WEBSITE ANALYSIS REPORT

http://secure-gateway324.icu/

22 Oct 2026 · 13:29:58.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

13:29:16.390 GET 403 document 5.6 KB 66 ms 1 alerts

13:29:16.578 GET 301 document 0 B 31 ms 1 alerts

13:29:16.615 GET 403 document 5.6 KB 20 ms 1 alerts

13:29:16.752 GET 200 script 253.5 KB 25 ms 1 alerts

13:29:16.786 GET 403 img 5.6 KB 18 ms 1 alerts

13:29:17.109 GET 200 script 84.7 KB 27 ms —

13:29:17.124 POST 200 xhr 104.8 KB 33 ms 1 alerts

Transaction #24

Request / response

URL

POST HTTPS

https://secure-gateway324.icu/cdn-cgi/challenge-platform/h/b/fo/556867978:1792674426:0vjG2kDJuRXvQaOjRdbH5aFpYKaIU4Ivfx4S8uZShkc/a4e8d996dcb5c272/4po4ZZ5t1v7wwJkwbheuu_d9LGLrJ09vq1MGDliHyzE-1792675756-1.2.1.1-Fu7RHReT4oMuY9o_uzegh1jIqOS_9VvzfaQXuYNp.eCdgE0o0JtdDGNeGiOKDcBQ

IP / ASN

104.21.28.216

AS13335 · CLOUDFLARENET

Requested by: https://secure-gateway324.icu/

Resource information

File type: ASCII text, with very long lines (65536), with no line terminators
MIME type: text/plain; charset=UTF-8
First seen (UTC): 22 Oct 2026 · 13:30:27.751 UTC
Last seen (UTC): 22 Oct 2026 · 13:30:27.751 UTC
Times seen: 1

Size: 104.8 KB (107276 bytes)
MD5: 021eb12c13ede2e3e2064bf74eb7d174
SHA1: 43633f5f1ef3f0bedc42f1c84acac108dd63e221
SHA256: 06a8d975c7636b7261e9bb9080be9fe8730e3e342ff989845d47cfc5e038456b

Certificate information

Issuer: Let's Encrypt · YE2
Subject: secure-gateway324.icu
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: AE:18:0D:6D:A1:08:76:AE:95:82:03:71:24:0F:91:4E:6A:F6:AD:89
Valid from: Tue, 20 Oct 2026 13:38:59 GMT
Valid until: Mon, 18 Jan 2027 13:38:58 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

POST /cdn-cgi/challenge-platform/h/b/fo/556867978:1792674426:0vjG2kDJuRXvQaOjRdbH5aFpYKaIU4Ivfx4S8uZShkc/a4e8d996dcb5c272/4po4ZZ5t1v7wwJkwbheuu_d9LGLrJ09vq1MGDliHyzE-1792675756-1.2.1.1-Fu7RHReT4oMuY9o_uzegh1jIqOS_9VvzfaQXuYNp.eCdgE0o0JtdDGNeGiOKDcBQ HTTP/1.1
Host: secure-gateway324.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://secure-gateway324.icu/
cf-chl: 4po4ZZ5t1v7wwJkwbheuu_d9LGLrJ09vq1MGDliHyzE-1792675756-1.2.1.1-Fu7RHReT4oMuY9o_uzegh1jIqOS_9VvzfaQXuYNp.eCdgE0o0JtdDGNeGiOKDcBQ
cf-chl-ra: 0
Content-Type: text/plain;charset=UTF-8
Content-Length: 2295
Origin: https://secure-gateway324.icu
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
content-type: text/plain; charset=UTF-8
cf-chl-gen: bNZFOR4zQf96asjrlTZ2/l9Ovx5ag5OZg/WQDP+q4kc=$YHrN5wHx6X8PyaT2EgU5Iw==
timing-allow-origin: https://secure-gateway324.icu
content-encoding: zstd
date: Thu, 22 Oct 2026 13:29:17 GMT
server: cloudflare
priority: u=3,i=?0
cf-ray: a4e8d99a0ed8c272-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

