Cloudflare Radar
Suspicious
打开报告secure-gateway324.icu:被列入黑名单的域名,PhishDestroy 于 2026-10-22 检测到。风险:关键(90/100)。注册商:Eranet International。状态:最后已知的活跃状态。托管:Cloudflare, Inc。PhishDestroy 已发送1 份滥用举报。请勿输入登录凭据,也不要连接钱包。
“Verify You're Human”
被列入黑名单的域名: secure-gateway324.icu — 最后已知的活跃状态 (HTTP 200). 证据摘要: VirusTotal 0/92; URLScan capture; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy…
The evidence summary below uses retained observations. Each source keeps its own collection date.
Suspicious
打开报告0 / 92 engine detections
打开报告扫描报告
打开报告3 community references
打开报告无威胁标记
打开报告页面快照
打开报告结果反映各来源的采集时间。零检出不代表安全。OTX 引用为社区发布的内容。
已存档的页面、网络和扫描器观测结果,按来源和观测时间分组。
观察到: · Retrieved:
| Uuid | 01a163c8-4230-7548-8f70-0232e46c81d0 |
|---|---|
| Final url | https://secure-gateway324.icu/ |
| 状态 | 403 |
| 已重定向 | https-only |
| Redirects | [
{
"to": "https://secure-gateway324.icu/",
"from": "http://secure-gateway324.icu/",
"status": 307
},
{
"to": "https://secure-gateway324.icu/",
"from": "https://secure-gateway324.icu/",
"status": 307
}
] |
| Ip | 172.67.147.159 |
| Contacted domains | [
"challenges.cloudflare.com"
] |
| Contacted IP addresses | [
"104.18.94.41",
"172.67.147.159"
] |
| Asns | [
"13335"
] |
| Linked domains | [
"www.cloudflare.com"
] |
| Document hash | d6ea78b794a6d525000efe002ca2b186f5e4a74933e1a68963d951501218febd |
| Script hashes | [
"662e7787de9198f8a3afe22533271463c22f4cce93ce4ef377f6109d82b6e9bc"
] |
| Globals | [
"_cf_chl_opt",
"NmGWd6",
"vUAjb0",
"zCGb4",
"runProgram",
"AGRfA7",
"qrht8",
"LeviO5",
"qpPe1",
"atAFr0",
"SABtz7",
"FIac3",
"RpzJz6",
"QSqpx9",
"ueZh9",
"FBBK4",
"ZliED2",
"HKul9",
"THirw9",
"IXEYu6",
"nOLY0",
"DraY9",
"vyix0",
"uEeN6",
"nTlR0",
"AwUcP3",
"MkvrI5",
"MpSwI7",
"xrbo0",
"vMhC1",
"angular",
"vvfHL3",
"lffN9",
"dSvRK1",
"turnstile",
"QBEM0",
"AgLL2",
"wEyW4",
"THSr2"
] |
| Tls | {
"san": [
"*.secure-gateway324.icu",
"secure-gateway324.icu"
],
"cipher": "AES_128_GCM",
"issuer": "YE2",
"subject": "secure-gateway324.icu",
"protocol": "TLS 1.3",
"valid_to": "2027-01-18T13:38:58Z",
"valid_from": "2026-10-20T13:38:59Z"
} |
| 域名年龄(天) | 1 |
| Apex age days | 1 |
| Tls age days | 1 |
| TLS 有效天数 | 89 |
| Requests | 9 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 92,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
} |
| HTTP headers | {
"server": "cloudflare",
"content-type": "text/html; charset=UTF-8",
"content-security-policy": "default-src 'none'; script-src 'nonce-I0AkTzGfcXYHRQ0wN5iLvz' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.clou",
"x-frame-options": "SAMEORIGIN",
"x-content-type-options": "nosniff",
"referrer-policy": "same-origin",
"permissions-policy": "accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),s",
"cross-origin-opener-policy": "same-origin",
"cross-origin-resource-policy": "same-origin",
"cross-origin-embedder-policy": "require-corp"
} |
观察到: · Retrieved:
| Uuid | 2a040267-4afd-4c02-8d0c-ab698f1d36fc |
|---|---|
| Final url | https://secure-gateway324.icu/ |
| 状态 | 403 |
| History | [
{
"url": "https://secure-gateway324.icu/",
"status": 403
}
] |
| DOM structure hash | 9b0956dce985a1d6b8f18fbb19e60968c1afcc397d1b2ce78fe9fc0e0f4b6be2 |
| Document hash | 086d6ebf5f2ff42e7851eb8197a05187aeb8811501f3ddda2224e0bc7caf9e88 |
| 域名风险 | [
"Newly Seen Domains",
"Security Risks",
"New Domains"
] |
| Radar rank | {
"bucket": ">200000"
} |
| DNS 记录 | [
{
"name": "secure-gateway324.icu",
"type": "A",
"value": "104.21.28.216"
},
{
"name": "secure-gateway324.icu",
"type": "A",
"value": "172.67.147.159"
},
{
"name": "secure-gateway324.icu",
"type": "AAAA",
"value": "2606:4700:3037::6815:1cd8"
},
{
"name": "secure-gateway324.icu",
