjBiNGNiNjU2N2IyIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IndsNFk3REJ2dTNGWG1iQTZZd1h2SGc9PSIsInZhbHVlIjoiOWFkSVFOWjhScmN1NlVYMDNmTXdpL3ljR1lldnN3bXEzeWM1TStVZWx0dXpLbEFvcHFGbXhkZXhkbk5POUVkdzBqMW1PMzJjVU5hTFM2S0hDb1Z2aEExSGdQYWVsZUdtbzJlZ3NmeDJiRklaM3d3YU9qN2xwVjhULzR3WDZUbDQiLCJtYWMiOiI4OTVkYWZmNWU5ODE0MWNjMzQwZDI5MjYwNDM5YWIxODYzOGI0OWUwZTExNWMzZTYzNGUwYTQ4MDBjNzMxOGNhIiwidGFnIjoiIn0%3D; PublishedSiteSession=eyJpdiI6Ijg0SFdLN3o2NjRoSnVUTFo2dWZ2ZUE9PSIsInZhbHVlIjoicFUxZjBjZ2RpbWI0c2JtRURyMS91UUdIK2Rydm5PVzN1Ty9kRTFGOHBqbE8veEVhdGxyNGZoUURPd2Juelhhd2hDWW1PblAwd0dNZ0dwaFlOaDA4MU1FUnk0aUl4TTNIazdXWDF5VWpsTFEvVXdNaUFyOWVETnJ5MUVYUDUrVDAiLCJtYWMiOiI4YTI5NmIwZGM3ZDA0YWNmNWY1ZWQ0OTFmNTFmODgzOGRjN2JhMGQ5OTU5YjcxMWM2YjRhMjFhNTdkYmJkNDFmIiwidGFnIjoiIn0%3D; _dd_s=rum=0&expire=1791849295412
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Mon, 12 Oct 2026 23:39:55 GMT
content-type: image/svg+xml
cf-ray: a499f257f91ab505-OSL
cf-cache-status: HIT
etag: W/"6ac934ed-d8"
age: 24720
cache-control: max-age=315360000
set-cookie: __cf_bm=rLEMhQI4pNY6MrY3hoXLh5JonpFpgSaGgzs8lJ6OKQY-1791848395.5118809-1.0.1.1-6zFZZTcarXpl5RR4.oKIxoq9uOEyQ0hr_UtHZUZOLkV6kX89zYTxII6V5s75gi3RMkg.OAn.ZClC2QzuFMutVRrTZhDqlWK_ygBzxshaZV1mMWkO1hgF7NOs7A9f5UUK; HttpOnly; SameSite=None; Secure; Path=/; Domain=square.site; Expires=Tue, 13 Oct 2026 00:09:55 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
last-modified: Fri, 09 Oct 2026 18:39:41 GMT
server: cloudflare
strict-transport-security: max-age=7776000
x-host: blu152.sf2p.intern.weebly.net
x-request-id: 92b8380a409e7a0ca0081a7b41cb3da3
x-revision: bc8da6f199269f50608e4fbe033fe3cb02e9f3e6
content-encoding: gzip
X-Firefox-Spdy: h2

POST200xhr861 B295 ms4 alerts
GET200xhr61 B259 ms4 alerts
GET200fetch7 B215 ms—
OPTIONS200xhr0 B170 ms—
GET200xhr192 B322 ms—
OPTIONS200xhr0 B170 ms—
GET200stylesheet322 B47 ms—
GET200stylesheet415 B47 ms—
GET200script26.2 KB107 ms—
GET200script21.3 KB107 ms—
GET200script25.0 KB105 ms—
GET200stylesheet18.5 KB48 ms—
GET200script11.2 KB47 ms—
GET200script14.8 KB47 ms—
GET200stylesheet19.6 KB47 ms—
GET200script16.0 KB47 ms—
GET200script30.5 KB95 ms—
GET200script10.7 KB96 ms—
GET200script10.2 KB97 ms—
GET200stylesheet26.2 KB48 ms—
GET200script101.5 KB97 ms—
GET200script21.9 KB52 ms—
GET200script21.5 KB98 ms—
GET200stylesheet26.9 KB77 ms—
GET200script83.8 KB138 ms—
GET200stylesheet1008 B75 ms—
GET200script2.7 KB89 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot