GET rapidnexus.cfd/cdn-cgi/phish-bypass?atok=Ob96dxfh0BgNMFoUCHdJ3Up0zVg2NWLOFcdwoCKedRA-1747205764.7214403-0.0.1.1-%2Fcdn-cgi%2Fphish-bypass%3Fatok%3DfGlZ8k6G8ryQVLY57RosVolh.aF86eQ7gO7DD_KJniI-1747118088.1746972-0.0.1.1-%252Fcdn-cgi%252Fphish-bypass%253Fatok%253D4fc1cyxz3mNQqxrfjRu29j2Zutw6PY8uD0dA9uiXrB0-1747046320.7597058-0.0.1.1-%25252Fcdn-cgi%25252Fphish-bypass%25253Fatok%25253DKd7W024euCQ6c7J7xY0j9E8dHRuMCsAc_jIoMlw.i0g-1746967820.6855943-0.0.1.1-%2525252Fcdn-cgi%2525252Fphish-bypass%2525253Fatok%2525253DhuYx6h6o42ze.eSvyG_SbIJdFFg1Se1I.mZRBmeLbOk-1746901678.9608774-0.0.1.1-%252525252Fcdn-cgi%252525252Fphish-bypass%252525253Fatok%252525253D8dYT_ctT6Xx4skl0fxPIvxSIRynUvOKJfx1vPXYQVQg-1746836630.6860924-0.0.1.1-%25252525252Fcdn-cgi%25252525252Fphish-bypass%25252525253Fatok%25252525253D3jwh76QdmGWwqnpsc6bWS5ohgz6meROx2wEj8BVKHco-1746780336.851223-0.0.1.1-%2525252525252Fcdn-cgi%2525252525252Fphish-bypass%2525252525253Fatok%2525252525253Dng63bBlaHeAbr36bK155f78x2pnLlSdN90K7dOT.yLU-1746720442.0555556-0.0.1.1-%252525252525252Fcdn-cgi%252525252525252Fphish-bypass%252525252525253Fatok%252525252525253DImPk6WhC5wUxuTraur0RL1Yi6Jo1Dewv0gYRG24t0GQ-1746652420.8749292-0.0.1.1-%25252525252525252Fcdn-cgi%25252525252525252Fphish-bypass%25252525252525253Fatok%25252525252525253Dfq3ffQOPvBN5dv6EuJd9mFOQrK2nI7KDUJtz6KpymMo-1746599446.444562-0.0.1.1-%2525252525252525252Fcdn-cgi%2525252525252525252Fphish-bypass%2525252525252525253Fatok%2525252525252525253DmtC.s0OrtqYkBBy4KoImgKGgWDqsNvSQc9OPsx.NqJg-1746529575.5740595-0.0.1.1-%252525252525252525252Fcdn-cgi%252525252525252525252Fphish-bypass%252525252525252525253Fatok%252525252525252525253Dk5mSn70LExdlIXDU4WJoPkGMNszWp9bU1eZdZa8UAp8-1746475067.12341-0.0.1.1-%25252525252525252525252Fcdn-cgi%25252525252525252525252Fphish-bypass%25252525252525252525253Fatok%25252525252525252525253DHT1hACPzB6M_tZ01ynKQBRIfAG8ZDCPZnZVcJ4REZOM-1746412309.107866-0.0.1.1-%2525252525252525252525252Fcdn-cgi%2525252525252525252525252Fphish-bypass%2525252525252525252525253Fatok%2525252525252525252525253DG
403 Forbidden 6.9 kB URL User Request GET rapidnexus.cfd/cdn-cgi/phish-bypass?atok=Ob96dxfh0BgNMFoUCHdJ3Up0zVg2NWLOFcdwoCKedRA-1747205764.7214403-0.0.1.1-%2Fcdn-cgi%2Fphish-bypass%3Fatok%3DfGlZ8k6G8ryQVLY57RosVolh.aF86eQ7gO7DD_KJniI-1747118088.1746972-0.0.1.1-%252Fcdn-cgi%252Fphish-bypass%253Fatok%253D4fc1cyxz3mNQqxrfjRu29j2Zutw6PY8uD0dA9uiXrB0-1747046320.7597058-0.0.1.1-%25252Fcdn-cgi%25252Fphish-bypass%25253Fatok%25253DKd7W024euCQ6c7J7xY0j9E8dHRuMCsAc_jIoMlw.i0g-1746967820.6855943-0.0.1.1-%2525252Fcdn-cgi%2525252Fphish-bypass%2525253Fatok%2525253DhuYx6h6o42ze.eSvyG_SbIJdFFg1Se1I.mZRBmeLbOk-1746901678.9608774-0.0.1.1-%252525252Fcdn-cgi%252525252Fphish-bypass%252525253Fatok%252525253D8dYT_ctT6Xx4skl0fxPIvxSIRynUvOKJfx1vPXYQVQg-1746836630.6860924-0.0.1.1-%25252525252Fcdn-cgi%25252525252Fphish-bypass%25252525253Fatok%25252525253D3jwh76QdmGWwqnpsc6bWS5ohgz6meROx2wEj8BVKHco-1746780336.851223-0.0.1.1-%2525252525252Fcdn-cgi%2525252525252Fphish-bypass%2525252525253Fatok%2525252525253Dng63bBlaHeAbr36bK155f78x2pnLlSdN90K7dOT.yLU-1746720442.0555556-0.0.1.1-%252525252525252Fcdn-cgi%252525252525252Fphish-bypass%252525252525253Fatok%252525252525253DImPk6WhC5wUxuTraur0RL1Yi6Jo1Dewv0gYRG24t0GQ-1746652420.8749292-0.0.1.1-%25252525252525252Fcdn-cgi%25252525252525252Fphish-bypass%25252525252525253Fatok%25252525252525253Dfq3ffQOPvBN5dv6EuJd9mFOQrK2nI7KDUJtz6KpymMo-1746599446.444562-0.0.1.1-%2525252525252525252Fcdn-cgi%2525252525252525252Fphish-bypass%2525252525252525253Fatok%2525252525252525253DmtC.s0OrtqYkBBy4KoImgKGgWDqsNvSQc9OPsx.NqJg-1746529575.5740595-0.0.1.1-%252525252525252525252Fcdn-cgi%252525252525252525252Fphish-bypass%252525252525252525253Fatok%252525252525252525253Dk5mSn70LExdlIXDU4WJoPkGMNszWp9bU1eZdZa8UAp8-1746475067.12341-0.0.1.1-%25252525252525252525252Fcdn-cgi%25252525252525252525252Fphish-bypass%25252525252525252525253Fatok%25252525252525252525253DHT1hACPzB6M_tZ01ynKQBRIfAG8ZDCPZnZVcJ4REZOM-1746412309.107866-0.0.1.1-%2525252525252525252525252Fcdn-cgi%2525252525252525252525252Fphish-bypass%2525252525252525252525253Fatok%2525252525252525252525253DG
IP
Certificate IssuerGoogle Trust Services
Subjectrapidnexus.cfd
FingerprintA3:3D:98:D1:2E:09:2C:EA:E6:90:6A:70:25:58:86:76:08:0D:D1:CA
ValidityFri, 25 Apr 2025 08:24:12 GMT - Thu, 24 Jul 2025 09:22:57 GMT
File type HTML document, ASCII text, with very long lines (2150)
Hash bcc5135e0fd2b948d7a68c43e7512cd9
f125bb7274c211e423b487a9f6bfe713f04aa060
d6e05521ac25d42436926230631290e1d10403d3e133c5b40ebd089f61c9b2a4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cdn-cgi/phish-bypass?atok=Ob96dxfh0BgNMFoUCHdJ3Up0zVg2NWLOFcdwoCKedRA-1747205764.7214403-0.0.1.1-%2Fcdn-cgi%2Fphish-bypass%3Fatok%3DfGlZ8k6G8ryQVLY57RosVolh.aF86eQ7gO7DD_KJniI-1747118088.1746972-0.0.1.1-%252Fcdn-cgi%252Fphish-bypass%253Fatok%253D4fc1cyxz3mNQqxrfjRu29j2Zutw6PY8uD0dA9uiXrB0-1747046320.7597058-0.0.1.1-%25252Fcdn-cgi%25252Fphish-bypass%25253Fatok%25253DKd7W024euCQ6c7J7xY0j9E8dHRuMCsAc_jIoMlw.i0g-1746967820.6855943-0.0.1.1-%2525252Fcdn-cgi%2525252Fphish-bypass%2525253Fatok%2525253DhuYx6h6o42ze.eSvyG_SbIJdFFg1Se1I.mZRBmeLbOk-1746901678.9608774-0.0.1.1-%252525252Fcdn-cgi%252525252Fphish-bypass%252525253Fatok%252525253D8dYT_ctT6Xx4skl0fxPIvxSIRynUvOKJfx1vPXYQVQg-1746836630.6860924-0.0.1.1-%25252525252Fcdn-cgi%25252525252