"type": "AAAA",
"value": "2606:4700:3036::ac43:939f"
}
] |
| DNSSEC 有效 | false |
| Ip | 104.21.28.216 |
| 注册记录 | {
"registrar": "Eranet International Limited",
"created": "2026-10-20T14:30:06Z",
"updated": "2026-10-20T14:30:07Z",
"expires": "2027-10-20T23:59:59Z",
"nameservers": [
"aurora.ns.cloudflare.com",
"rajeev.ns.cloudflare.com"
]
} |
观察到: · Retrieved:
| Vendor result counts | {
"timeout": 0,
"harmless": 55,
"malicious": 0,
"suspicious": 0,
"undetected": 37
} |
|---|---|
| Reputation | 0 |
| 注册商 | ERANET INTERNATIONAL LIMITED |
| 创建 | 2026-10-20T22:30:06Z |
| Expires | 2027-10-20T23:59:59Z |
| Updated | 2026-10-20T14:30:07Z |
| 首次发现 | 2026-10-20T14:39:06Z |
| DNS 记录 | [
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:3037::6815:1cd8"
},
{
"ttl": 21600,
"type": "NS",
"value": "rajeev.ns.cloudflare.com"
},
{
"ttl": 21600,
"type": "NS",
"value": "aurora.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:3036::ac43:939f"
},
{
"ttl": 1800,
"type": "SOA",
"rname": "dns.cloudflare.com",
"value": "aurora.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "A",
"value": "104.21.28.216"
},
{
"ttl": 300,
"type": "A",
"value": "172.67.147.159"
}
] |
| Dns at | 2026-10-22T13:30:44Z |
| Jarm | 27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c |
| Certificate | {
"san": [
"*.secure-gateway324.icu",
"secure-gateway324.icu"
],
"issuer": "Let's Encrypt / YE2",
"serial": "654633a57b26517b27fa35115132faeadfa",
"sha256": "c0c0b3794078ff90d3d759ca542028b13bbf3e67e9aa41875280dcaebefb6220",
"subject": "secure-gateway324.icu",
"valid_to": "2027-01-18T13:38:58Z",
"valid_from": "2026-10-20T13:38:59Z"
} |
| 注册记录 | {
"registrar": "ERANET INTERNATIONAL LIMITED",
"registrar_iana_id": "1868",
"registrar_url": "http://www.eranet.com",
"created": "2026-10-20T14:30:06Z",
"updated": "2026-10-20T00:00:00Z",
"expires": "2027-10-20T00:00:00Z",
"status": [
"addPeriod",
"clientTransferProhibited",
"serverTransferProhibited"
],
"nameservers": [
"aurora.ns.cloudflare.com",
"rajeev.ns.cloudflare.com"
],
"dnssec": "unsigned"
} |
| Mail configuration | {
"spf_lookups": 0
} |
|---|---|
| CAA 记录 | {
"domain": "secure-gateway324.icu"
} |
| Protective DNS results | {
"resolvers": 12,
"blocked_count": 0
} |
| 页面标题与元数据 | {
"title": "Verify You're Human"
} |
| Trackers | {
"requests": 1
} |
| 表单与混合内容 | {
"third_party_scripts": 0
} |
| 状态 | {
"up": true,
"code": 200,
"timings": {
"dns": 5,
"tls": 31,
"wait": 226,
"connect": 7,
"download": 1
},
"response_ms": 270
} |
| TLS connection | {
"alpn": "h2",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1",
"TLSv1.1",
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
} |
| Ports | {
"open": [
80,
443,
8080
]
} |
| Carbon | {
"bytes": 9086,
"co2_grams": 0.0003,
"cleaner_than": 74
} |
| Dns server | {
"ns": [
{
"ip": "108.162.193.224",
"host": "rajeev.ns.cloudflare.com"
},
{
"ip": "108.162.194.110",
"host": "aurora.ns.cloudflare.com"
}
],
"zone": "secure-gateway324.icu"
} |
| Location | {
"ip": "2606:4700:3036::ac43:939f",
"asn": "13335",
"org": "Cloudflare, Inc.",
"city": "San Francisco",
"country": "US"
} |
| Ssl | {
"issuer": "Let's Encrypt / YE2",
"subject": "secure-gateway324.icu"
} |
| DNS 记录 | {
"A": [
"172.67.147.159",
"104.21.28.216"
],
"NS": [
"aurora.ns.cloudflare.com",
"rajeev.ns.cloudflare.com"
],
"SOA": "{\"nsname\": \"aurora.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2418021472, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
"AAAA": [
"2606:4700:3037::6815:1cd8",
"2606:4700:3036::ac43:939f"
]
} |
| Dnssec | {
"ds": false,
"rrsig": false,
"dnskey": false
} |
| Hsts | {
"message": "Site does not serve any HSTS headers."
