Report - zlzgfj.icu

Report Overview

Visited public
2025-02-26 12:19:30
Tags
URL
zlzgfj.icu
Finishing URL
zlzgfj.icu/
IP / ASN
118.193.47.208
#135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED
Title
403 Forbidden

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
zlzgfj.icu	unknown	2025-01-22	2025-02-26	2025-02-26	1.2 kB	954 B	118.193.47.208

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-02-26 12:19:01	medium	Client IP	118.193.47.208	ET INFO Suspicious Domain (*.icu) in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	zlzgfj.icu/	118.193.47.208	403 Forbidden	159 B
URL User Request GET HTTP/1.1 zlzgfj.icu/ IP 118.193.47.208:80 ASN #135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED File type HTML document, ASCII text, with CRLF line terminators Size 159 B (159 bytes) Hash be3d8992b6201cb749547b03b569994e bd7fefad3754c379cd489f3bf192ea32d28ae204 ab436fbd46aa1807404dccc2ebe48d9b530c32c1aa6b0978bda5649e4ab5d3ba HTTP Headers `GET / HTTP/1.1 Host: zlzgfj.icu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 403 Forbidden Server: openresty/1.27.1.1 Date: Wed, 26 Feb 2025 12:19:01 GMT Content-Type: text/html Content-Length: 159 Connection: keep-alive`

	zlzgfj.icu/	118.193.47.208	403 Forbidden	159 B
URL User Request GET HTTP/1.1 zlzgfj.icu/ IP 118.193.47.208:80 ASN #135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED File type HTML document, ASCII text, with CRLF line terminators Size 159 B (159 bytes) Hash be3d8992b6201cb749547b03b569994e bd7fefad3754c379cd489f3bf192ea32d28ae204 ab436fbd46aa1807404dccc2ebe48d9b530c32c1aa6b0978bda5649e4ab5d3ba HTTP Headers `GET / HTTP/1.1 Host: zlzgfj.icu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 403 Forbidden Server: openresty/1.27.1.1 Date: Wed, 26 Feb 2025 12:19:02 GMT Content-Type: text/html Content-Length: 159 Connection: keep-alive`

	zlzgfj.icu/favicon.ico	118.193.47.208	404 Not Found	159 B
URL GET HTTP/1.1 zlzgfj.icu/favicon.ico IP 118.193.47.208:80 ASN #135377 UCLOUD INFORMATION TECHNOLOGY HK LIMITED Requested by http://zlzgfj.icu/ File type HTML document, ASCII text, with CRLF line terminators Size 159 B (159 bytes) Hash 62612b5e7b2a012de34112a6f9544519 a6c72e8ca88683471ad0ff7944211e2a5fb3c595 d297e01557482dde6fe71c8e639e87e39edda7577c1c61092e0d6ee2e0250742 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: zlzgfj.icu User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://zlzgfj.icu/ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 404 Not Found Server: openresty/1.27.1.1 Date: Wed, 26 Feb 2025 12:19:02 GMT Content-Type: text/html Content-Length: 159 Connection: keep-alive`