Report - 104.21.64.1

Report Overview

Visitedpublic

2025-05-23 16:57:15

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
performance.radar.cloudflare.com	unknown	2009-02-17	2022-06-29	2025-05-22	395 B	8.8 kB	104.18.30.78
104.21.64.1	unknown	unknown	No data	No data	1.6 kB	22 kB	104.21.64.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-05-23 16:56:52	medium	104.21.64.1	Client IP	ET INFO TLS Handshake Failure

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-05-23	medium	104.21.64.1	Sinkholed
2025-05-23	medium	104.21.64.1	Sinkholed
2025-05-23	medium	104.21.64.1	Sinkholed
2025-05-23	medium	104.21.64.1	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	104.21.64.1/	ScriptElement	961 B	2023-03-07	2025-08-02
URL 104.21.64.1/ IP / ASN 0.0.0.0 #0 Introduced by ScriptElement Embedded true Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 699 Size 961 B (961 bytes) MD5 a6051b669118a4baa5726d7dd6365c2f SHA1 e51d126e1bde5e8ce21e5e64144d17ddd973f1fd SHA256 8727492127f824fd52b5c12f4cfaa56714ce79a0b2914979199de8d7405638e5 Format Code Loading...

	104.21.64.1/	ScriptElement	375 B	2023-03-07	2025-08-02
URL 104.21.64.1/ IP / ASN 0.0.0.0 #0 Introduced by ScriptElement Embedded true Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 167745 Size 375 B (375 bytes) MD5 56df91490fa1984fa82b297dcb23c22d SHA1 2050f127b73f50d21eb9b0a2a3f2aea7d4372ba9 SHA256 275407540ae2d5516300e4027ce994e1c97f958d464e137d0fff116d7acf0f24 Format Code Loading...

	104.21.64.1/	ScriptElement	38 B	2023-03-07	2025-08-02
URL 104.21.64.1/ IP / ASN 0.0.0.0 #0 Introduced by ScriptElement Embedded true Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 124778 Size 38 B (38 bytes) MD5 eb2ee6e4b3d4e81bacdb2474d9b3c2f5 SHA1 6588855b25c975b224e0fd1b50ca1b3f36cd46ed SHA256 3dd83a652b2e60d8dfc699cd2006f70007b826a92b49e61e9194bf422481ac05 Format Code Loading...

	performance.radar.cloudflare.com/beacon.js	ScriptElement	7.9 kB	2025-05-23	2025-05-23
URL performance.radar.cloudflare.com/beacon.js IP / ASN 104.18.30.78 #13335 CLOUDFLARENET Introduced by ScriptElement Embedded false Resource Info First Seen 2025-05-23 Last Seen 2025-05-23 Times Seen 1 Size 7.9 kB (7929 bytes) MD5 6d6ff377223678bb47680de7dd4039e8 SHA1 1425731de0b8ccf273dd60237498dde2ee98998f SHA256 3ce5cf36d7480d02f27af1d64f2a9a5551979ecb73e95af4e53fae878690aa47 Format Code Loading...

HTTP Transactions (5)

URL IP Response Size

GET performance.radar.cloudflare.com/beacon.js

104.18.30.78

200 OK

7.9 kB

URL

performance.radar.cloudflare.com/beacon.js

IP / ASN

104.18.30.78

#13335 CLOUDFLARENET

Requested byhttp://104.21.64.1/

Resource Info

File typeJavaScript source, ASCII text, with very long lines (7928)

First Seen2025-05-23

Last Seen2025-05-23

Times Seen1

Size7.9 kB (7929 bytes)

MD56d6ff377223678bb47680de7dd4039e8

SHA11425731de0b8ccf273dd60237498dde2ee98998f

SHA2563ce5cf36d7480d02f27af1d64f2a9a5551979ecb73e95af4e53fae878690aa47

Certificate Info

IssuerGoogle Trust Services

Subjectradar.cloudflare.com

Fingerprint5B:1E:A5:CE:2E:DD:59:C6:10:BD:7A:4D:D4:F7:39:92:56:3F:1A:2E

ValidityMon, 21 Apr 2025 20:03:54 GMT - Sun, 20 Jul 2025 21:03:44 GMT

HTTP Headers

GET /beacon.js HTTP/1.1
Host: performance.radar.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 23 May 2025 16:56:53 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: no-store, max-age=0
access-control-allow-headers: *
access-control-allow-methods: *
referrer-policy: no-referrer
timing-allow-origin: *
set-cookie: __cf_bm=hPfeav11mSKr8qsKNpJ.8phzRBKeiRswdGoZik7lLCk-1748019413-1.0.1.1-._.eP.wjg3w0TSMQxsGw5EfvDp0bh5pyW94hcCaz39Gm1qzfRvUimP8cZ1iC5XcGhDqBOz6qlX7dtNgrxcWENhCPMTuz9LuqNiWr.wL9SSk; path=/; expires=Fri, 23-May-25 17:26:53 GMT; domain=.radar.cloudflare.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
server: cloudflare
cf-ray: 944616d47b6fb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET 104.21.64.1/cdn-cgi/styles/main.css

104.21.64.1

200 OK

8.0 kB

URL

104.21.64.1/cdn-cgi/styles/main.css

IP / ASN

104.21.64.1

#13335 CLOUDFLARENET

Requested byhttp://104.21.64.1/

Resource Info

File typeASCII text, with very long lines (8012)

First Seen2023-04-05

Last Seen2025-08-02

Times Seen29401

Size8.0 kB (8013 bytes)

MD5ff26f59e28a5fe6ea4ab23586415696b

SHA14182675484d175e363cd34b43041b7b1af93d0cd

SHA256d30b4ea6f68456672f5abb35e9dcf7d54226372b66e9d60a7ee26b7a52568e74

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/styles/main.css HTTP/1.1
Host: 104.21.64.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://104.21.64.1/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 23 May 2025 16:56:53 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 22 May 2025 05:24:59 GMT
ETag: W/"682eb52b-1f4d"
Server: cloudflare
CF-RAY: 944616d43af70b02-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Expires: Fri, 23 May 2025 18:56:53 GMT
Cache-Control: max-age=7200, public
Content-Encoding: gzip

GET 104.21.64.1/favicon.ico

104.21.64.1

403 Forbidden

6.2 kB

URL

104.21.64.1/favicon.ico

IP / ASN

104.21.64.1

#13335 CLOUDFLARENET

Requested byhttp://104.21.64.1/

Resource Info

File typeHTML document, ASCII text, with very long lines (501)

First Seen2025-05-23

Last Seen2025-05-23

Times Seen1

Size6.2 kB (6234 bytes)

MD589830a89d6a9b71cc1d4fb765fc065ab

SHA1c5b3b3e718cabb00a6321adb2699275d763c6fde

SHA25697313982a2559c271a9fcddac1631a7ccef4aba185e424dc7947180474d91b01

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 104.21.64.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://104.21.64.1/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Fri, 23 May 2025 16:56:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 944616d60f7d0b02-OSL
Content-Encoding: gzip

GET 104.21.64.1/

0.0.0.0

0 B

URL

104.21.64.1/

IP / ASN

0.0.0.0

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5606031

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 104.21.64.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

GET 104.21.64.1/

104.21.64.1

403 Forbidden

6.2 kB

URL

104.21.64.1/

IP / ASN

104.21.64.1

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with very long lines (501)

First Seen2025-05-23

Last Seen2025-05-23

Times Seen1

Size6.2 kB (6234 bytes)

MD5e319814fddb0435fb3dcc43d6ee8ce5d

SHA1422dc6d9a9d4c2615b7a6795a95f5fd40514fd99

SHA256f8a2bf8b60b10bb222126f4ec5228158b5535512bbf696317360238d407582cc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 104.21.64.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 403 Forbidden
Date: Fri, 23 May 2025 16:56:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 944616d328dfb4f1-OSL
Content-Encoding: gzip