| dhl-verify.phoenixsongsbio.org/cdn-cgi/phish-bypass?atok=0nJiX_YJkTdpTMgYUnGzKhHByOTZIVtR27onBtEYURw-1713993520-0.0.1.1-/end/dhl/?6b8y09jtfvgkcnmwbshdfum7pez21rsynivihlepajqurgalcd4x5q3wxktooz=jxfow8tiw0z7n24cl1c9puaym6qrdbvgpremhhfqyzdssikl3xkv5toabenguj&0=b*************@m***.com&dqowcyzolh9vmemzd3ntgnr7ecixks4bpbrgs8flh62vajx1jf0auqkiy5utpw=daosr5rjbfpjzbd...~311~...xm03e2tsv8hcuwvztwkmqne6nopfx& | 188.114.96.1 | 403 Forbidden | 114 B |
URL User Request GET HTTP/1.1dhl-verify.phoenixsongsbio.org/cdn-cgi/phish-bypass?atok=0nJiX_YJkTdpTMgYUnGzKhHByOTZIVtR27onBtEYURw-1713993520-0.0.1.1-/end/dhl/?6b8y09jtfvgkcnmwbshdfum7pez21rsynivihlepajqurgalcd4x5q3wxktooz=jxfow8tiw0z7n24cl1c9puaym6qrdbvgpremhhfqyzdssikl3xkv5toabenguj&0=b*************@m***.com&dqowcyzolh9vmemzd3ntgnr7ecixks4bpbrgs8flh62vajx1jf0auqkiy5utpw=daosr5rjbfpjzbd...~311~...xm03e2tsv8hcuwvztwkmqne6nopfx& IP188.114.96.1:80
File typeHTML document, ASCII text, with CRLF line terminators Hashc371fa8374a06a3c0535fc341d454236 441671eacb9398792d435443beaddd3fc5fa1910 eed0b81a2fbdd1c5a9f80705885fc5bbf346ba428a79ff7a13ec8491c6a8e96c
GET /cdn-cgi/phish-bypass?atok=0nJiX_YJkTdpTMgYUnGzKhHByOTZIVtR27onBtEYURw-1713993520-0.0.1.1-/end/dhl/?6b8y09jtfvgkcnmwbshdfum7pez21rsynivihlepajqurgalcd4x5q3wxktooz=jxfow8tiw0z7n24cl1c9puaym6qrdbvgpremhhfqyzdssikl3xkv5toabenguj&0=b*************@m***.com&dqowcyzolh9vmemzd3ntgnr7ecixks4bpbrgs8flh62vajx1jf0auqkiy5utpw=daosr5rjbfpjzbd...~311~...xm03e2tsv8hcuwvztwkmqne6nopfx& HTTP/1.1
Host: dhl-verify.phoenixsongsbio.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Thu, 25 Apr 2024 17:22:12 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
CF-RAY: 87a0038daf91b512-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Encoding: gzip
|
| dhl-verify.phoenixsongsbio.org/favicon.ico | 188.114.96.1 | 200 OK | 1.9 kB |
URL GET HTTP/1.1dhl-verify.phoenixsongsbio.org/favicon.ico IP188.114.96.1:80
Requested byhttp://dhl-verify.phoenixsongsbio.org/cdn-cgi/phish-bypass?atok=0nJiX_YJkTdpTMgYUnGzKhHByOTZIVtR27onBtEYURw-1713993520-0.0.1.1-/end/dhl/?6b8y09jtfvgkcnmwbshdfum7pez21rsynivihlepajqurgalcd4x5q3wxktooz=jxfow8tiw0z7n24cl1c9puaym6qrdbvgpremhhfqyzdssikl3xkv5toabenguj&0=b*************@m***.com&dqowcyzolh9vmemzd3ntgnr7ecixks4bpbrgs8flh62vajx1jf0auqkiy5utpw=daosr5rjbfpjzbd...~311~...xm03e2tsv8hcuwvztwkmqne6nopfx&
File typeHTML document, ASCII text, with very long lines (394) Hash096bce177af216927f8823affebd9999 364f51352709a9c1a52f09d01bb74971cc836362 57fc38dab1f87e578cc5b520ef28eaccd8777d141ade66ff604fd6dd11becb20
GET /favicon.ico HTTP/1.1