Request body

Captured 2.2 KB · Displayed 2.2 KB

22NJGPa3qV$RDpSLCDfMGjgL69GXsSWDOpQCti-IreuHCGSB3rwSsi-Nk1p-73fWN6$FTdM3-prQiZu1U7rQz$pflhiEVX+ftlF6wOVIqrl9MDrjwcCfBHhwfT7Lvb8teI0obqfazcqaSFKhiK0oF1-6ajW8JhjLg7heOU1NSfe3couADdEe9Q2$HNQrbPJ7d-uwTLY-M9fe62gSBYEar0FZ0-Eq3-22tkbHFn1V8E7XYtL6HoFSw8uW6mvdrCrA7AW2SZNqVqOZT1f1pgLWZ4Wv2xuOihMz-QrvmOLF9bPRwiq3XyktIH8i6lbhZz47$pSvgDKJppX49ngtWubEyvYNVf96ZeaCqCQl-jdCKt09PYqBYPsj7h3P9O9WpEjxnO3l9$WpvVnHxv8$Qv06$l-dMZr3rRDsUe70+6bK4LlCjFn2TXo$YIftkobB93WNka2TvQCRkOlf2Wt9jsmTXYj6tWovQTF$mszyqWMdawqi1gAy9fIYtmz48CEZtDSu6jbFnSrzxQxm0Rh+o++-JZAgnPGBcmYTeMfbuzFhRexFZ13k69oK03kzxbvHzCkixFOwnxdBSZ+xXFeayo4H62kLF-+68umYhGCGEga6pVLaH3fZIetnuIhDg9mTQcPap3j7oAC3MdTLbKWwpat6IjcR2gKVhy8oRcSMlj-rw7MURk9TtA4ZGRYAa1wu+HvQDvI37RIK$o9$sBORcc2-6NCp0VmVQ8P84TMJT87URDbYYQmcqDW1t88pKLhX1qKwJAyH7+DMXL73CCbEH6gY7bBL0-v6BNF9L-K7WmXS8LoujmUSMjhDWjKz+XRUyXKsnJRQIlrm0vk+tTeUmme3leshE010PRyuokt$QsLHxSu7$OxTZdKD9M6imGxffQhQ0KUQB9fEYLC9zSMTV2-VpTCmyVvEaCPC2hXDdlgmj4pu4bvoma$DmXAD6U8uXCpwDR7lbYMObHBUZrmAIk4VXQPH7XwRaNFlKjuNsgGp6OyycGBqxxuTDXrvfi3fpOG709OiSbUnY7AAgceo-ZwVvLCEH$Pdrq0xLmEkWDZ2ohJXjHT4RbIyOi$wY-h$Cp4muZOl07EnBG46AqIPek8FpOPDFyNc0WZxdu+zpwA-TwdzcS6NCrRNpn10PvNAH2Dm7B8toGx2sbbTc9sEyHrMWaC6QmJrI$3SnbDoYxLb+R7dXRm4KHdifn7N$ov22CRJleGKiE+Cr9WN$6F$aLvSWkI$HE0Ja2zMBRyuUaXw0epuS-ruehE49K$Jgbpwzxjqxkf2F8Ov7KnSopnpd9ZbE07FhXsGzZ8AAvll11fPKPq1XqhYQmxR48FLFJrFZZnW-BPFz94r+RmHrA7zBbEC-qn6rzvqnA1$PonUvkPW4o+1ArP8o4ag1WH8w2pv3sst2YDjB19sUn8bQrFJ4Pucndwkcyg+yNpbYw4W$knpc+zfCcXCcPSsZ$HMlAcLspx3G79mRqkoCCGpKyPLusZcjx9tEhLzM6sOZ6SsGPheO3mYAfcWZ-gDul73qp44YD0KFcJ481WWwYnVREj1R4CJEu-MI-$zyYn4xUyXvUQkpPA6$9uX9eWb+JKu6Q2O93tnmqj4k3l-NnZfEXub0cbHrDImkFM9zLUbt27tYJQl6nOEHDMULYSbX2Oib9fE2EdDV3OWfE7g4Vmf134dt$cD0dwXBdguX3SMHRUHhUJKTmLumAgFlNcG1AfdBa67JeKqhucxMsU$GbGQgmJ4-Pq+QSuI4epIlGP1FYREG1kmwoS$wGL36SkWOG2uDHtZUAqBv33XKEZiKFqz$BqFD$nwvpqKS9UKE-YuGQN7KPy49VWSg$CAeTMFgql+POQ9AB-O+HSvN804CGa0oCH8m-8g+kF2w9Zi9$fIM642I6V3jruc-bksUW-VVg+$mdsnYAYiO27oEnhfL94$G79dXdapOBrJpOgaWueCYQhVFDAOgCrJLkFabN-XDW-JCG86yYqIvRCvXGxw9XzpPqLeDtTniow2snzgzEUJGyXznOV8ytf6zKlrwePXfHFxQELlsaYWd9eE8tiqaJ7G-GCSMqwGbISLxhEyLnl00yvtYi8LdjwHnRlJr19zcasJyzoCJa+qQDIDpAMUoZj9gS1cuL9kzQu0PPt6wr$RxQ8tpHDQkyQY9XjMujFaDuAAbBvQ6OU1mjuB7MkveJym6vMijxb8R0d6Z6OtZZEMqBst0aWOy$Zne4aKSOSIT09X$4plxuvPX4Q7QbH0pEaipRrzpWwrZ$A8MlWFaoLswS0ie6j-Rin4dHyjs68SAzf

