urlquery.net
Investigate/Report/e5be610e-e819-4f07-bc08-ea35a70e19bb
WEBSITE ANALYSIS REPORT

http://mascottevent95.fr/wp-includes/sitemaps/wzeiajm/d1gmfno/vhcqwrn/aldomainn.html

public
Report tags
phishing suspicious telegram_bot
Submit tags
Request review
Phishing detected

4 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document6.4 KB158 ms4 alerts
GET200stylesheet227.3 KB39 ms—
GET200stylesheet100.1 KB31 ms—
GETNo responseimg0 B0 ms—
GET200font152.9 KB28 ms—
GET503img1.8 KB319 ms1 alerts

Transaction #03

Request / response

URL

GET HTTPS
https://mascottevent95.fr/favicon.ico

IP / ASN

France 185.135.132.104

AS210403 · Groupe LWS SARL

Requested by
https://mascottevent95.fr/wp-includes/sitemaps/wzeiajm/d1gmfno/vhcqwrn/aldomainn.html

Resource information

File type
HTML document, ASCII text
MIME type
text/html; charset=UTF-8
First seen (UTC)
05 Sep 2026 · 01:02:42.655 UTC
Last seen (UTC)
05 Sep 2026 · 09:22:14.905 UTC
Times seen
3
Size
1.8 KB (1821 bytes)
MD5
234c7817064e35a1a8c0eab49c7a1803
SHA1
d4d25fb8ecf89369148b17a53a01e2b76baad578
SHA256
e52716b6c082ac8fd87cefe47c90c6cf528a12eb6cc54bdabce59d1d1552eaa9

Certificate information

Issuer
Let's Encrypt · YR2
Subject
mascottevent95.fr
Protocol / cipher
TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint
C7:6A:A3:D3:8A:C8:A3:2C:9E:DF:DE:C9:91:2F:A3:1B:CC:8F:81:AA
Valid from
Sun, 30 Aug 2026 02:30:02 GMT
Valid until
Sat, 28 Nov 2026 02:30:01 GMT

Technology fingerprints

No technology fingerprints recorded for this response.

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /favicon.ico HTTP/1.1
Host: mascottevent95.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://mascottevent95.fr/wp-includes/sitemaps/wzeiajm/d1gmfno/vhcqwrn/aldomainn.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=6
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 503 
date: Sat, 05 Sep 2026 01:28:24 GMT
content-type: text/html; charset=UTF-8
retry-after: 3600
cache-control: no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
expires: 0
x-orig-rid: 6dad57779d0e6693c8edb73c300f0f4b
x-anubis-action: 
x-anubis-rule: 
x-anubis-status: 
edge-cache-engine-mode: ACTIVE
x-cache-status: MISS
alt-svc: h3=":443"
6 visible / 6 matching / 6 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot