LeakIX - Host c0f.3gx.workers.dev

Open service 172.67.139.241:443 · c0f.3gx.workers.dev

2026-01-08 02:44

HTTP/1.1 403 Forbidden
Date: Thu, 08 Jan 2026 02:44:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=THFeOKf2jzyrAb4NXuqxi55rzXlhcl1uhaXeXnk%2FEvKMm2S0FUarpIGoa9ljEp5XWf3985GawRUwZyOK%2B6Zyg%2BFcfHGpvVkWP3%2FD8k5cYQjW"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba85b2f3dd9dcf2-EWR
alt-svc: h3=":443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="iRGTrC9tPDt9pvg8u.JhaAF5CV6B3SG.6r1wqfPfXAw-1767840299.3967812-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba85b2f3dd9dcf2</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">206.81.12.187</span>
        <span class

Found 2026-01-08 by HttpPlugin

Create report

Open service 172.67.139.241:8443 · c0f.3gx.workers.dev

2026-01-08 02:44

HTTP/1.1 403 Forbidden
Date: Thu, 08 Jan 2026 02:44:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Cb%2FNkDQD5Yqw%2FyviWWif8dVLP3hw918%2FQ4uhc3etaIDahkQr%2BOTZLT5roHAk9XSM25rT5rJ0Y4HNB8lyqPhbgWRpG7y5VI5vndd7iRArWlAY6ow%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba85b2eea4112fa-AMS
alt-svc: h3=":8443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="FOqBc0QKNjhSSSrYSQGDOJ9sccH7YdLCck3YD718TYk-1767840299.349773-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba85b2eea4112fa</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">68.183.9.16</span>
        <span class="c

Found 2026-01-08 by HttpPlugin

Create report

Open service 2606:4700:3036::6815:46d8:80 · c0f.3gx.workers.dev

2026-01-08 02:44

HTTP/1.1 403 Forbidden
Date: Thu, 08 Jan 2026 02:44:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ZwUlGlatT9R%2BfbkR4uJoKb2msne3Qx2g8vJeL6%2Fn4guHDiG1flMpEGaDthP7h1OCxjtfbvea6lKTKbRbxzg6WE0qBOa4e4g2ICUphHDu1h1GWr6soHbSeQGjhg7u7W8%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba85b2eeac36616-AMS
alt-svc: h3=":443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="9ggJqWRxjZrujKi9V7wRZmoVjyp7mA_0iNGjlkE7wm8-1767840299.349687-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba85b2eeac36616</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">2a03:b0c0:2:d0::1737:1</span>
        <sp

Found 2026-01-08 by HttpPlugin

Create report

Open service 104.21.70.216:443 · c0f.3gx.workers.dev

2026-01-08 02:44

HTTP/1.1 403 Forbidden
Date: Thu, 08 Jan 2026 02:44:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=gj2iXn%2Ff2%2F6Vv7qCAJ87dNcoADYZ1Yp69ZOz37kblNTqFBjoFdKMCFC%2BwhVkOB5F006OOSF2wUq4CEaNOuwsbsDgzxbKn3n4Wv%2FGyN3zR%2BZK%2F2E%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba85b2f4fd0d40e-FRA
alt-svc: h3=":443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="Q4aRo6JxeoLmiOE6403DXzZjHi1L4mggRKPDwrdLJJo-1767840299.4066577-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba85b2f4fd0d40e</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">157.230.19.140</span>
        <span clas

Found 2026-01-08 by HttpPlugin

Create report

Open service 172.67.139.241:80 · c0f.3gx.workers.dev

2026-01-08 02:44

HTTP/1.1 403 Forbidden
Date: Thu, 08 Jan 2026 02:44:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=pCFxCwC8hq0JH2aSrxRDXpT9Ryorp5p6J0aZjWmCH7WxF81ocAzMPMlF4bF5WRNB3%2By8SpMg9o05XLZplC35E3suQEEu19G7kfmtvgWr6kZKBvQ%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba85b2edd6b1655-LHR
alt-svc: h3=":443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="2aWGKUEz8sj63HlqHiVyfdL3aq10u7jWeUDpFBDtcSg-1767840299.3307326-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba85b2edd6b1655</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">46.101.1.225</span>
        <span class=

Found 2026-01-08 by HttpPlugin

Create report

Open service 2606:4700:3036::6815:46d8:443 · c0f.3gx.workers.dev

2026-01-08 02:44

HTTP/1.1 403 Forbidden
Date: Thu, 08 Jan 2026 02:44:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=PEtFwKZZ76JSBzo%2FfggDyALQuKIcCtaNWcVEoaCu06Rs14OQ6POT8RUNYdW9iZRHa6P13KcdGS%2FsIfmRL2A%2FUlHURRy9MQCn3dtmtrOqicez2HsiFlAvBBIxFZQ%2BuE0%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba85b2edd4da015-AMS
alt-svc: h3=":443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="BWonkcYvUAfNTnKa06d1_RyERhcMT6_CPMHd2tTo3iI-1767840299.3321664-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba85b2edd4da015</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">2a03:b0c0:2:d0::1773:1001</span>

Found 2026-01-08 by HttpPlugin

Create report

Open service 2606:4700:3034::ac43:8bf1:8443 · c0f.3gx.workers.dev

2026-01-08 02:44

HTTP/1.1 403 Forbidden
Date: Thu, 08 Jan 2026 02:44:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rG1CER%2F2BjYUnZj0igg89s7WtfwrMedEqwDgB4Q0wDghQrOtmnmA45NESD0UjhW3epMBK%2F7YMLQeFpw%2FjXsQCka6TxG53Z%2Bzdh68YWOEzLgbYoFsttDZnB4b9lstRFU%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba85b2ed870dbe2-FRA
alt-svc: h3=":8443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="_LMmJjUL0742wJim4r_jl1d9hujWJjpzy5M5qS4Nepg-1767840299.3366005-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba85b2ed870dbe2</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">2a03:b0c0:3:d0::12bc:e001</span>

Found 2026-01-08 by HttpPlugin

Create report

Open service 104.21.70.216:80 · c0f.3gx.workers.dev

2026-01-08 02:44

HTTP/1.1 403 Forbidden
Date: Thu, 08 Jan 2026 02:44:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=n%2B81kyCcHVB2NZijdLJbwN7JFWpYakd%2FJLVoSYl1h3%2FoedTD2UnAbgY4KOCVDTr0JnrqkyRaZjfFs%2BWEsLZFJEsXcP3b2EqaBXYNAALzQCop9C8%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba85b2ecec433e8-FRA
alt-svc: h3=":443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="MaOSzbiTaSqv5eHThKeQYhmHFYuZaheKgcsmyrWnzOQ-1767840299.321792-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba85b2ecec433e8</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">207.154.212.47</span>
        <span class

Found 2026-01-08 by HttpPlugin

Create report

Open service 2606:4700:3034::ac43:8bf1:443 · c0f.3gx.workers.dev

2026-01-08 02:44

HTTP/1.1 403 Forbidden
Date: Thu, 08 Jan 2026 02:44:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=AmnPMoZgHAbBss3Ra%2FLirPT9oKFbElDXkK%2Bu%2BO9h%2FrcB8XM0D%2Bl%2Bo7NpEr0sa0UfEJL0h2zCXrcswP%2FDRISyLSIN5QAGHyVnnpBPc4WAOeE1DtsfrLxEUXC3lxo3OMQ%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba85b2ecb4f7281-EWR
alt-svc: h3=":443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="6ht7QlxVi3kJ2r5QoORCeBiXZUaga_DGIu7dftXL9kM-1767840299.3262706-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba85b2ecb4f7281</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">2604:a880:400:d0::24e2:b001</span>

Found 2026-01-08 by HttpPlugin

Create report

Open service 2606:4700:3034::ac43:8bf1:80 · c0f.3gx.workers.dev

2026-01-08 02:44

HTTP/1.1 403 Forbidden
Date: Thu, 08 Jan 2026 02:44:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=6dupYBvDnZxsZLcw2T5AApizdnxrr6W4DctpTJMik9cKLBNEF4IIOeLs2xevK5nIJk2aM8iiMTCdGp%2BOpgeXGl8JZZ8QqaLZKnfsCQRx4zzkvXU4DtTSxr1Tozy6%2FtM%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba85b2eb9b343a3-EWR
alt-svc: h3=":443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="Ek_4gpInFNxTj4xa8pOcQsEuez5X679xWGcq5W9bCQI-1767840299.3148034-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba85b2eb9b343a3</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">2604:a880:400:d0::b6e:e001</span>

Found 2026-01-08 by HttpPlugin

Create report

Open service 104.21.70.216:8443 · c0f.3gx.workers.dev

2026-01-08 02:44

HTTP/1.1 403 Forbidden
Date: Thu, 08 Jan 2026 02:44:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=77aq%2FR70yTY71LU1IBr%2FRrsDtgjgya8ErukW44Fa1F3kU2x3eStl%2FmaNQQltfDxRxc3OAybqOagevpGXn%2FSSA7GYn71cQpmc%2F4fOPb5b3%2Fl0qtA%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba85b2ebbdf1613-SJC
alt-svc: h3=":8443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="CZ7ezHS4NQrzEO.25B2IW1nr8zACfjto6ftTQ7xe9ZA-1767840299.3120856-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba85b2ebbdf1613</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">164.92.107.174</span>
        <span clas

Found 2026-01-08 by HttpPlugin

Create report

Open service 2606:4700:3036::6815:46d8:8443 · c0f.3gx.workers.dev

2026-01-08 02:44

HTTP/1.1 403 Forbidden
Date: Thu, 08 Jan 2026 02:44:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=S469iqvkm%2BNAXLq0RxiExy75J4gRXwhraXeEBiQIeAs5Fic5MwkGWtyvWFNGh8dkkO0aB54Njcu4gmA1p536tODW60NHSzZEcnFpz7Rw3UsKIxBKNvHEGwVmDnjVKBM%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba85b2f38bc9493-LHR
alt-svc: h3=":8443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="e6tbrJTRWiAkxaag46d1Hk_UyU.ZKmYo_Dei1_Tzfgw-1767840299.3921309-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba85b2f38bc9493</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">2a03:b0c0:1:d0::e05:9001</span>

Found 2026-01-08 by HttpPlugin

Domain c0f.3gx.workers.dev

Software information

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

3gx.workers.dev*.3gx.workers.dev

Domain summary

IP summary