LeakIX - Host yit.3gx.workers.dev

Open service 104.21.70.216:8443 · yit.3gx.workers.dev

2026-01-07 02:59

HTTP/1.1 403 Forbidden
Date: Wed, 07 Jan 2026 02:59:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=jGz1lvQ0432Q%2Bi%2FwEE9LD4hevDLtxRp2wqyo1HbR4PknaIz%2Fdky1PAckLmjnnsSg7UgI8qWltgohqXQ7TLk3%2FpEJP0ghGXse0vaReL1E%2F5I%2Bg8Q%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba0334779e3a2ad-BOM
alt-svc: h3=":8443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="kNh28CSpRORL0YpwnWd9BwoBfuBBSQb2PxsKZtd0PLo-1767754778.7978985-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba0334779e3a2ad</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">159.89.174.87</span>
        <span class

Found 2026-01-07 by HttpPlugin

Create report

Open service 2606:4700:3036::6815:46d8:8443 · yit.3gx.workers.dev

2026-01-07 02:59

HTTP/1.1 403 Forbidden
Date: Wed, 07 Jan 2026 02:59:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=C%2F%2B8h8dg34mbY0h9O3%2FKrqXpnCZAvRKB8AWpFwLleMA3m56e%2Bvao4xDwIl%2BNQSG286sgQHcD2iXMM8GwbB3EmBWZuNDkhhLHi8NlNdcXSnxoOFZXmkk8OKW8ud3evbE%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba03346783ace2e-SIN
alt-svc: h3=":8443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="lIu7P_JK40jhUg4JwWDEQHsx9ZpWc1cSYjM1tYlN9ow-1767754778.6407309-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba03346783ace2e</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">2400:6180:0:d0::1188:b001</span>

Found 2026-01-07 by HttpPlugin

Create report

Open service 172.67.139.241:443 · yit.3gx.workers.dev

2026-01-07 02:59

HTTP/1.1 403 Forbidden
Date: Wed, 07 Jan 2026 02:59:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=JAT15Za1aaDNJNTk%2FRYosQo%2BuyeJdMAK0vSkZFJQckuqyAwIusDO%2BhDNO2ylvOJpBW9DEtgEshaJW6QhhpF3bZ9QmoLEtCx6%2BK9GILUEQphZ7%2BA%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba03346dc4e85fa-BOM
alt-svc: h3=":443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="cBF1wlNNOOLaKQaOglKsYUjTYtscwCrTvnLI3DVJ4a0-1767754778.6978996-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba03346dc4e85fa</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">159.65.144.72</span>
        <span class

Found 2026-01-07 by HttpPlugin

Create report

Open service 104.21.70.216:443 · yit.3gx.workers.dev

2026-01-07 02:59

HTTP/1.1 403 Forbidden
Date: Wed, 07 Jan 2026 02:59:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=mue87mLvWrnsSSQFerto7vfDyarOnsOQR45Gkv2VHb1zmYCYbhoqGgbZfr1xmKFNH7HmrUtrl6RmGSzNy5jvS9HEI9QGipSu7c%2F02AwcqDJrMQc%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba033466857ae99-SJC
alt-svc: h3=":443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="TkBk66OLpXMFNwCoAoYQCc5p5lPbUETtoO.HkuXCh3E-1767754778.6293457-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba033466857ae99</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">64.23.218.208</span>
        <span class

Found 2026-01-07 by HttpPlugin

Create report

Open service 172.67.139.241:80 · yit.3gx.workers.dev

2026-01-07 02:59

HTTP/1.1 403 Forbidden
Date: Wed, 07 Jan 2026 02:59:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=SoxXNobEiXN4le5nxQvD3JbWwPKxCkZruXxrnkOWHG34EJ1UP4aGcsMS3MBMf%2FutestsrLP9mefarRwzSKUisVX%2FsFNQ6hCTB652pUKcIyB6XCE%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba033461e403a74-FRA
alt-svc: h3=":443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="d0lXgz3yJ8NDDhaDKt6XsDCtVHLgcC.fOJS7UrU4Fw4-1767754778.57757-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba033461e403a74</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">164.90.228.79</span>
        <span class="

Found 2026-01-07 by HttpPlugin

Create report

Open service 2606:4700:3034::ac43:8bf1:443 · yit.3gx.workers.dev

2026-01-07 02:59

HTTP/1.1 403 Forbidden
Date: Wed, 07 Jan 2026 02:59:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=E2tzmYB7z2PyQX%2FkaMhsNd%2BnIS%2BGh1Z%2B8uAkz1Us3Ie1Nr1TcU91tkiaqxh2RYWZeTnmpCvFPTt0yHwh6Bdm4r5noLYoXK2TfexVTRqnGElW3NtTZa0Ax5olakQa0Vk%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba03345c8a4f9a2-LHR
alt-svc: h3=":443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="588xRoyfQ7XM3u4eW3d15Uh_kI2g2yv7cgxt5j4tPxY-1767754778.5277848-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba03345c8a4f9a2</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">2a03:b0c0:1:d0::e05:9001</span>

Found 2026-01-07 by HttpPlugin

Create report

Open service 2606:4700:3036::6815:46d8:80 · yit.3gx.workers.dev

2026-01-07 02:59

HTTP/1.1 403 Forbidden
Date: Wed, 07 Jan 2026 02:59:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=NC6HVa22Rxbz417K4wUwTLS22kMD6B%2FGPsiaCgaa4rXbSEfMP%2FoJ2cn%2BPTCDj7tiU2c5pbou8IjqXDYJySNRMbb6aAy%2BapMaiIBHS74tH8Rs6DZ1zla3pGri7P9I8QQ%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba03345af7d18ef-FRA
alt-svc: h3=":443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="rguSQphuK4wpnBR9nnD64baQGESn3.ebmH2aEyYVk4o-1767754778.5037992-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba03345af7d18ef</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">2a03:b0c0:3:d0::34e:b001</span>

Found 2026-01-07 by HttpPlugin

Create report

Open service 104.21.70.216:80 · yit.3gx.workers.dev

2026-01-07 02:59

HTTP/1.1 403 Forbidden
Date: Wed, 07 Jan 2026 02:59:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=YMSwhUSiP6PSn5xo0wYvu9igayDVuE4bWqPympe%2B%2BekgqKTNUlJFKx9pXtL0J%2FqtMdranxXd7ChKWpeRSmieSXvDJM3vQNCc0sDUA4VJxljrOdo%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba03345ad42f2f9-EWR
alt-svc: h3=":443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="IX_v_ZUtlmKr0CXqJwAoHHf95cNx_DlDf5X4gMa_Z70-1767754778.505439-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba03345ad42f2f9</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">165.22.34.189</span>
        <span class=

Found 2026-01-07 by HttpPlugin

Create report

Open service 172.67.139.241:8443 · yit.3gx.workers.dev

2026-01-07 02:59

HTTP/1.1 403 Forbidden
Date: Wed, 07 Jan 2026 02:59:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=oHBrSmrknUpL0ihZxLjTVc8m3uY0hOGTL0me5u%2BTjaN%2FXlo3w%2F%2BeS3vZOG5zauOVHwf%2BaDxtaGv4XkHjAE5nQKRdq7fZ5B0KiljRanwsGKtfp98%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba03345ac0a9c0c-FRA
alt-svc: h3=":8443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value=".TAruyX_eRgolXNQuIrp_C0gytGe3QotYOPWv1VKREs-1767754778.5034916-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba03345ac0a9c0c</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">206.81.24.227</span>
        <span class

Found 2026-01-07 by HttpPlugin

Create report

Open service 2606:4700:3034::ac43:8bf1:80 · yit.3gx.workers.dev

2026-01-07 02:59

HTTP/1.1 403 Forbidden
Date: Wed, 07 Jan 2026 02:59:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2FDVvzzEQUR3pRSRl34kIgdM8dWv6f0kmtz52i5DEXe5J4ZWz5BrRC2rwy6geCqnbqcqy4XdJniXB%2FluwG0lpNq3FQiJ8JziCJ1dqgTMVW0ZKoCYL66rx%2F67NxHlzjP4%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba033456e18658a-LHR
alt-svc: h3=":443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="Ci85t9jDYFacA0oAiBmfacJ7OJY2MqbgdcrsUTiSVhw-1767754778.4670253-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba033456e18658a</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">2a03:b0c0:1:d0::d83:3001</span>

Found 2026-01-07 by HttpPlugin

Create report

Open service 2606:4700:3034::ac43:8bf1:8443 · yit.3gx.workers.dev

2026-01-07 02:59

HTTP/1.1 403 Forbidden
Date: Wed, 07 Jan 2026 02:59:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=cR1L4FqO18cSn9qk36CJGqZIBYFBJgVoWha1yxLmU8MCcmv%2B%2F2VHHNDvdKWMA3MdDgk%2F6EAOUk6g%2Bu5jJm17hKbWZ9%2BrCXBNt5r4gA2gNKbzALACoTlypL5kACqwHdw%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba033455a049fd0-AMS
alt-svc: h3=":8443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="YUk_92Vbeh645LL7hF5XJrEnObwmPH2b8qIpSzhUSaQ-1767754778.4538326-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba033455a049fd0</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">2a03:b0c0:2:d0::10fd:3001</span>

Found 2026-01-07 by HttpPlugin

Create report

Open service 2606:4700:3036::6815:46d8:443 · yit.3gx.workers.dev

2026-01-07 02:59

HTTP/1.1 403 Forbidden
Date: Wed, 07 Jan 2026 02:59:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=abtO8t37%2FUvXVTcbO5lQdjTUTFx5aPrBckEguqKA5aHLaHWdEp2B6MEugDOK2OEcFuTx2CZIXBzhiA4d1d5Kj7imZxxotbI7iysHqbAiJz2n13FZpQWjRAD3P54WzfQ%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: 9ba033454b2237bc-FRA
alt-svc: h3=":443"; ma=86400

Page title: Suspected phishing site | Cloudflare

<!DOCTYPE html>
<!--[if lt IE 7]>
<html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>
<html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>
<html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!-->
<html class="no-js" lang="en-US"> <!--<![endif]-->

<head>
  <title>Suspected phishing site | Cloudflare</title>
  <meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->
<style>body{margin:0;padding:0}</style>


<!--[if gte IE 10]><!-->
<script>
  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }
</script>
<!--<![endif]-->

  <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
  <script>
    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  </script>
</head>

<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable
      cookies.
    </div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-section cf-wrapper" style="margin-top: 100px;margin-bottom:200px;">
        <div class="cf-columns one">
          <div class="cf-column">
            <h4 class="cf-text-error"><i class="cf-icon-exclamation-sign" style="background-size: 18px;
              height: 18px;
              width: 18px;
              margin-bottom: 2px;"></i> Warning</h4>

            
            <h2 style="margin: 16px 0;">Suspected Phishing</h2>
            <strong>This website has been reported for potential phishing.</strong>
            <p>Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.
            </p>
            
            <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain" style="margin-top: 12px;">
              
              <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn"
                style="background-color: #404040; color: #fff; border: 0;">Learn More</a>
              

              
              <input type="hidden" name="atok" value="RttVp3RP26oP1qf2jPJFKNa.X16qh00h4pXmI1Jx7bM-1767754778.4481792-0.0.1.1-/">
              <input type="hidden" name="original_path" value="/">
              <button type="submit" id="bypass-button" class="cf-btn cf-btn-danger"
                style="color: #bd2426; background: transparent;" data-translate="dismiss_and_enter">Ignore & Proceed
              </button>
              <br> <br>
              <div class="cf-turnstile" data-sitekey="0x4AAAAAABDaGKKSGLylJZFA" data-callback="onTurnstileSuccess">
              </div>
              
            </form>
          </div>
        </div>
      </div><!-- /.section -->
      <div id="ts-blocks" style="display:none;"></div>
      <div class="cf-error-footer cf-wrapper w-240 lg:w-full py-10 sm:py-4 sm:px-8 mx-auto text-center sm:text-left border-solid border-0 border-t border-gray-300">
    <p class="text-13">
      <span class="cf-footer-item sm:block sm:mb-1">Cloudflare Ray ID: <strong class="font-semibold">9ba033454b2237bc</strong></span>
      <span class="cf-footer-separator sm:hidden">&bull;</span>
      <span id="cf-footer-item-ip" class="cf-footer-item hidden sm:block sm:mb-1">
        Your IP:
        <button type="button" id="cf-footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button>
        <span class="hidden" id="cf-footer-ip">2a03:b0c0:3:d0::402:d001</span>

Found 2026-01-07 by HttpPlugin

Domain yit.3gx.workers.dev

Software information

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

Create report

3gx.workers.dev*.3gx.workers.dev

Domain summary

IP summary