Report - novadax-com-br.site/cdn-cgi/phish-bypass?atok=zDF4mb2e5flXENA6NhzVQ.57_El3aEOMYGIagvTfEyo-1743528471.9585261-0.0.1.1-%2F

Report Overview

Visited public
2025-04-02 11:34:31
Tags
Submit Tags
URL
novadax-com-br.site/cdn-cgi/phish-bypass?atok=zDF4mb2e5flXENA6NhzVQ.57_El3aEOMYGIagvTfEyo-1743528471.9585261-0.0.1.1-%2F
Finishing URL
novadax-com-br.site/cdn-cgi/phish-bypass?atok=zDF4mb2e5flXENA6NhzVQ.57_El3aEOMYGIagvTfEyo-1743528471.9585261-0.0.1.1-%2F
IP / ASN
172.67.217.170
#13335 CLOUDFLARENET
Title
403 Forbidden

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
novadax-com-br.site	unknown	2025-03-31	2025-04-01	2025-04-01	1.5 kB	6.0 kB	172.67.217.170

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	GET novadax-com-br.site/favicon.ico	172.67.217.170	403 Forbidden	4.6 kB
URL GET novadax-com-br.site/favicon.ico IP 172.67.217.170:80 ASN #13335 CLOUDFLARENET Requested by http://novadax-com-br.site/cdn-cgi/phish-bypass?atok=zDF4mb2e5flXENA6NhzVQ.57_El3aEOMYGIagvTfEyo-1743528471.9585261-0.0.1.1-%2F File type HTML document, ASCII text, with very long lines (4806), with no line terminators Size 4.6 kB (4556 bytes) Hash 8bb4a733fd3b77418b5ed8cd6cae86bc 851d82a861c532ebee6a949e52a8633fbe6fb664 6afd2d6bf59bae57e07413c3785ae1685f85f29d98991f5b5cf2af0bb3bb139c HTTP Headers `GET /favicon.ico HTTP/1.1 Host: novadax-com-br.site User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://novadax-com-br.site/cdn-cgi/phish-bypass?atok=zDF4mb2e5flXENA6NhzVQ.57_El3aEOMYGIagvTfEyo-1743528471.9585261-0.0.1.1-%2F Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Date: Wed, 02 Apr 2025 11:34:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B5quMJkKjL1Lyx9CGsR5AxUw0se9n5QleXUUaZYdpRcuBkZjcIK%2B8WlXtz40rTKz3pcwboI5VvI272SA2Omoa4YhSbus4kYIa2Gr4gnwngkAS85dcHPxfQtyVpPKlhHSGnP8i3p1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 92a003f6d86ab4ff-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60

	GET novadax-com-br.site/cdn-cgi/phish-bypass?atok=zDF4mb2e5flXENA6NhzVQ.57_El3aEOMYGIagvTfEyo-1743528471.9585261-0.0.1.1-%2F	172.67.217.170	403 Forbidden	151 B
URL User Request GET novadax-com-br.site/cdn-cgi/phish-bypass?atok=zDF4mb2e5flXENA6NhzVQ.57_El3aEOMYGIagvTfEyo-1743528471.9585261-0.0.1.1-%2F IP 172.67.217.170:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services Subjectnovadax-com-br.site FingerprintD1:A8:AE:BA:EF:5E:4A:9E:93:31:F6:E1:6D:06:0A:88:4A:82:1D:83 ValidityMon, 31 Mar 2025 13:31:35 GMT - Sun, 29 Jun 2025 14:29:57 GMT File type HTML document, ASCII text, with no line terminators Size 151 B (151 bytes) Hash f3b3b8bce21cef2b66afcdb3da999914 82178c69f404ff625d900a0bf5b29eafc0524a85 f50ef31a0981639697ee35ea671b25571f369746a3fb0983da8611a1acd2f357 HTTP Headers GET /cdn-cgi/phish-bypass?atok=zDF4mb2e5flXENA6NhzVQ.57_El3aEOMYGIagvTfEyo-1743528471.9585261-0.0.1.1-%2F HTTP/1.1 Host: novadax-com-br.site User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 403 Forbidden date: Wed, 02 Apr 2025 11:34:09 GMT content-type: text/html server: cloudflare cf-ray: 92a003f33c0156ab-OSL x-frame-options: DENY x-content-type-options: nosniff content-encoding: gzip X-Firefox-Spdy: h2`

	GET novadax-com-br.site/cdn-cgi/phish-bypass?atok=zDF4mb2e5flXENA6NhzVQ.57_El3aEOMYGIagvTfEyo-1743528471.9585261-0.0.1.1-%2F	172.67.217.170	403 Forbidden	151 B
URL User Request GET novadax-com-br.site/cdn-cgi/phish-bypass?atok=zDF4mb2e5flXENA6NhzVQ.57_El3aEOMYGIagvTfEyo-1743528471.9585261-0.0.1.1-%2F IP 172.67.217.170:80 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with no line terminators Size 151 B (151 bytes) Hash f3b3b8bce21cef2b66afcdb3da999914 82178c69f404ff625d900a0bf5b29eafc0524a85 f50ef31a0981639697ee35ea671b25571f369746a3fb0983da8611a1acd2f357 HTTP Headers `GET /cdn-cgi/phish-bypass?atok=zDF4mb2e5flXENA6NhzVQ.57_El3aEOMYGIagvTfEyo-1743528471.9585261-0.0.1.1-%2F HTTP/1.1 Host: novadax-com-br.site User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 403 Forbidden Date: Wed, 02 Apr 2025 11:34:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Server: cloudflare CF-RAY: 92a003f42b29b4ff-OSL X-Frame-Options: DENY X-Content-Type-Options: nosniff Content-Encoding: gzip`