urlquery.net
Investigate/Report/db010714-8b2e-4936-93db-17c680ea4fa8
WEBSITE ANALYSIS REPORT

http://ldg-support.top/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…
Domain graph details

Hostnames

Connections

    Network requests

    Click any request row to expand it in place. Multiple transactions can remain open.

    UTC · milliseconds
    Reset
    Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
    Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
    GET200document43.4 KB355 ms6 alerts
    GET200stylesheet36.4 KB176 ms6 alerts
    GET200script280.9 KB416 ms6 alerts

    Transaction #17

    Request / response

    URL

    GET HTTPS
    https://ldg-support.top/form/jquery.js

    IP / ASN

    Country unknown 172.67.190.177

    AS13335 · CLOUDFLARENET

    Requested by
    https://ldg-support.top/

    Resource information

    File type
    JavaScript source, ASCII text
    MIME type
    application/javascript
    First seen (UTC)
    07 Mar 2023 · 01:03:32.000 UTC
    Last seen (UTC)
    18 Oct 2026 · 03:15:09.122 UTC
    Times seen
    9307
    Size
    280.9 KB (287630 bytes)
    MD5
    23c7c5d2d1317508e807a6c7f777d6ed
    SHA1
    ad16c4a132ad2a03b4951185fed46d55397b5e88
    SHA256
    416a3b2c3bf16d64f6b5b6d0f7b079df2267614dd6847fc2f3271b4409233c37

    Certificate information

    Issuer
    Let's Encrypt · YE2
    Subject
    ldg-support.top
    Protocol / cipher
    TLSv1.3 · TLS_AES_128_GCM_SHA256
    SHA1 fingerprint
    A8:C6:55:18:57:50:01:8A:18:75:64:BB:D5:BF:8E:E3:1D:62:F7:22
    Valid from
    Fri, 16 Oct 2026 16:12:49 GMT
    Valid until
    Thu, 14 Jan 2027 16:12:48 GMT

    Technology fingerprints

    • Cloudflare (CDN)

    Detections

    Detection observations attached to this HTTP transaction.
    DetectionSeverityVerdict
    CIRA Canadian Shield DNS SinkholedmediumMalicious
    DNS4EU SinkholedmediumMalicious
    Quad9 DNS SinkholedmediumMalicious
    OpenDNS Phishing BlockmediumPhishing
    Cloudflare DNS SinkholedmediumMalicious
    DigiCert UltraDNS SinkholedmediumMalicious

    HTTP headers

    Request headers

    GET /form/jquery.js HTTP/1.1
Host: ldg-support.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://ldg-support.top/
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

    Response headers

    HTTP/3 200 
date: Sat, 17 Oct 2026 17:32:48 GMT
server: cloudflare
last-modified: Fri, 16 Oct 2026 15:58:53 GMT
etag: "4638e-65df73dad39d8-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Z%2FwUevfkg4wZ%2B28DDMXL3AFjbKNruf8BYQBfQkmIDhbYcZHr54BCs%2B34XjpTnA%2Ftx1vnuoQWQBJQEdzvRgX3zhmHDi30nkUUFcQ5RTyh7Upxu0CmCpaR9NKL027qcJu5TPo%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
priority: u=2,i=?0
content-type: application/javascript
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: a4c10b6f7c174c11-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
    GET200stylesheet252.8 KB466 ms6 alerts
    GET200img1.9 KB292 ms6 alerts
    GET200img13.2 KB303 ms6 alerts
    GET200img5.9 KB159 ms6 alerts
    GET200img91.8 KB233 ms6 alerts
    GET200img127.0 KB2077 ms6 alerts
    GET200img139.4 KB862 ms6 alerts
    GET200img140.2 KB524 ms6 alerts
    GET200img143.0 KB1076 ms6 alerts
    GET206media32.0 KB1200 ms6 alerts
    GET404media278 B103 ms6 alerts
    GET200img402 B88 ms6 alerts
    GET206media36.6 KB1661 ms6 alerts
    GET206media3.32 MB119 ms6 alerts
    17 visible / 17 matching / 17 captured
    First
    Loading evidence…
    WORKSPACE SETTINGS

    Display preferences

    Saved on this device.

    SuccessInfoWarningDangerCriticalUnknown

    Security colors remain independent of your accent.

    Go to…

    Recent scans ↵ Search reports /Search hosts ↵

    No matching commands.

    Ctrl/⌘ K Commands · Esc Close
    LOCAL DEMONSTRATION

    Notifications

    No live event connection.

    No notifications yet. Preview an event below.

    Full request body

    Full screenshot

    Full browser screenshot