Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
RexOS Shield (web application firewall), 2026-11-13 13:44:05 UTC, 1 event from this address. Ref 683811.
Detected: Fake device: phone-size window 375x812 on a 2560x1600 desktop screen with no touch.
Request: POST /version/26.3
Network: AS3254 Lucky N ...
show moreRexOS Shield (web application firewall), 2026-11-13 13:44:05 UTC, 1 event from this address. Ref 683811.
Detected: Fake device: phone-size window 375x812 on a 2560x1600 desktop screen with no touch.
Request: POST /version/26.3
Network: AS3254 Lucky Net Ltd (UA).
Context: phone-size window on a large desktop screen without touch; desktop browsers cannot be made that small, only automation tools emulating a phone do it.
Browser reported: language en-US, 2 set, clock America/New_York UTC-5, screen 2560x1600, window 375x812, 4 cores, 8 GB, no touch, platform Windows.
WebRTC: no candidates at all (forced through a proxy or blocked by a setting).
Bot signature: 9ac7f8238521a3de.
Action: browser verification failed, access denied.
Categories: Bad Web Bot, Exploited Host.
Threat report: https://craftrank.org/threat-report-phone-window-scraper
Full evidence: https://craftrank.org/evidence?r=683811
show less
