Report Overview

  1. Visited public
    2025-07-06 12:33:12
    Tags
    Submit Tags
  2. URL

    phantom-auth.click/

  3. Finishing URL

    phantom-auth.click/

  4. IP / ASN
    104.21.96.1

    #13335 CLOUDFLARENET

    Title
    Suspected phishing site | Cloudflare
Detections
urlquery
0
Network Intrusion Detection
4
Threat Detection Systems
6

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
challenges.cloudflare.comunknown2009-02-172021-10-202025-07-02
phantom-auth.clickunknown2025-06-242025-06-302025-06-30

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP 104.21.16.1
lowClient IP 104.21.16.1
lowClient IP 104.21.16.1
lowClient IP 104.21.16.1

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumphantom-auth.clickSinkholed

ThreatFox

No alerts detected


JavaScript (57)

HTTP Transactions (14)

URLIPResponseSize
GET challenges.cloudflare.com/turnstile/v0/b/e7e9d014f96e/api.js
104.18.95.41200 OK49 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
104.18.95.41200 OK86 B
GET phantom-auth.click/cdn-cgi/styles/cf.errors.css
104.21.16.1200 OK24 kB
GET challenges.cloudflare.com/turnstile/v0/api.js
104.18.95.41302 Found49 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=95af206a0ae20b61&lang=auto
104.18.95.41200 OK146 kB
GET phantom-auth.click/favicon.ico
104.21.16.1403 Forbidden5.0 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/r6pkl/0x4AAAAAABDaGKKSGLylJZFA/auto/fbE/new/normal/auto/
104.18.95.41200 OK27 kB
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/213491285:1751804021:I1NfsYN9gk9BibANEwoB5LZ8zkP5eHBXuG3ccwv4vMM/95af206a0ae20b61/azEhXE124n8_sQjlH0QrEG.v.9NFVURpPuNKC27gdAE-1751805165-1.2.1.1-jGQCQQipaUfVJ__QyLlIXrQdxUX1b4gaG_Ors4S0p6B6lftd7Kb_WAIzmhuhlpk5
104.18.95.41200 OK283 kB
GET phantom-auth.click/
104.21.32.1403 Forbidden5.0 kB
GET phantom-auth.click/
104.21.16.1403 Forbidden5.0 kB
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/213491285:1751804021:I1NfsYN9gk9BibANEwoB5LZ8zkP5eHBXuG3ccwv4vMM/95af206a0ae20b61/azEhXE124n8_sQjlH0QrEG.v.9NFVURpPuNKC27gdAE-1751805165-1.2.1.1-jGQCQQipaUfVJ__QyLlIXrQdxUX1b4gaG_Ors4S0p6B6lftd7Kb_WAIzmhuhlpk5
104.18.95.41200 OK30 kB
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/213491285:1751804021:I1NfsYN9gk9BibANEwoB5LZ8zkP5eHBXuG3ccwv4vMM/95af206a0ae20b61/azEhXE124n8_sQjlH0QrEG.v.9NFVURpPuNKC27gdAE-1751805165-1.2.1.1-jGQCQQipaUfVJ__QyLlIXrQdxUX1b4gaG_Ors4S0p6B6lftd7Kb_WAIzmhuhlpk5
104.18.95.41200 OK4.9 kB
GET phantom-auth.click/cdn-cgi/images/icon-exclamation.png?1376755637
104.21.16.1200 OK452 B
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/95af206a0ae20b61/1751805165779/oRQ7i-mWLMUsYX2
104.18.95.41200 OK309 B