Fphish-bypass%25252525253Fatok%25252525253D3jwh76QdmGWwqnpsc6bWS5ohgz6meROx2wEj8BVKHco-1746780336.851223-0.0.1.1-%2525252525252Fcdn-cgi%2525252525252Fphish-bypass%2525252525253Fatok%2525252525253Dng63bBlaHeAbr36bK155f78x2pnLlSdN90K7dOT.yLU-1746720442.0555556-0.0.1.1-%252525252525252Fcdn-cgi%252525252525252Fphish-bypass%252525252525253Fatok%252525252525253DImPk6WhC5wUxuTraur0RL1Yi6Jo1Dewv0gYRG24t0GQ-1746652420.8749292-0.0.1.1-%25252525252525252Fcdn-cgi%25252525252525252Fphish-bypass%25252525252525253Fatok%25252525252525253Dfq3ffQOPvBN5dv6EuJd9mFOQrK2nI7KDUJtz6KpymMo-1746599446.444562-0.0.1.1-%2525252525252525252Fcdn-cgi%2525252525252525252Fphish-bypass%2525252525252525253Fatok%2525252525252525253DmtC.s0OrtqYkBBy4KoImgKGgWDqsNvSQc9OPsx.NqJg-1746529575.5740595-0.0.1.1-%252525252525252525252Fcdn-cgi%252525252525252525252Fphish-bypass%252525252525252525253Fatok%252525252525252525253Dk5mSn70LExdlIXDU4WJoPkGMNszWp9bU1eZdZa8UAp8-1746475067.12341-0.0.1.1-%25252525252525252525252Fcdn-cgi%25252525252525252525252Fphish-bypass%25252525252525252525253Fatok%25252525252525252525253DHT1hACPzB6M_tZ01ynKQBRIfAG8ZDCPZnZVcJ4REZOM-1746412309.107866-0.0.1.1-%2525252525252525252525252Fcdn-cgi%2525252525252525252525252Fphish-bypass%2525252525252525252525253Fatok%2525252525252525252525253DG HTTP/1.1
Host: rapidnexus.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Wed, 14 May 2025 13:21:02 GMT
content-type: text/html; charset=utf-8
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=g%2FGXGei3yOeolA7OGL9zddzR4c8kWG1O%2BAUxnCagdmRs1nBAjDp49de3WedVGXz1VYnXrPh6ZybHDMhfkT0BD4rb5P4p%2BEHNkrAx8QRCtZG6FZOISjyH3lfqSEv2CYjHNw%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
server: cloudflare
cf-ray: 93fab2444e4efeb3-AMS
X-Firefox-Spdy: h2
GET rapidnexus.cfd/cdn-cgi/phish-bypass?atok=Ob96dxfh0BgNMFoUCHdJ3Up0zVg2NWLOFcdwoCKedRA-1747205764.7214403-0.0.1.1-%2Fcdn-cgi%2Fphish-bypass%3Fatok%3DfGlZ8k6G8ryQVLY57RosVolh.aF86eQ7gO7DD_KJniI-1747118088.1746972-0.0.1.1-%252Fcdn-cgi%252Fphish-bypass%253Fatok%253D4fc1cyxz3mNQqxrfjRu29j2Zutw6PY8uD0dA9uiXrB0-1747046320.7597058-0.0.1.1-%25252Fcdn-cgi%25252Fphish-bypass%25253Fatok%25253DKd7W024euCQ6c7J7xY0j9E8dHRuMCsAc_jIoMlw.i0g-1746967820.6855943-0.0.1.1-%2525252Fcdn-cgi%2525252Fphish-bypass%2525253Fatok%2525253DhuYx6h6o42ze.eSvyG_SbIJdFFg1Se1I.mZRBmeLbOk-1746901678.9608774-0.0.1.1-%252525252Fcdn-cgi%252525252Fphish-bypass%252525253Fatok%252525253D8dYT_ctT6Xx4skl0fxPIvxSIRynUvOKJfx1vPXYQVQg-1746836630.6860924-0.0.1.1-%25252525252Fcdn-cgi%25252525252Fphish-bypass%25252525253Fatok%25252525253D3jwh76QdmGWwqnpsc6bWS5ohgz6meROx2wEj8BVKHco-1746780336.851223-0.0.1.1-%2525252525252Fcdn-cgi%2525252525252Fphish-bypass