Report Overview
Visitedpublic
2025-07-22 04:56:19
Tags
Submit Tags
URL
keep1.nio3409197357.workers.dev/
Finishing URL
keep1.nio3409197357.workers.dev/
IP / ASN

104.21.96.1
Title
Suspected phishing site | Cloudflare
Detections
urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
5
Host Summary
Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
---|---|---|---|---|---|---|---|---|
challenges.cloudflare.com | unknown | 2009-02-17 | 2021-10-20 | 2025-07-16 | 829 B | 99 kB | ![]() 104.18.94.41 | |
keep1.nio3409197357.workers.dev 4 alert(s) on this Domain | unknown | 2019-02-08 | 2025-07-22 | 2025-07-22 | 1.8 kB | 36 kB | ![]() 104.21.64.1 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Timestamp | Severity | Source IP | Destination IP | Alert |
---|---|---|---|---|
low | Client IP | ![]() 104.21.64.1 | ET INFO Observed Cloudflare workers.dev Domain in TLS SNI |
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
Scan Date | Severity | Indicator | Alert |
---|---|---|---|
2025-07-21 | medium | keep1.nio3409197357.workers.dev/ |
PhishTank
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
JavaScript (5)
URL | From | Size | First Seen | Last Seen | |
---|---|---|---|---|---|
keep1.nio3409197357.workers.dev/ | ScriptElement | 210 B | 2023-03-07 | 2025-08-02 | |
URL keep1.nio3409197357.workers.dev/ IP / ASN ![]() 104.21.64.1 Introduced by ScriptElement Embedded true Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 161841 Size 210 B (210 bytes) MD5 ab1ac4cf0f484cc9f859c0a7983353e0 SHA1 2da142b1135bd10cdbed4a7353e4483acc30ebe9 Loading... | |||||
challenges.cloudflare.com/turnstile/v0/api.js | ScriptElement | 49 kB | 2025-07-18 | 2025-07-22 | |
URL challenges.cloudflare.com/turnstile/v0/api.js IP / ASN ![]() 104.18.94.41 Introduced by ScriptElement Embedded false Resource Info First Seen 2025-07-18 Last Seen 2025-07-22 Times Seen 4904 Size 49 kB (48828 bytes) MD5 a20ea626775ecdceba42649036255835 SHA1 75924f80f4f1a02b9604ad82910920aef81fdd04 Loading... | |||||
keep1.nio3409197357.workers.dev/ | ScriptElement | 115 B | 2025-04-28 | 2025-08-02 | |
URL keep1.nio3409197357.workers.dev/ IP / ASN ![]() 104.21.64.1 Introduced by ScriptElement Embedded true Resource Info First Seen 2025-04-28 Last Seen 2025-08-02 Times Seen 31789 Size 115 B (115 bytes) MD5 34df99ef0602560c811e58e4711c99e3 SHA1 88dea8841635da3e1130ce19e3718ceb17a95a35 Loading... | |||||
keep1.nio3409197357.workers.dev/ | ScriptElement | 375 B | 2023-03-07 | 2025-08-02 | |
URL keep1.nio3409197357.workers.dev/ IP / ASN ![]() 104.21.64.1 Introduced by ScriptElement Embedded true Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 167745 Size 375 B (375 bytes) MD5 56df91490fa1984fa82b297dcb23c22d SHA1 2050f127b73f50d21eb9b0a2a3f2aea7d4372ba9 Loading... | |||||
keep1.nio3409197357.workers.dev/ | ScriptElement | 46 B | 2025-03-04 | 2025-08-02 | |
URL keep1.nio3409197357.workers.dev/ IP / ASN ![]() 104.21.64.1 Introduced by ScriptElement Embedded true Resource Info First Seen 2025-03-04 Last Seen 2025-08-02 Times Seen 39522 Size 46 B (46 bytes) MD5 16f6161217e242dffadf4241d174abcc SHA1 304832d02caf7b8a45ea29c321993d7eba48be67 Loading... | |||||
No JavaScripts
HTTP Transactions (6)
URL | IP | Response | Size | |||||||
---|---|---|---|---|---|---|---|---|---|---|
GET challenges.cloudflare.com/turnstile/v0/api.js | ![]() | 302 Found | 49 kB | |||||||