} |
| HTTP security policies | {
"xFrameOptions": false,
"referrerPolicy": false,
"xXSSProtection": false,
"permissionsPolicy": false,
"xContentTypeOptions": false,
"contentSecurityPolicy": false,
"strictTransportPolicy": false,
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
} |
| Firewall | {
"waf": "Cloudflare",
"has_waf": true
} |
| Get ip | {
"ip": "2606:4700:3036::ac43:939f",
"family": 6
} |
| Redirects | {
"chain": [
"https://secure-gateway324.icu"
]
} |
| Tech stack | {
"technologies": [
"Node.js",
"Express",
"Cloudflare",
"HTTP/3"
]
} |
| 注册记录 | {
"registrar": "Eranet International Limited",
"created": "2026-10-20T14:30:06Z",
"updated": "2026-10-20T14:30:07Z",
"expires": "2027-10-20T23:59:59Z",
"status": [
"serverTransferProhibited https://icann.org/epp",
"clientTransferProhibited https://icann.org/epp",
"addPeriod https://icann.org/epp"
],
"nameservers": [
"aurora.ns.cloudflare.com",
"rajeev.ns.cloudflare.com"
]
} |
| HTTP headers | {
"headers": {
"server": "cloudflare",
"content-type": "text/html; charset=utf-8",
"x-powered-by": "Express"
}
} |
不是。PhishDestroy 将 secure-gateway324.icu 归类为“被列入黑名单的域名”(风险:关键,90/100),首次检测于 2026-10-22。请将该网站视为不安全。
不安全。请勿在 secure-gateway324.icu 连接钱包、签署消息或批准代币。钓鱼网站会请求授权(approve、setApprovalForAll、Permit2),让运营者转走你的资产,而已确认的交易无法撤销。
更改你在该网站输入过的所有密码,并开启双重验证。如果你连接过钱包或签署过任何内容,请撤销授权,并将剩余资金转到新钱包;切勿透露助记词。分步指南:紧急处理指南。
最近检查
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
对于该 gTLD,上述注册商依据 ICANN 认证协议运营。以下链接提供官方收费标准及现行的 DNS 滥用合规指南。
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Edge-IP 声誉不属于此域。
aurora.ns.cloudflare.comrajeev.ns.cloudflare.com位置信息描述的是 IP 网络。
c0c0b3794078ff90d3d759ca542028b13bbf3e67e9aa41875280dcaebefb6220*.secure-gateway324.icusecure-gateway324.icu已保存的证书元数据。未带时区的证书日期按存档原样显示。传输加密并不能证明该网站值得信任。
Google PageSpeed Insights — 移动端性能审核: secure-gateway324.icu · checked Oct 22, 2026
估算时间描述的是一个观测时间窗口。它并不能证明注册商采取了措施,也不代表网站变为不可访问的确切时刻。
比较浏览器与爬虫各自收到的内容,并检查是否存在 Keitaro 流量分发。
secure-gateway324.icu
PD-20261022-64AF35 Recipient: support@eranet.com, support@tnet.hk, info@todaynic.com AUP & Terms of Service Violations: Acceptable Use Policy: Active phishing operations targeting internet users directly violate standard AUP provisions prohibiting fraud and deceptive practices. Terms of Service: Material breach of service terms regarding malicious use, providing contractual justification for immediate suspension. Applicable Legal Framework (US): 18 U.S.C. § 1343 - Wire Fraud 18 U.S.C. § 1030 - Computer Fraud and Abuse Act (CFAA) 15 U.S.C. § 45 - FTC Act (Deceptive Practices) Federal laws prohibit wire fraud, computer fraud, and deceptive business practices. Investigation Notice: We fully respect your internal investigation processes and discretion. Prompt remediation protects innocent users while mitigating regulatory compliance scrutiny, legal liability, and brand reputation risks associated with ongoing malicious infrastructure.
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
选择您所在的国家/地区以获取 官方网络犯罪联系人 或 创建投诉草稿 →。
Template-based draft · optional AI wording assistance requires separate consent
请根据您提供过的信息选择相应的步骤。请将本报告的副本与您自己的记录一并保存。
停止使用可疑网站。请通过官方应用或您已信任的网址访问真正的服务。
请将原始邮件、收据、消息和截图保存在安全的地方。基于事实的时间线有助于受理机构了解事件经过。 IC3 evidence guidance ↗
secure-gateway324.icu)即使你并不了解所有细节—— 不管怎样都要提交报告. 即使信息不完整,对调查仍有帮助。
举报并不能保证追回损失或启动调查,但及时、准确的交易数据可以帮助执法机构和服务提供商追踪事件。
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
本报告汇总了已保存的页面快照、注册与网络记录、扫描器结果以及 PhishDestroy 举报历史。每个来源均保留各自的观测日期。打开来源报告即可查看原始结果。
快照记录的是当时显示的内容。扫描器结果记录的是该服务商在检查时的评估。有效证书或零检出结果都不能保证安全。