urlquery.net
WEBSITE ANALYSIS REPORT

http://secure-gateway324.icu/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET403document5.6 KB66 ms1 alerts
GET301document0 B31 ms1 alerts

Transaction #07

Request / response

URL

Navigation request GET HTTP
http://secure-gateway324.icu/

IP / ASN

Country unknown 172.67.147.159

AS13335 · CLOUDFLARENET

Requested by
Not recorded

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: secure-gateway324.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 301 Moved Permanently
Date: Thu, 22 Oct 2026 13:29:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://secure-gateway324.icu/
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rzgNUOmOhCwcD3X83kv6Z7Z5tv5kF%2BVyBuPgkf5KxslrStHxqldAKKJRMhJZL9JkXK977GshtbKweYCfwfkzJrR%2BdfueHUdXke9LyKwpxqM9DQz7aDoWGyD0M64u87ZDoy72KQYW4Dk%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: a4e8d996ade45693-OSL
alt-svc: h2=":443"; ma=60

GET403document5.6 KB20 ms1 alerts
GET200script253.5 KB25 ms1 alerts
GET403img5.6 KB18 ms1 alerts
GET200script84.7 KB27 ms—
POST200xhr104.8 KB33 ms1 alerts
GET403img5.6 KB21 ms1 alerts
GET200subdocument271.0 KB20 ms—
POST200xhr805.3 KB41 ms—
GETNo responsefetch0 B0 ms—
GET401fetch1 B6 ms—
GET200img4.4 KB6 ms—
POST200xhr119.8 KB131 ms—
GET403document5.6 KB20 ms1 alerts
GET200script255.0 KB21 ms1 alerts
GET403img5.6 KB20 ms1 alerts
GET200script84.7 KB11 ms—
GET403img5.7 KB8 ms1 alerts
POST200xhr104.8 KB15 ms1 alerts
GET200subdocument264.3 KB16 ms—
POST200xhr786.5 KB145 ms—
GETNo responsefetch0 B0 ms—
GET401fetch0 B0 ms—
POST200xhr119.8 KB31 ms—
GET403document5.6 KB21 ms1 alerts
GET200script257.9 KB25 ms1 alerts
GET403img5.7 KB20 ms1 alerts
GET200script84.7 KB14 ms—
GET403img5.7 KB26 ms1 alerts
POST200xhr104.8 KB18 ms1 alerts
GET200subdocument260.1 KB23 ms—
POST200xhr805.1 KB215 ms—
GETNo responsefetch0 B0 ms—
GETNo responsefetch0 B0 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot