urlquery.net
Investigate/Report/db010714-8b2e-4936-93db-17c680ea4fa8
WEBSITE ANALYSIS REPORT

http://ldg-support.top/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…
Domain graph details

Hostnames

Connections

    Network requests

    Click any request row to expand it in place. Multiple transactions can remain open.

    UTC · milliseconds
    Reset
    Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
    Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
    GET200document43.4 KB355 ms6 alerts
    GET200stylesheet36.4 KB176 ms6 alerts
    GET200script280.9 KB416 ms6 alerts
    GET200stylesheet252.8 KB466 ms6 alerts
    GET200img1.9 KB292 ms6 alerts
    GET200img13.2 KB303 ms6 alerts
    GET200img5.9 KB159 ms6 alerts
    GET200img91.8 KB233 ms6 alerts
    GET200img127.0 KB2077 ms6 alerts
    GET200img139.4 KB862 ms6 alerts
    GET200img140.2 KB524 ms6 alerts
    GET200img143.0 KB1076 ms6 alerts
    GET206media32.0 KB1200 ms6 alerts
    GET404media278 B103 ms6 alerts

    Transaction #03

    Request / response

    URL

    GET HTTPS
    https://ldg-support.top/assets/Bflfh7PtIV1m.mov

    IP / ASN

    Country unknown 172.67.190.177

    AS13335 · CLOUDFLARENET

    Requested by
    https://ldg-support.top/

    Resource information

    File type
    HTML document, ASCII text
    MIME type
    text/html; charset=iso-8859-1
    First seen (UTC)
    17 Oct 2026 · 17:33:36.283 UTC
    Last seen (UTC)
    18 Oct 2026 · 00:10:53.872 UTC
    Times seen
    2
    Size
    278 B (278 bytes)
    MD5
    0116118277dd74957391dcbbf1c5de8e
    SHA1
    68e691889fef09aabd41ea01eb143b82cdb5fa28
    SHA256
    1289860d090c30ea230d742785d3bdafd986232654036d894a173861fadb6216

    Certificate information

    Issuer
    Let's Encrypt · YE2
    Subject
    ldg-support.top
    Protocol / cipher
    TLSv1.3 · TLS_AES_128_GCM_SHA256
    SHA1 fingerprint
    A8:C6:55:18:57:50:01:8A:18:75:64:BB:D5:BF:8E:E3:1D:62:F7:22
    Valid from
    Fri, 16 Oct 2026 16:12:49 GMT
    Valid until
    Thu, 14 Jan 2027 16:12:48 GMT

    Technology fingerprints

    • Cloudflare (CDN)

    Detections

    Detection observations attached to this HTTP transaction.
    DetectionSeverityVerdict
    DigiCert UltraDNS SinkholedmediumMalicious
    Quad9 DNS SinkholedmediumMalicious
    DNS4EU SinkholedmediumMalicious
    CIRA Canadian Shield DNS SinkholedmediumMalicious
    Cloudflare DNS SinkholedmediumMalicious
    OpenDNS Phishing BlockmediumPhishing

    HTTP headers

    Request headers

    GET /assets/Bflfh7PtIV1m.mov HTTP/1.1
Host: ldg-support.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Referer: https://ldg-support.top/
Range: bytes=0-
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

    Response headers

    HTTP/3 404 
date: Sat, 17 Oct 2026 17:32:48 GMT
server: cloudflare
priority: u=4,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=iOII4o4aWoKXxDckL%2Fgy%2BUKqBDhKNwkUAjBS%2B3HlYZKsz5iNCa9%2Bde9qrirpk58PQvBXtjdPDS7TTK00JqC9cIxlmMLwc2E7q9AQXk2SQsx%2FkFLyHJkMXT5VcFnEt2u%2Biac%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-type: text/html; charset=iso-8859-1
cf-cache-status: DYNAMIC
cf-ray: a4c10b743f0b4c11-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
    GET200img402 B88 ms6 alerts
    GET206media36.6 KB1661 ms6 alerts
    GET206media3.32 MB119 ms6 alerts
    17 visible / 17 matching / 17 captured
    First
    Loading evidence…
    WORKSPACE SETTINGS

    Display preferences

    Saved on this device.

    SuccessInfoWarningDangerCriticalUnknown

    Security colors remain independent of your accent.

    Go to…

    Recent scans ↵ Search reports /Search hosts ↵

    No matching commands.

    Ctrl/⌘ K Commands · Esc Close
    LOCAL DEMONSTRATION

    Notifications

    No live event connection.

    No notifications yet. Preview an event below.

    Full request body

    Full screenshot

    Full browser screenshot