Host: dhl-verify.phoenixsongsbio.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dhl-verify.phoenixsongsbio.org/cdn-cgi/phish-bypass?atok=0nJiX_YJkTdpTMgYUnGzKhHByOTZIVtR27onBtEYURw-1713993520-0.0.1.1-/end/dhl/?6b8y09jtfvgkcnmwbshdfum7pez21rsynivihlepajqurgalcd4x5q3wxktooz=jxfow8tiw0z7n24cl1c9puaym6qrdbvgpremhhfqyzdssikl3xkv5toabenguj&0=b*************@m***.com&dqowcyzolh9vmemzd3ntgnr7ecixks4bpbrgs8flh62vajx1jf0auqkiy5utpw=daosr5rjbfpjzbd...~311~...xm03e2tsv8hcuwvztwkmqne6nopfx&
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 17:22:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G8IlnHrCTt9JCKwTypy26szq4Ke5V0KcVBMQz2X4R5rtXWETznWZPpS9mg64W%2FvKayhA%2FK2x6Qva5wF0Qr9O4ldmbUXOPK6HLDrmML6Ot6ppycS4vf2kBxiEFix%2BG3feotVoZfRwjC0%2BQdeHn95dr3s%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 87a0038eb89cb512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
| dhl-verify.phoenixsongsbio.org/cdn-cgi/phish-bypass?atok=0nJiX_YJkTdpTMgYUnGzKhHByOTZIVtR27onBtEYURw-1713993520-0.0.1.1-/end/dhl/?6b8y09jtfvgkcnmwbshdfum7pez21rsynivihlepajqurgalcd4x5q3wxktooz=jxfow8tiw0z7n24cl1c9puaym6qrdbvgpremhhfqyzdssikl3xkv5toabenguj&0=b*************@m***.com&dqowcyzolh9vmemzd3ntgnr7ecixks4bpbrgs8flh62vajx1jf0auqkiy5utpw=daosr5rjbfpjzbd...~311~...xm03e2tsv8hcuwvztwkmqne6nopfx& | 188.114.96.1 | 403 Forbidden | 5.1 kB |
URL User Request GET HTTP/1.1dhl-verify.phoenixsongsbio.org/cdn-cgi/phish-bypass?atok=0nJiX_YJkTdpTMgYUnGzKhHByOTZIVtR27onBtEYURw-1713993520-0.0.1.1-/end/dhl/?6b8y09jtfvgkcnmwbshdfum7pez21rsynivihlepajqurgalcd4x5q3wxktooz=jxfow8tiw0z7n24cl1c9puaym6qrdbvgpremhhfqyzdssikl3xkv5toabenguj&0=b*************@m***.com&dqowcyzolh9vmemzd3ntgnr7ecixks4bpbrgs8flh62vajx1jf0auqkiy5utpw=daosr5rjbfpjzbd...~311~...xm03e2tsv8hcuwvztwkmqne6nopfx& IP188.114.96.1:80
File typegzip compressed data, from Unix Hashefdaa7cdbcc573aedaf1190e257f6131 56c72b5befefc3013a8fbd147ef512526c4c7287 f9f96f14ed29b8b219f706e3e5a9f4a0d2e11d8dde7618d93a0b1be28c112538
GET /cdn-cgi/phish-bypass?atok=0nJiX_YJkTdpTMgYUnGzKhHByOTZIVtR27onBtEYURw-1713993520-0.0.1.1-/end/dhl/?6b8y09jtfvgkcnmwbshdfum7pez21rsynivihlepajqurgalcd4x5q3wxktooz=jxfow8tiw0z7n24cl1c9puaym6qrdbvgpremhhfqyzdssikl3xkv5toabenguj&0=b*************@m***.com&dqowcyzolh9vmemzd3ntgnr7ecixks4bpbrgs8flh62vajx1jf0auqkiy5utpw=daosr5rjbfpjzbd...~311~...xm03e2tsv8hcuwvztwkmqne6nopfx& HTTP/1.1
Host: dhl-verify.phoenixsongsbio.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Thu, 25 Apr 2024 17:22:12 GMT
content-type: text/html
server: cloudflare
cf-ray: 87a0038d1d9656c4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|