%2525252525253Fatok%2525252525253Dng63bBlaHeAbr36bK155f78x2pnLlSdN90K7dOT.yLU-1746720442.0555556-0.0.1.1-%252525252525252Fcdn-cgi%252525252525252Fphish-bypass%252525252525253Fatok%252525252525253DImPk6WhC5wUxuTraur0RL1Yi6Jo1Dewv0gYRG24t0GQ-1746652420.8749292-0.0.1.1-%25252525252525252Fcdn-cgi%25252525252525252Fphish-bypass%25252525252525253Fatok%25252525252525253Dfq3ffQOPvBN5dv6EuJd9mFOQrK2nI7KDUJtz6KpymMo-1746599446.444562-0.0.1.1-%2525252525252525252Fcdn-cgi%2525252525252525252Fphish-bypass%2525252525252525253Fatok%2525252525252525253DmtC.s0OrtqYkBBy4KoImgKGgWDqsNvSQc9OPsx.NqJg-1746529575.5740595-0.0.1.1-%252525252525252525252Fcdn-cgi%252525252525252525252Fphish-bypass%252525252525252525253Fatok%252525252525252525253Dk5mSn70LExdlIXDU4WJoPkGMNszWp9bU1eZdZa8UAp8-1746475067.12341-0.0.1.1-%25252525252525252525252Fcdn-cgi%25252525252525252525252Fphish-bypass%25252525252525252525253Fatok%25252525252525252525253DHT1hACPzB6M_tZ01ynKQBRIfAG8ZDCPZnZVcJ4REZOM-1746412309.107866-0.0.1.1-%2525252525252525252525252Fcdn-cgi%2525252525252525252525252Fphish-bypass%2525252525252525252525253Fatok%2525252525252525252525253DG
403 Forbidden 151 B URL User Request GET rapidnexus.cfd/cdn-cgi/phish-bypass?atok=Ob96dxfh0BgNMFoUCHdJ3Up0zVg2NWLOFcdwoCKedRA-1747205764.7214403-0.0.1.1-%2Fcdn-cgi%2Fphish-bypass%3Fatok%3DfGlZ8k6G8ryQVLY57RosVolh.aF86eQ7gO7DD_KJniI-1747118088.1746972-0.0.1.1-%252Fcdn-cgi%252Fphish-bypass%253Fatok%253D4fc1cyxz3mNQqxrfjRu29j2Zutw6PY8uD0dA9uiXrB0-1747046320.7597058-0.0.1.1-%25252Fcdn-cgi%25252Fphish-bypass%25253Fatok%25253DKd7W024euCQ6c7J7xY0j9E8dHRuMCsAc_jIoMlw.i0g-1746967820.6855943-0.0.1.1-%2525252Fcdn-cgi%2525252Fphish-bypass%2525253Fatok%2525253DhuYx6h6o42ze.eSvyG_SbIJdFFg1Se1I.mZRBmeLbOk-1746901678.9608774-0.0.1.1-%252525252Fcdn-cgi%252525252Fphish-bypass%252525253Fatok%252525253D8dYT_ctT6Xx4skl0fxPIvxSIRynUvOKJfx1vPXYQVQg-1746836630.6860924-0.0.1.1-%25252525252Fcdn-cgi%25252525252Fphish-bypass%25252525253Fatok%25252525253D3jwh76QdmGWwqnpsc6bWS5ohgz6meROx2wEj8BVKHco-1746780336.851223-0.0.1.1-%2525252525252Fcdn-cgi%2525252525252Fphish-bypass%2525252525253Fatok%2525252525253Dng63bBlaHeAbr36bK155f78x2pnLlSdN90K7dOT.yLU-1746720442.0555556-0.0.1.1-%252525252525252Fcdn-cgi%252525252525252Fphish-bypass%252525252525253Fatok%252525252525253DImPk6WhC5wUxuTraur0RL1Yi6Jo1Dewv0gYRG24t0GQ-1746652420.8749292-0.0.1.1-%25252525252525252Fcdn-cgi%25252525252525252Fphish-bypass%25252525252525253Fatok%25252525252525253Dfq3ffQOPvBN5dv6EuJd9mFOQrK2nI7KDUJtz6KpymMo-1746599446.444562-0.0.1.1-%2525252525252525252Fcdn-cgi%2525252525252525252Fphish-bypass%2525252525252525253Fatok%2525252525252525253DmtC.s0OrtqYkBBy4KoImgKGgWDqsNvSQc9OPsx.NqJg-1746529575.5740595-0.0.1.1-%252525252525252525252Fcdn-cgi%252525252525252525252Fphish-bypass%252525252525252525253Fatok%252525252525252525253Dk5mSn70LExdlIXDU4WJoPkGMNszWp9bU1eZdZa8UAp8-1746475067.12341-0.0.1.1-%25252525252525252525252Fcdn-cgi%25252525252525252525252Fphish-bypass%25252525252525252525253Fatok%25252525252525252525253DHT1hACPzB6M_tZ01ynKQBRIfAG8ZDCPZnZVcJ4REZOM-1746412309.107866-0.0.1.1-%2525252525252525252525252Fcdn-cgi%2525252525252525252525252Fphish-bypass%2525252525252525252525253Fatok%2525252525252525252525253DG
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash c371fa8374a06a3c0535fc341d454236
441671eacb9398792d435443beaddd3fc5fa1910
eed0b81a2fbdd1c5a9f80705885fc5bbf346ba428a79ff7a13ec8491c6a8e96c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cdn-cgi/phish-bypass?atok=Ob96dxfh0BgNMFoUCHdJ3Up0zVg2NWLOFcdwoCKedRA-1747205764.7214403-0.0.1.1-%2Fcdn-cgi%2Fphish-bypass%3Fatok%3DfGlZ8k6G8ryQVLY57RosVolh.aF86eQ7gO7DD_KJniI-1747118088.1746972-0.0.1.1-%252Fcdn-cgi%252Fphish-bypass%253Fatok%253D4fc1cyxz3mNQqxrfjRu29j2Zutw6PY8uD0dA9uiXrB0-1747046320.7597058-0.0.1.1-%25252Fcdn-cgi%25252Fphish-bypass%25253Fatok%25253DKd7W024euCQ6c7J7xY0j9E8dHRuMCsAc_jIoMlw.i0g-1746967820.6855943-0.0.1.1-%2525252Fcdn-cgi%2525252Fphish-bypass%2525253Fatok%2525253DhuYx6h6o42ze.eSvyG_SbIJdFFg1Se1I.mZRBmeLbOk-1746901678.9608774-0.0.1.1-%252525252Fcdn-cgi%252525252Fphish-bypass%252525253Fatok%252525253D8dYT_ctT6Xx4skl0fxPIvxSIRynUvOKJfx1vPXYQVQg-1746836630.6860924-0.0.1.1-%25252525252Fcdn-cgi%25252525252Fphish-bypass%25252525253Fatok%25252525253D3jwh76QdmGWwqnpsc6bWS5ohgz6meROx2wEj8BVKHco-1746780336.851223-0.0.1.1-%2525252525252Fcdn-cgi%2525252525252Fphish-bypass%2525252525253Fatok%2525252525253Dng63bBlaHeAbr36bK155f78x2pnLlSdN90K7dOT.yLU-1746720442.0555556-0.0.1.1-%252525252525252Fcdn-cgi%252525252525252Fphish-bypass%252525252525253Fatok%252525252525253DImPk6WhC5wUxuTraur0RL1Yi6Jo1Dewv0gYRG24t0GQ-1746652420.8749292-0.0.1.1-%25252525252525252Fcdn-cgi%25252525252525252Fphish-bypass%25252525252525253Fatok%25252525252525253Dfq3ffQOPvBN5dv6EuJd9mFOQrK2nI7KDUJtz6KpymMo-1746599446.444562-0.0.1.1-%2525252525252525252Fcdn-cgi%2525252525252525252Fphish-bypass%2525252525252525253Fatok%2525252525252525253DmtC.s0OrtqYkBBy4KoImgKGgWDqsNvSQc9OPsx.NqJg-1746529575.5740595-0.0.1.1-%252525252525252525252Fcdn-cgi%252525252525252525252Fphish-bypass%252525252525252525253Fatok%252525252525252525253Dk5mSn70LExdlIXDU4WJoPkGMNszWp9bU1eZdZa8UAp8-1746475067.12341-0.0.1.1-%25252525252525252525252Fcdn-cgi%25252525252525252525252Fphish-bypass%25252525252525252525253Fatok%25252525252525252525253DHT1hACPzB6M_tZ01ynKQBRIfAG8ZDCPZnZVcJ4REZOM-1746412309.107866-0.0.1.1-%2525252525252525252525252Fcdn-cgi%2525252525252525252525252Fphish-bypass%2525252525252525252525253Fatok%2525252525252525252525253DG HTTP/1.1
