Report Overview
Visitedpublic
2025-07-22 04:56:19
Tags
Submit Tags
URL
keep1.nio3409197357.workers.dev/
Finishing URL
keep1.nio3409197357.workers.dev/
IP / ASN
104.21.96.1
#13335 CLOUDFLARENET
Title
Suspected phishing site | Cloudflare

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
5

Host Summary

HostRankRegisteredFirst SeenLast Seen
challenges.cloudflare.com
unknown2009-02-172021-10-202025-07-16
keep1.nio3409197357.workers.dev
unknown2019-02-082025-07-222025-07-22

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP
104.21.64.1
ET INFO Observed Cloudflare workers.dev Domain in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish
SeverityIndicatorAlert
mediumkeep1.nio3409197357.workers.dev/WeChat

PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (5)

HTTP Transactions (6)

URLIPResponseSize
GET challenges.cloudflare.com/turnstile/v0/api.js
104.18.94.41302 Found49 kB
GET keep1.nio3409197357.workers.dev/cdn-cgi/styles/cf.errors.css
104.21.64.1200 OK24 kB
GET keep1.nio3409197357.workers.dev/cdn-cgi/images/icon-exclamation.png?1376755637
104.21.64.1200 OK452 B
GET challenges.cloudflare.com/turnstile/v0/g/4d127ba5149d/api.js
104.18.94.41200 OK49 kB
GET keep1.nio3409197357.workers.dev/
104.21.64.1403 Forbidden4.4 kB
GET keep1.nio3409197357.workers.dev/
104.21.64.1403 Forbidden4.4 kB