URL challenges.cloudflare.com/turnstile/v0/api.js IP / ASN ![]() 104.18.94.41 Requested byhttp://keep1.nio3409197357.workers.dev/ Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-02 Times Seen5606025 Size49 kB (48828 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectchallenges.cloudflare.com FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71 ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT HTTP Headers
| ||||||||||
GET keep1.nio3409197357.workers.dev/cdn-cgi/styles/cf.errors.css | ![]() | 200 OK | 24 kB | |||||||
URL keep1.nio3409197357.workers.dev/cdn-cgi/styles/cf.errors.css IP / ASN ![]() 104.21.64.1 Requested byhttp://keep1.nio3409197357.workers.dev/ Resource Info File typeASCII text, with very long lines (24050) First Seen0001-01-01 Last Seen2025-08-02 Times Seen229565 Size24 kB (24051 bytes) MD55e8c69a459a691b5d1b9be442332c87d SHA1f24dd1ad7c9080575d92a9a9a2c42620725ef836 SHA25684e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091 Detections
HTTP Headers
| ||||||||||
GET keep1.nio3409197357.workers.dev/cdn-cgi/images/icon-exclamation.png?1376755637 | ![]() | 200 OK | 452 B | |||||||
URL keep1.nio3409197357.workers.dev/cdn-cgi/images/icon-exclamation.png?1376755637 IP / ASN ![]() 104.21.64.1 Requested byhttp://keep1.nio3409197357.workers.dev/ Resource Info File typePNG image data, 54 x 54, 8-bit colormap, non-interlaced First Seen2023-04-12 Last Seen2025-08-02 Times Seen200611 Size452 B (452 bytes) MD5c33de66281e933259772399d10a6afe8 SHA1b9f9d500f8814381451011d4dcf59cd2d90ad94f SHA256f1591a5221136c49438642155691ae6c68e25b7241f3d7ebe975b09a77662016 Detections
HTTP Headers
| ||||||||||
GET challenges.cloudflare.com/turnstile/v0/g/4d127ba5149d/api.js | ![]() | 200 OK | 49 kB | |||||||
URL challenges.cloudflare.com/turnstile/v0/g/4d127ba5149d/api.js IP / ASN ![]() 104.18.94.41 Requested byhttp://keep1.nio3409197357.workers.dev/ Resource Info File typeJavaScript source, ASCII text, with very long lines (48827) First Seen2025-07-18 Last Seen2025-07-22 Times Seen4904 Size49 kB (48828 bytes) MD5a20ea626775ecdceba42649036255835 SHA175924f80f4f1a02b9604ad82910920aef81fdd04 SHA256b0c25da886116ad33304170e69e0198224b4daa3705a66dc809764cab576d5a6 Certificate Info IssuerGoogle Trust Services Subjectchallenges.cloudflare.com FingerprintFC:98:AC:45:6F:F6:41:18:0B:96:F4:70:AB:D7:E3:D4:3D:B4:66:71 ValidityFri, 27 Jun 2025 18:18:48 GMT - Thu, 25 Sep 2025 19:18:44 GMT HTTP Headers
| ||||||||||
GET keep1.nio3409197357.workers.dev/ | ![]() | 403 Forbidden | 4.4 kB | |||||||
URL keep1.nio3409197357.workers.dev/ IP / ASN ![]() 104.21.64.1 Requested byN/A Resource Info File typeHTML document, ASCII text, with very long lines (396) First Seen2025-07-22 Last Seen2025-07-22 Times Seen1 Size4.4 kB (4386 bytes) MD51d8f4a8de8280f54c1ebaaf956730f19 SHA1758e13e93d1899dd517deaa7f9bd0d63c03a94ff SHA256d684ca029c8a37ecb86d978c991bad3eed3cee32d3bedba5b96c4c4cc31021e1 Certificate Info IssuerGoogle Trust Services Subjectnio3409197357.workers.dev Fingerprint5D:50:6C:A3:CC:DC:29:FF:F0:DB:B3:8F:10:53:EA:E8:9C:34:8C:E5 ValiditySat, 21 Jun 2025 06:02:06 GMT - Fri, 19 Sep 2025 07:00:51 GMT Detections
HTTP Headers
| ||||||||||
GET keep1.nio3409197357.workers.dev/ | ![]() | 403 Forbidden | 4.4 kB | |||||||
URL keep1.nio3409197357.workers.dev/ IP / ASN ![]() 104.21.64.1 Requested byN/A Resource Info File typeHTML document, ASCII text, with very long lines (396) First Seen2025-07-22 Last Seen2025-07-22 Times Seen1 Size4.4 kB (4386 bytes) MD525b71074aada9acdddcea37f8ab7bc71 SHA1c242a5a61512d6bb049f76a96ab08e5a14ddc6ce SHA25670d6c2c7ee0d47ff71c17b5cec68077d04bf62162cdd357a4fd9c26ad3e6ecaa Detections
HTTP Headers
| ||||||||||