Report - lp-uniswap.org/cdn-cgi/phish-bypass?atok=NW2yHpziq64ybB6DUyOGN5aw_08giIbbGSbKZ5aoaus-1745604978.5980241-0.0.1.1-%2Fcdn-cgi%2Fphish-bypass%3Fatok%3D3CtEXunpvwSvtT2z0rsEbPO9AVHNba9_hrTbBTcUdzs-1745465319.5207124-0.0.1.1-%252Fcdn-cgi%252Fphish-bypass%253Fatok%253DeEF.D6pdjMXcNe2GDAiE74CIg0BtgiTzpvXNEC8LqI4-1745367719.1192958-0.0.1.1-%25252F

Report Overview

Visitedpublic

2025-04-26 11:34:46

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
lp-uniswap.org	unknown	2024-06-20	2025-04-16	2025-04-24	2.2 kB	13 kB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-04-26	medium	lp-uniswap.org	Sinkholed
2025-04-26	medium	lp-uniswap.org	Sinkholed
2025-04-26	medium	lp-uniswap.org	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

URL IP Response Size

GET lp-uniswap.org/cdn-cgi/phish-bypass?atok=NW2yHpziq64ybB6DUyOGN5aw_08giIbbGSbKZ5aoaus-1745604978.5980241-0.0.1.1-%2Fcdn-cgi%2Fphish-bypass%3Fatok%3D3CtEXunpvwSvtT2z0rsEbPO9AVHNba9_hrTbBTcUdzs-1745465319.5207124-0.0.1.1-%252Fcdn-cgi%252Fphish-bypass%253Fatok%253DeEF.D6pdjMXcNe2GDAiE74CIg0BtgiTzpvXNEC8LqI4-1745367719.1192958-0.0.1.1-%25252F

188.114.96.1

403 Forbidden

151 B

URL User Request GET HTTP

IP / ASN

188.114.96.1

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with CRLF line terminators

First Seen2023-04-14

Last Seen2025-08-09

Times Seen113379

Size151 B (151 bytes)

MD5c371fa8374a06a3c0535fc341d454236

SHA1441671eacb9398792d435443beaddd3fc5fa1910

SHA256eed0b81a2fbdd1c5a9f80705885fc5bbf346ba428a79ff7a13ec8491c6a8e96c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/phish-bypass?atok=NW2yHpziq64ybB6DUyOGN5aw_08giIbbGSbKZ5aoaus-1745604978.5980241-0.0.1.1-%2Fcdn-cgi%2Fphish-bypass%3Fatok%3D3CtEXunpvwSvtT2z0rsEbPO9AVHNba9_hrTbBTcUdzs-1745465319.5207124-0.0.1.1-%252Fcdn-cgi%252Fphish-bypass%253Fatok%253DeEF.D6pdjMXcNe2GDAiE74CIg0BtgiTzpvXNEC8LqI4-1745367719.1192958-0.0.1.1-%25252F HTTP/1.1
Host: lp-uniswap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Sat, 26 Apr 2025 11:34:25 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Server: cloudflare
CF-RAY: 9365c557fcf256c0-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Encoding: gzip

GET lp-uniswap.org/favicon.ico

188.114.96.1

521

6.8 kB

URL GET HTTP

lp-uniswap.org/favicon.ico

IP / ASN

188.114.96.1

#13335 CLOUDFLARENET

Requested byhttp://lp-uniswap.org/cdn-cgi/phish-bypass?atok=NW2yHpziq64ybB6DUyOGN5aw_08giIbbGSbKZ5aoaus-1745604978.5980241-0.0.1.1-%2Fcdn-cgi%2Fphish-bypass%3Fatok%3D3CtEXunpvwSvtT2z0rsEbPO9AVHNba9_hrTbBTcUdzs-1745465319.5207124-0.0.1.1-%252Fcdn-cgi%252Fphish-bypass%253Fatok%253DeEF.D6pdjMXcNe2GDAiE74CIg0BtgiTzpvXNEC8LqI4-1745367719.1192958-0.0.1.1-%25252F

Resource Info

File typeHTML document, ASCII text, with very long lines (394)

First Seen2025-04-26

Last Seen2025-04-26

Times Seen1

Size6.8 kB (6821 bytes)

MD581684860797141c83e3de0c1e8367a27

SHA1f3df29dbb20695eda6c04bccd15aca93dad187f5

SHA256f8fb633a25cce0200e4f88ff30a6370878f2a540f16a99a740fdedc1bb22b299

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: lp-uniswap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://lp-uniswap.org/cdn-cgi/phish-bypass?atok=NW2yHpziq64ybB6DUyOGN5aw_08giIbbGSbKZ5aoaus-1745604978.5980241-0.0.1.1-%2Fcdn-cgi%2Fphish-bypass%3Fatok%3D3CtEXunpvwSvtT2z0rsEbPO9AVHNba9_hrTbBTcUdzs-1745465319.5207124-0.0.1.1-%252Fcdn-cgi%252Fphish-bypass%253Fatok%253DeEF.D6pdjMXcNe2GDAiE74CIg0BtgiTzpvXNEC8LqI4-1745367719.1192958-0.0.1.1-%25252F
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 521 
Date: Sat, 26 Apr 2025 11:34:25 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 6821
Connection: keep-alive
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QEr7m4FX%2FszUUWGBi1YteLtoRW8xdK6WoFx8jgM6GG3gdsnGIJvaDyTEGMl9P7%2B1tD2DTG2QfRR%2B%2BE1%2BhzYM0UB3i4XKhmTfFDA34Yhc4VnGikeSGslvF3zfFFzTr63vog%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: cloudflare
CF-RAY: 9365c558eeb256c0-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=455&min_rtt=452&rtt_var=132&sent=4&recv=6&lost=0&retrans=0&sent_bytes=395&recv_bytes=1376&delivery_rate=5443609&cwnd=251&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

188.114.96.1

403 Forbidden

4.8 kB

URL User Request GET HTTPS

IP / ASN

188.114.96.1

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with very long lines (455)

First Seen2025-04-26

Last Seen2025-04-26

Times Seen1

Size4.8 kB (4790 bytes)

MD599cfafb75a2275a100df829780f14e36

SHA19ced25e8b281178515c48dba46dfb4224bde8a38

SHA256051e4151c8aa4fad71a66bf3ba7aecd5788fae72fd2a568bf0a652dd821a1afa

Certificate Info

IssuerGoogle Trust Services

Subjectlp-uniswap.org

FingerprintF6:46:13:40:DD:3F:FD:BF:4B:DC:70:64:34:75:6D:6A:20:79:63:7E

ValiditySat, 12 Apr 2025 01:43:45 GMT - Fri, 11 Jul 2025 02:41:33 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/phish-bypass?atok=NW2yHpziq64ybB6DUyOGN5aw_08giIbbGSbKZ5aoaus-1745604978.5980241-0.0.1.1-%2Fcdn-cgi%2Fphish-bypass%3Fatok%3D3CtEXunpvwSvtT2z0rsEbPO9AVHNba9_hrTbBTcUdzs-1745465319.5207124-0.0.1.1-%252Fcdn-cgi%252Fphish-bypass%253Fatok%253DeEF.D6pdjMXcNe2GDAiE74CIg0BtgiTzpvXNEC8LqI4-1745367719.1192958-0.0.1.1-%25252F HTTP/1.1
Host: lp-uniswap.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 403 Forbidden
date: Sat, 26 Apr 2025 11:34:25 GMT
content-type: text/html; charset=utf-8
content-encoding: br
server: cloudflare
cf-ray: 9365c556ff600b06-OSL
X-Firefox-Spdy: h2