Report Overview
Visitedpublic
2026-06-01 12:32:46
Tags
Submit Tags
URL
u20n.top
Finishing URL
u20n.top/home
IP / ASN
206.119.118.67
Title
welcome-BET365
Detections
urlquery
0
Network Intrusion Detection
8
Threat Detection Systems
4
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
u20n.top 266 alert(s) on this Host | unknown | 2026-05-26 | 2026-06-01 | 2026-06-01 | 68 kB | 10 MB |  27.124.40.187 |    |
photo.365live88.com | unknown | 2022-08-16 | 2025-11-02 | 2026-05-31 | 5.7 kB | 575 kB |  154.41.93.241 |  |
img.esportsdata.cc 4 alert(s) on this Host | unknown | 2023-06-01 | 2023-07-06 | 2026-05-26 | 950 B | 12 kB |  172.67.70.146 |  |
static.geetest.com | 196356 | 2012-03-05 | 2015-01-16 | 2026-05-30 | 408 B | 22 kB | 104.17.5.193 |  |
Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.GeeTest (Security)
GeeTest is a CAPTCHA and bot management provider, protects websites, mobile apps, and APIs from automated bot-driven attacks, like ATO, credential stuffing, web scalping, etc.OpenResty (Web servers)
OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Alibaba Cloud Object Storage Service (IaaS)
Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | 27.124.40.187 | Client IP | ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.top) | |
| low | 27.124.40.187 | Client IP | ET INFO Observed ZeroSSL SSL/TLS Certificate | |
| medium | 27.124.40.187 | Client IP | ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.top) | |
| low | 27.124.40.187 | Client IP | ET INFO Observed ZeroSSL SSL/TLS Certificate | |
| medium | 27.124.40.187 | Client IP | ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.top) | |
| low | 27.124.40.187 | Client IP | ET INFO Observed ZeroSSL SSL/TLS Certificate | |
| medium | 27.124.40.187 | Client IP | ET INFO Observed ZeroSSL Certificate for Suspicious TLD (.top) | |
| low | 27.124.40.187 | Client IP | ET INFO Observed ZeroSSL SSL/TLS Certificate |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | u20n.top | malicious | Sinkholed |
| DNS4EU | u20n.top | malicious | Sinkholed |
| DNS4EU | img.esportsdata.cc | malicious | Sinkholed |
| Hagezi Threat Feed | img.esportsdata.cc | malicious | Sinkholed |
JavaScript (96)
| HASH | FROM | Size | First Seen | Last Seen | |
|---|---|---|---|---|---|
| 6167d2b82824a03ac56c76b74bf9d1d1 | DocumentWrite | 59 B | 2026-06-01 | 2026-06-01 | |
Introduced by DocumentWrite First Seen 2026-06-01 Last Seen 2026-06-01 Times Seen 1 Size 59 B (59 bytes) MD5 6167d2b82824a03ac56c76b74bf9d1d1 SHA1 d02d6eb2f131648def8fe6ffac6c1d6dcc4c5ddf Loading... | |||||
HTTP Transactions (148)
| URL | IP | Response | Size |
|---|