Report - yijianjiaoben.hunter15.eu.org/cdn-cgi/phish-bypass?atok=2k_XTY8w2eB9mXkWN3Q8wDpDD_rRZM3yLrnDqzPOAdg-1746587066-0.0.1.1-%2F

Report Overview

Visitedpublic

2025-05-07 14:12:09

Tags

Submit Tags

URL

yijianjiaoben.hunter15.eu.org/cdn-cgi/phish-bypass?atok=2k_XTY8w2eB9mXkWN3Q8wDpDD_rRZM3yLrnDqzPOAdg-1746587066-0.0.1.1-%2F

Finishing URL

yijianjiaoben.hunter15.eu.org/cdn-cgi/phish-bypass?atok=2k_XTY8w2eB9mXkWN3Q8wDpDD_rRZM3yLrnDqzPOAdg-1746587066-0.0.1.1-%2F

IP / ASN

172.67.208.111

#13335 CLOUDFLARENET

Title

403 Forbidden

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

0

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
yijianjiaoben.hunter15.eu.org	unknown	unknown	No data	No data	1.5 kB	6.0 kB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	GET yijianjiaoben.hunter15.eu.org/cdn-cgi/phish-bypass?atok=2k_XTY8w2eB9mXkWN3Q8wDpDD_rRZM3yLrnDqzPOAdg-1746587066-0.0.1.1-%2F	188.114.96.1	403 Forbidden	151 B
URL User Request GET HTTPS yijianjiaoben.hunter15.eu.org/cdn-cgi/phish-bypass?atok=2k_XTY8w2eB9mXkWN3Q8wDpDD_rRZM3yLrnDqzPOAdg-1746587066-0.0.1.1-%2F IP / ASN 188.114.96.1 #13335 CLOUDFLARENET Requested byN/A Resource Info File typeHTML document, ASCII text, with CRLF line terminators First Seen2023-04-14 Last Seen2025-08-09 Times Seen113379 Size151 B (151 bytes) MD5c371fa8374a06a3c0535fc341d454236 SHA1441671eacb9398792d435443beaddd3fc5fa1910 SHA256eed0b81a2fbdd1c5a9f80705885fc5bbf346ba428a79ff7a13ec8491c6a8e96c Certificate Info IssuerGoogle Trust Services Subjecthunter15.eu.org FingerprintD0:6A:64:29:15:9B:7D:DE:D5:CD:A2:69:73:87:90:24:3B:73:53:0E ValidityTue, 22 Apr 2025 00:01:42 GMT - Mon, 21 Jul 2025 01:01:25 GMT HTTP Headers GET /cdn-cgi/phish-bypass?atok=2k_XTY8w2eB9mXkWN3Q8wDpDD_rRZM3yLrnDqzPOAdg-1746587066-0.0.1.1-%2F HTTP/1.1 Host: yijianjiaoben.hunter15.eu.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 403 Forbidden date: Wed, 07 May 2025 14:11:34 GMT content-type: text/html content-encoding: gzip x-content-type-options: nosniff server: cloudflare cf-ray: 93c14eae6cbab505-OSL x-frame-options: DENY X-Firefox-Spdy: h2`

	GET yijianjiaoben.hunter15.eu.org/cdn-cgi/phish-bypass?atok=2k_XTY8w2eB9mXkWN3Q8wDpDD_rRZM3yLrnDqzPOAdg-1746587066-0.0.1.1-%2F	188.114.96.1	403 Forbidden	151 B
URL User Request GET HTTP yijianjiaoben.hunter15.eu.org/cdn-cgi/phish-bypass?atok=2k_XTY8w2eB9mXkWN3Q8wDpDD_rRZM3yLrnDqzPOAdg-1746587066-0.0.1.1-%2F IP / ASN 188.114.96.1 #13335 CLOUDFLARENET Requested byN/A Resource Info File typeHTML document, ASCII text, with CRLF line terminators First Seen2023-04-14 Last Seen2025-08-09 Times Seen113379 Size151 B (151 bytes) MD5c371fa8374a06a3c0535fc341d454236 SHA1441671eacb9398792d435443beaddd3fc5fa1910 SHA256eed0b81a2fbdd1c5a9f80705885fc5bbf346ba428a79ff7a13ec8491c6a8e96c HTTP Headers `GET /cdn-cgi/phish-bypass?atok=2k_XTY8w2eB9mXkWN3Q8wDpDD_rRZM3yLrnDqzPOAdg-1746587066-0.0.1.1-%2F HTTP/1.1 Host: yijianjiaoben.hunter15.eu.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 403 Forbidden Date: Wed, 07 May 2025 14:11:34 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Server: cloudflare CF-RAY: 93c14eafa81056a5-OSL X-Frame-Options: DENY X-Content-Type-Options: nosniff Content-Encoding: gzip`

	GET yijianjiaoben.hunter15.eu.org/favicon.ico	188.114.96.1	403 Forbidden	4.6 kB
URL GET HTTP yijianjiaoben.hunter15.eu.org/favicon.ico IP / ASN 188.114.96.1 #13335 CLOUDFLARENET Requested byhttp://yijianjiaoben.hunter15.eu.org/cdn-cgi/phish-bypass?atok=2k_XTY8w2eB9mXkWN3Q8wDpDD_rRZM3yLrnDqzPOAdg-1746587066-0.0.1.1-%2F Resource Info File typeHTML document, ASCII text, with very long lines (394) First Seen2025-05-07 Last Seen2025-05-07 Times Seen1 Size4.6 kB (4556 bytes) MD5392a4e88970adbbb3059130cfecb155f SHA1f74f1ae6e7abd161c2c823302e6c7248ee8a378e SHA25638dbe5af8dad6dbc9ff575318a83a7f84e619473cd9d79125a1fbefadd7cd89d HTTP Headers `GET /favicon.ico HTTP/1.1 Host: yijianjiaoben.hunter15.eu.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://yijianjiaoben.hunter15.eu.org/cdn-cgi/phish-bypass?atok=2k_XTY8w2eB9mXkWN3Q8wDpDD_rRZM3yLrnDqzPOAdg-1746587066-0.0.1.1-%2F Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Date: Wed, 07 May 2025 14:11:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6%2FNlhn3MrOi04ebzAeyS6alPDWlfp0E2iQEFv%2FGOUNUmdPy0%2BYKfuUrD71vcNAFtu9psDMjhYBKbsZyeGJXwqwQv2asU1gCyHPcNpKKrHLUVZis226HLJwJFbMo5l3uLu4QJZqnNUK4pPRBz06VD6g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 93c14eb0ea6e56a5-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60