13:29:17.127 GET 403 img 5.6 KB 21 ms 1 alerts

13:29:17.281 GET 200 subdocument 271.0 KB 20 ms —

13:29:17.660 POST 200 xhr 805.3 KB 41 ms —

13:29:18.152 GET No response fetch 0 B 0 ms —

13:29:18.159 GET 401 fetch 1 B 6 ms —

13:29:19.309 GET 200 img 4.4 KB 6 ms —

13:29:20.002 POST 200 xhr 119.8 KB 131 ms —

13:29:26.124 GET 403 document 5.6 KB 20 ms 1 alerts

13:29:26.178 GET 200 script 255.0 KB 21 ms 1 alerts

13:29:26.206 GET 403 img 5.6 KB 20 ms 1 alerts

13:29:26.277 GET 200 script 84.7 KB 11 ms —

13:29:26.326 GET 403 img 5.7 KB 8 ms 1 alerts

13:29:26.446 POST 200 xhr 104.8 KB 15 ms 1 alerts

13:29:26.573 GET 200 subdocument 264.3 KB 16 ms —

13:29:26.964 POST 200 xhr 786.5 KB 145 ms —

13:29:27.480 GET No response fetch 0 B 0 ms —

13:29:27.489 GET 401 fetch 0 B 0 ms —

13:29:28.928 POST 200 xhr 119.8 KB 31 ms —

13:29:36.182 GET 403 document 5.6 KB 21 ms 1 alerts

13:29:36.247 GET 200 script 257.9 KB 25 ms 1 alerts

13:29:36.278 GET 403 img 5.7 KB 20 ms 1 alerts

13:29:36.361 GET 200 script 84.7 KB 14 ms —

13:29:36.415 GET 403 img 5.7 KB 26 ms 1 alerts

13:29:36.530 POST 200 xhr 104.8 KB 18 ms 1 alerts

13:29:36.604 GET 200 subdocument 260.1 KB 23 ms —

13:29:37.068 POST 200 xhr 805.1 KB 215 ms —

13:29:37.693 GET No response fetch 0 B 0 ms —

13:29:37.702 GET No response fetch 0 B 0 ms —

http://secure-gateway324.icu/

Domain graph

Hostnames

Connections

Network requests

Transaction #24

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://secure-gateway324.icu/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #24

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

http://secure-gateway324.icu/

Domain graph

Network requests