Host: rapidnexus.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Wed, 14 May 2025 13:21:02 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
CF-RAY: 93fab2453b36feac-AMS
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Encoding: gzip
GET rapidnexus.cfd/favicon.ico
403 Forbidden 4.6 kB URL GET rapidnexus.cfd/favicon.ico
IP
Requested by http://rapidnexus.cfd/cdn-cgi/phish-bypass?atok=Ob96dxfh0BgNMFoUCHdJ3Up0zVg2NWLOFcdwoCKedRA-1747205764.7214403-0.0.1.1-%2Fcdn-cgi%2Fphish-bypass%3Fatok%3DfGlZ8k6G8ryQVLY57RosVolh.aF86eQ7gO7DD_KJniI-1747118088.1746972-0.0.1.1-%252Fcdn-cgi%252Fphish-bypass%253Fatok%253D4fc1cyxz3mNQqxrfjRu29j2Zutw6PY8uD0dA9uiXrB0-1747046320.7597058-0.0.1.1-%25252Fcdn-cgi%25252Fphish-bypass%25253Fatok%25253DKd7W024euCQ6c7J7xY0j9E8dHRuMCsAc_jIoMlw.i0g-1746967820.6855943-0.0.1.1-%2525252Fcdn-cgi%2525252Fphish-bypass%2525253Fatok%2525253DhuYx6h6o42ze.eSvyG_SbIJdFFg1Se1I.mZRBmeLbOk-1746901678.9608774-0.0.1.1-%252525252Fcdn-cgi%252525252Fphish-bypass%252525253Fatok%252525253D8dYT_ctT6Xx4skl0fxPIvxSIRynUvOKJfx1vPXYQVQg-1746836630.6860924-0.0.1.1-%25252525252Fcdn-cgi%25252525252Fphish-bypass%25252525253Fatok%25252525253D3jwh76QdmGWwqnpsc6bWS5ohgz6meROx2wEj8BVKHco-1746780336.851223-0.0.1.1-%2525252525252Fcdn-cgi%2525252525252Fphish-bypass%2525252525253Fatok%2525252525253Dng63bBlaHeAbr36bK155f78x2pnLlSdN90K7dOT.yLU-1746720442.0555556-0.0.1.1-%252525252525252Fcdn-cgi%252525252525252Fphish-bypass%252525252525253Fatok%252525252525253DImPk6WhC5wUxuTraur0RL1Yi6Jo1Dewv0gYRG24t0GQ-1746652420.8749292-0.0.1.1-%25252525252525252Fcdn-cgi%25252525252525252Fphish-bypass%25252525252525253Fatok%25252525252525253Dfq3ffQOPvBN5dv6EuJd9mFOQrK2nI7KDUJtz6KpymMo-1746599446.444562-0.0.1.1-%2525252525252525252Fcdn-cgi%2525252525252525252Fphish-bypass%2525252525252525253Fatok%2525252525252525253DmtC.s0OrtqYkBBy4KoImgKGgWDqsNvSQc9OPsx.NqJg-1746529575.5740595-0.0.1.1-%252525252525252525252Fcdn-cgi%252525252525252525252Fphish-bypass%252525252525252525253Fatok%252525252525252525253Dk5mSn70LExdlIXDU4WJoPkGMNszWp9bU1eZdZa8UAp8-1746475067.12341-0.0.1.1-%25252525252525252525252Fcdn-cgi%25252525252525252525252Fphish-bypass%25252525252525252525253Fatok%25252525252525252525253DHT1hACPzB6M_tZ01ynKQBRIfAG8ZDCPZnZVcJ4REZOM-1746412309.107866-0.0.1.1-%2525252525252525252525252Fcdn-cgi%2525252525252525252525252Fphish-bypass%2525252525252525252525253Fatok%2525252525252525252525253DG
File type HTML document, ASCII text, with very long lines (394)
Hash 3fdb8397fe6264173aabaf1dbdd2814e
