Report - lsqtf.cn/cdn-cgi/phish-bypass?atok=ux9X43Lsd1zRgr1hF0iHpOMQCD0..6ERxPI_gLPNmPw-1744229464.4336526-0.0.1.1-%2FOYvPuYOk

Report Overview

Visited public
2025-04-10 12:37:20
Tags
URL
lsqtf.cn/cdn-cgi/phish-bypass?atok=ux9X43Lsd1zRgr1hF0iHpOMQCD0..6ERxPI_gLPNmPw-1744229464.4336526-0.0.1.1-%2FOYvPuYOk
Finishing URL
lsqtf.cn/cdn-cgi/phish-bypass?atok=ux9X43Lsd1zRgr1hF0iHpOMQCD0..6ERxPI_gLPNmPw-1744229464.4336526-0.0.1.1-%2FOYvPuYOk
IP / ASN
172.67.165.55
#13335 CLOUDFLARENET
Title
403 Forbidden

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
lsqtf.cn	unknown	2024-11-12	2025-04-09	2025-04-09	1.5 kB	6.2 kB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	lsqtf.cn/cdn-cgi/phish-bypass?atok=ux9X43Lsd1zRgr1hF0iHpOMQCD0..6ERxPI_gLPNmPw-1744229464.4336526-0.0.1.1-%2FOYvPuYOk	188.114.96.1	403 Forbidden	4.5 kB
URL User Request GET lsqtf.cn/cdn-cgi/phish-bypass?atok=ux9X43Lsd1zRgr1hF0iHpOMQCD0..6ERxPI_gLPNmPw-1744229464.4336526-0.0.1.1-%2FOYvPuYOk IP 188.114.96.1:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services Subjectlsqtf.cn FingerprintD8:AC:DE:98:0B:23:5B:E0:6F:79:FB:8F:D2:41:2E:BB:C9:EA:06:F4 ValiditySat, 05 Apr 2025 16:09:23 GMT - Fri, 04 Jul 2025 17:07:58 GMT File type HTML document, ASCII text, with very long lines (396) Size 4.5 kB (4542 bytes) Hash c4261794525c48b2b2fc11b20caa05d0 86acffbb88c26c19770b990f3846f4272c471f68 f18551eedcfe2cfce789dc98daefde4bd3969ee6bf74e6563a7884827ed0d36b HTTP Headers GET /cdn-cgi/phish-bypass?atok=ux9X43Lsd1zRgr1hF0iHpOMQCD0..6ERxPI_gLPNmPw-1744229464.4336526-0.0.1.1-%2FOYvPuYOk HTTP/1.1 Host: lsqtf.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 403 Forbidden date: Thu, 10 Apr 2025 12:36:58 GMT content-type: text/html; charset=UTF-8 x-frame-options: SAMEORIGIN content-encoding: br server: cloudflare cf-ray: 92e24afbe8ed5690-OSL X-Firefox-Spdy: h2`

	lsqtf.cn/cdn-cgi/phish-bypass?atok=ux9X43Lsd1zRgr1hF0iHpOMQCD0..6ERxPI_gLPNmPw-1744229464.4336526-0.0.1.1-%2FOYvPuYOk	188.114.96.1	403 Forbidden	151 B
URL User Request GET lsqtf.cn/cdn-cgi/phish-bypass?atok=ux9X43Lsd1zRgr1hF0iHpOMQCD0..6ERxPI_gLPNmPw-1744229464.4336526-0.0.1.1-%2FOYvPuYOk IP 188.114.96.1:80 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with CRLF line terminators Size 151 B (151 bytes) Hash c371fa8374a06a3c0535fc341d454236 441671eacb9398792d435443beaddd3fc5fa1910 eed0b81a2fbdd1c5a9f80705885fc5bbf346ba428a79ff7a13ec8491c6a8e96c HTTP Headers `GET /cdn-cgi/phish-bypass?atok=ux9X43Lsd1zRgr1hF0iHpOMQCD0..6ERxPI_gLPNmPw-1744229464.4336526-0.0.1.1-%2FOYvPuYOk HTTP/1.1 Host: lsqtf.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 403 Forbidden Date: Thu, 10 Apr 2025 12:36:59 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Server: cloudflare CF-RAY: 92e24afcca6d7129-OSL X-Frame-Options: DENY X-Content-Type-Options: nosniff Content-Encoding: gzip`

	lsqtf.cn/favicon.ico	188.114.96.1	404 Not Found	153 B
URL GET lsqtf.cn/favicon.ico IP 188.114.96.1:80 ASN #13335 CLOUDFLARENET Requested by http://lsqtf.cn/cdn-cgi/phish-bypass?atok=ux9X43Lsd1zRgr1hF0iHpOMQCD0..6ERxPI_gLPNmPw-1744229464.4336526-0.0.1.1-%2FOYvPuYOk File type HTML document, ASCII text, with CRLF line terminators Size 153 B (153 bytes) Hash 00f8a62e85f99f73fa8caf355eaa4593 272da4cc254ce7dd9c97448051ead592d3589c33 8bf1b0813f4fb6b039752427dc2c097d0723304d4e1f92a77270a362fca4e8ee HTTP Headers `GET /favicon.ico HTTP/1.1 Host: lsqtf.cn User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://lsqtf.cn/cdn-cgi/phish-bypass?atok=ux9X43Lsd1zRgr1hF0iHpOMQCD0..6ERxPI_gLPNmPw-1744229464.4336526-0.0.1.1-%2FOYvPuYOk Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 404 Not Found Date: Thu, 10 Apr 2025 12:36:59 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Cache-Control: max-age=14400 cf-cache-status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B06bzRqsiEUAE8U9OcdbBMh71vxVRqD%2BPln72jylmOyogIWznNkh0sTyPMTGl3eDCQFdP79It%2BV82niTKUwXz4fNwjT1mRN4OLF%2BUbEEDX%2B94PHAcRIJjxN8hQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92e24afdbbc37129-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 server-timing: cfL4;desc="?proto=TCP&rtt=545&min_rtt=500&rtt_var=166&sent=4&recv=6&lost=0&retrans=0&sent_bytes=395&recv_bytes=926&delivery_rate=4641025&cwnd=251&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"