Report Overview
Visitedpublic
2026-01-26 05:21:35
Tags
Submit Tags
URL
j127q.xyz
Finishing URL
90427.xyz/home
IP / ASN
45.119.97.37
Title
welcome-BET365
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
rcf-img-hk.gasdg646fs224cn.com | unknown | 2024-09-06 | 2025-12-21 | 2026-01-21 | 481 B | 222 kB |  172.67.190.197 |  |
photo.365live88.com | unknown | 2022-08-16 | 2025-11-02 | 2026-01-23 | 4.8 kB | 427 kB |  154.41.93.241 |   |
j127q.xyz 10 alert(s) on this Host | unknown | unknown | No data | No data | 872 B | 556 B | 0.0.0.0 | |
ssl.gfw301.top 1 alert(s) on this Host | unknown | 2025-05-06 | 2025-05-07 | 2026-01-22 | 540 B | 24 kB | 23.224.132.157 | |
90427.xyz | unknown | 2026-01-22 | 2026-01-26 | 2026-01-26 | 40 kB | 6.5 MB | 103.233.249.125 | |
rtt2-img-cn.hb-zpod.com | unknown | 2025-07-02 | 2026-01-22 | 2026-01-22 | 57 kB | 1.6 MB | 0.0.0.0 | |
img.esportsdata.cc | unknown | 2023-06-01 | 2023-07-06 | 2026-01-19 | 952 B | 9.0 kB | 104.26.3.221 |  |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.OpenResty (Web servers)
OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | j127q.xyz | malicious | Sinkholed |
| Quad9 DNS | j127q.xyz | malicious | Sinkholed |
| OpenDNS | j127q.xyz | phishing | Phishing Block |
| DNS4EU | j127q.xyz | malicious | Sinkholed |
| Cloudflare DNS | j127q.xyz | malicious | Sinkholed |
| DNS4EU | ssl.gfw301.top | malicious | Sinkholed |
JavaScript (95)
No JavaScripts
HTTP Transactions (211)
| URL | IP | Response | Size |
|---|