Report - jii.li/cdn-cgi/phish-bypass?atok=viRcAGOSMZpsXEfkFADp9N.P62gmNuVN6.ZuPmFU5F4-1752065483.467947-0.0.1.1-%2FDIaFG&original_path=%2FEIaFG&cf-turnstile-response=

Report Overview

Visitedpublic

2025-07-09 14:46:41

Tags

Submit Tags

URL

jii.li/cdn-cgi/phish-bypass?atok=viRcAGOSMZpsXEfkFADp9N.P62gmNuVN6.ZuPmFU5F4-1752065483.467947-0.0.1.1-%2FDIaFG&original_path=%2FEIaFG&cf-turnstile-response=

Finishing URL

jii.li/cdn-cgi/phish-bypass?atok=viRcAGOSMZpsXEfkFADp9N.P62gmNuVN6.ZuPmFU5F4-1752065483.467947-0.0.1.1-%2FDIaFG&original_path=%2FEIaFG&cf-turnstile-response=

IP / ASN

104.21.69.238

#13335 CLOUDFLARENET

Title

jii.li/cdn-cgi/phish-bypass?atok=viRcAGOSMZpsXEfkFADp9N.P62gmNuVN6.ZuPmFU5F4-1752065483.467947-0.0.1.1-%2FDIaFG&original_path=%2FEIaFG&cf-turnstile-response=

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

0

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
jii.li	unknown	unknown	2016-08-19	2025-07-02	1.1 kB	1.4 kB	104.21.69.238

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	GET jii.li/cdn-cgi/phish-bypass?atok=viRcAGOSMZpsXEfkFADp9N.P62gmNuVN6.ZuPmFU5F4-1752065483.467947-0.0.1.1-%2FDIaFG&original_path=%2FEIaFG&cf-turnstile-response=	104.21.69.238	400 Bad Request	23 B
URL jii.li/cdn-cgi/phish-bypass?atok=viRcAGOSMZpsXEfkFADp9N.P62gmNuVN6.ZuPmFU5F4-1752065483.467947-0.0.1.1-%2FDIaFG&original_path=%2FEIaFG&cf-turnstile-response= IP / ASN 104.21.69.238 #13335 CLOUDFLARENET Requested byN/A Resource Info File typeASCII text, with no line terminators First Seen2025-04-28 Last Seen2025-08-01 Times Seen27238 Size23 B (23 bytes) MD51862a245f1f02bd4477a17e9432e3a25 SHA15e9e7ba669c7c6e7aa7aede335b0b22f0a08b88f SHA256e999e13afc2c76a9b3523daa037814a97f9ad5310ee32c4dfe3b5d006a0ed73b Certificate Info IssuerGoogle Trust Services Subjectjii.li Fingerprint0C:CB:BA:49:CE:C1:D3:E0:02:43:A8:CA:6B:56:23:31:E6:58:58:D6 ValiditySat, 24 May 2025 17:47:02 GMT - Fri, 22 Aug 2025 18:45:23 GMT HTTP Headers GET /cdn-cgi/phish-bypass?atok=viRcAGOSMZpsXEfkFADp9N.P62gmNuVN6.ZuPmFU5F4-1752065483.467947-0.0.1.1-%2FDIaFG&original_path=%2FEIaFG&cf-turnstile-response= HTTP/1.1 Host: jii.li User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 400 Bad Request date: Wed, 09 Jul 2025 14:46:20 GMT content-length: 23 cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Thu, 01 Jan 1970 00:00:01 GMT referrer-policy: same-origin x-frame-options: SAMEORIGIN vary: accept-encoding report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=efgWuAmXQMbRqvT%2BPlYm5ZPxVrVn5EH3YPfKbsq0gp98xXIV4GZGwUmpiigPoBPaYbjU12jS%2F5KAZSNeNbBdR0Ny1mU%3D"}]} nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} server: cloudflare cf-ray: 95c89c3cca96be47-CPH X-Firefox-Spdy: h2

	GET jii.li/cdn-cgi/phish-bypass?atok=viRcAGOSMZpsXEfkFADp9N.P62gmNuVN6.ZuPmFU5F4-1752065483.467947-0.0.1.1-%2FDIaFG&original_path=%2FEIaFG&cf-turnstile-response=	172.67.215.200	400 Bad Request	23 B
URL jii.li/cdn-cgi/phish-bypass?atok=viRcAGOSMZpsXEfkFADp9N.P62gmNuVN6.ZuPmFU5F4-1752065483.467947-0.0.1.1-%2FDIaFG&original_path=%2FEIaFG&cf-turnstile-response= IP / ASN 172.67.215.200 #13335 CLOUDFLARENET Requested byN/A Resource Info File typeASCII text, with no line terminators First Seen2025-04-28 Last Seen2025-08-01 Times Seen27238 Size23 B (23 bytes) MD51862a245f1f02bd4477a17e9432e3a25 SHA15e9e7ba669c7c6e7aa7aede335b0b22f0a08b88f SHA256e999e13afc2c76a9b3523daa037814a97f9ad5310ee32c4dfe3b5d006a0ed73b HTTP Headers GET /cdn-cgi/phish-bypass?atok=viRcAGOSMZpsXEfkFADp9N.P62gmNuVN6.ZuPmFU5F4-1752065483.467947-0.0.1.1-%2FDIaFG&original_path=%2FEIaFG&cf-turnstile-response= HTTP/1.1 Host: jii.li User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache HTTP/1.1 400 Bad Request Date: Wed, 09 Jul 2025 14:46:21 GMT Content-Length: 23 Connection: keep-alive Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN Vary: accept-encoding Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=TKSF3AMC1LAL8fw2UX5Fge4naCAbsZ75akg2%2Ft7Pm8ISFFlbtXAPEAmh6%2B5tegHdQXZweJXjWjJglhu9qTh5lvdeCL0%3D"}]} Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} Server: cloudflare CF-RAY: 95c89c3ebc6792f2-CPH alt-svc: h2=":443"; ma=60