1e9f090e703bd3ebd055509e16d2190627cebd68
a0231020198d3c8c7ebf016aaca7ddb6f191a3454f98ef89e02092b8ccb196ca
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: rapidnexus.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://rapidnexus.cfd/cdn-cgi/phish-bypass?atok=Ob96dxfh0BgNMFoUCHdJ3Up0zVg2NWLOFcdwoCKedRA-1747205764.7214403-0.0.1.1-%2Fcdn-cgi%2Fphish-bypass%3Fatok%3DfGlZ8k6G8ryQVLY57RosVolh.aF86eQ7gO7DD_KJniI-1747118088.1746972-0.0.1.1-%252Fcdn-cgi%252Fphish-bypass%253Fatok%253D4fc1cyxz3mNQqxrfjRu29j2Zutw6PY8uD0dA9uiXrB0-1747046320.7597058-0.0.1.1-%25252Fcdn-cgi%25252Fphish-bypass%25253Fatok%25253DKd7W024euCQ6c7J7xY0j9E8dHRuMCsAc_jIoMlw.i0g-1746967820.6855943-0.0.1.1-%2525252Fcdn-cgi%2525252Fphish-bypass%2525253Fatok%2525253DhuYx6h6o42ze.eSvyG_SbIJdFFg1Se1I.mZRBmeLbOk-1746901678.9608774-0.0.1.1-%252525252Fcdn-cgi%252525252Fphish-bypass%252525253Fatok%252525253D8dYT_ctT6Xx4skl0fxPIvxSIRynUvOKJfx1vPXYQVQg-1746836630.6860924-0.0.1.1-%25252525252Fcdn-cgi%25252525252Fphish-bypass%25252525253Fatok%25252525253D3jwh76QdmGWwqnpsc6bWS5ohgz6meROx2wEj8BVKHco-1746780336.851223-0.0.1.1-%2525252525252Fcdn-cgi%2525252525252Fphish-bypass%2525252525253Fatok%2525252525253Dng63bBlaHeAbr36bK155f78x2pnLlSdN90K7dOT.yLU-1746720442.0555556-0.0.1.1-%252525252525252Fcdn-cgi%252525252525252Fphish-bypass%252525252525253Fatok%252525252525253DImPk6WhC5wUxuTraur0RL1Yi6Jo1Dewv0gYRG24t0GQ-1746652420.8749292-0.0.1.1-%25252525252525252Fcdn-cgi%25252525252525252Fphish-bypass%25252525252525253Fatok%25252525252525253Dfq3ffQOPvBN5dv6EuJd9mFOQrK2nI7KDUJtz6KpymMo-1746599446.444562-0.0.1.1-%2525252525252525252Fcdn-cgi%2525252525252525252Fphish-bypass%2525252525252525253Fatok%2525252525252525253DmtC.s0OrtqYkBBy4KoImgKGgWDqsNvSQc9OPsx.NqJg-1746529575.5740595-0.0.1.1-%252525252525252525252Fcdn-cgi%252525252525252525252Fphish-bypass%252525252525252525253Fatok%252525252525252525253Dk5mSn70LExdlIXDU4WJoPkGMNszWp9bU1eZdZa8UAp8-1746475067.12341-0.0.1.1-%25252525252525252525252Fcdn-cgi%25252525252525252525252Fphish-bypass%25252525252525252525253Fatok%25252525252525252525253DHT1hACPzB6M_tZ01ynKQBRIfAG8ZDCPZnZVcJ4REZOM-1746412309.107866-0.0.1.1-%2525252525252525252525252Fcdn-cgi%2525252525252525252525252Fphish-bypass%2525252525252525252525253Fatok%2525252525252525252525253DG
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Wed, 14 May 2025 13:21:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zxauqCWIpQijKAiA2dwvilelzjtjc5cN7JJQy1g2IcvFnHKYDOfm43YRat%2BNObtFEW4nFehivxdaLo6towfozVfTCcGUjtFYKtoc1EJKjTcHbBADelR%2F%2B%2BdzkL4vsxXXnA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 93fab2461c78feac-AMS
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
172.67.173.112