Report - claim-nesara.pages.dev/

Report Overview

Visited public
2025-05-30 14:19:44
Tags
URL
claim-nesara.pages.dev/
Finishing URL
claim-nesara.pages.dev/
IP / ASN
104.21.80.1
#13335 CLOUDFLARENET
Title
Suspected phishing site | Cloudflare

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
claim-nesara.pages.dev	unknown	2020-09-02	2025-05-30	2025-05-30	2.1 kB	40 kB	104.21.48.1
challenges.cloudflare.com	unknown	2009-02-17	2021-10-20	2025-05-28	893 B	97 kB	104.18.95.41

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-05-30 14:19:22	low	Client IP	104.21.48.1	ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	claim-nesara.pages.dev/	ScriptElement	210 B	2023-03-07	2025-06-13
Pretty URL claim-nesara.pages.dev/ IP 104.21.48.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03 Last Seen2025-06-13 03:18 Times Seen108495 Hash ab1ac4cf0f484cc9f859c0a7983353e0 2da142b1135bd10cdbed4a7353e4483acc30ebe9 50e878a18b2b5be7071dc7c10297381bcfcb55f17c27760ee857af9e31133324 Loading...

	claim-nesara.pages.dev/	ScriptElement	115 B	2025-04-28	2025-06-12
Pretty URL claim-nesara.pages.dev/ IP 104.21.48.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2025-04-28 14:01 Last Seen2025-06-12 21:50 Times Seen1133 Hash 34df99ef0602560c811e58e4711c99e3 88dea8841635da3e1130ce19e3718ceb17a95a35 18a52fd2cc16c86bcba28796b0e231144f219cc87e049c41d9d378b880a42fba Loading...

	challenges.cloudflare.com/turnstile/v0/api.js	ScriptElement	48 kB	2025-05-13	2025-06-03
Pretty URL challenges.cloudflare.com/turnstile/v0/api.js IP 104.18.95.41 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2025-05-13 14:11 Last Seen2025-06-03 19:41 Times Seen7393 Hash 3946a8b345d6020f3f424ae5f37e818f 27267dd319814b647f04bfe0ae09e1ca51ddc896 a7fdcf655a6349724c367f366c852b2e0309e9ad7a25b376df82a48e1dd98482 Loading...

	claim-nesara.pages.dev/	ScriptElement	375 B	2023-03-07	2025-06-13
Pretty URL claim-nesara.pages.dev/ IP 104.21.48.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03 Last Seen2025-06-13 03:18 Times Seen111384 Hash 56df91490fa1984fa82b297dcb23c22d 2050f127b73f50d21eb9b0a2a3f2aea7d4372ba9 275407540ae2d5516300e4027ce994e1c97f958d464e137d0fff116d7acf0f24 Loading...

	claim-nesara.pages.dev/	ScriptElement	46 B	2025-03-04	2025-06-13
Pretty URL claim-nesara.pages.dev/ IP 104.21.48.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2025-03-04 09:24 Last Seen2025-06-13 02:09 Times Seen1790 Hash 16f6161217e242dffadf4241d174abcc 304832d02caf7b8a45ea29c321993d7eba48be67 390eefa5af21228aaab4bb7eb68043b2468a645b3c861aaba17b226cc8c05d95 Loading...

HTTP Transactions (7)

	URL	IP	Response	Size
	claim-nesara.pages.dev/cdn-cgi/styles/cf.errors.css	104.21.48.1	200 OK	24 kB
URL GET claim-nesara.pages.dev/cdn-cgi/styles/cf.errors.css IP 104.21.48.1:80 ASN #13335 CLOUDFLARENET Requested by http://claim-nesara.pages.dev/ File type ASCII text, with very long lines (24050) Size 24 kB (24051 bytes) Hash 5e8c69a459a691b5d1b9be442332c87d f24dd1ad7c9080575d92a9a9a2c42620725ef836 84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091 HTTP Headers `GET /cdn-cgi/styles/cf.errors.css HTTP/1.1 Host: claim-nesara.pages.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://claim-nesara.pages.dev/ Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Fri, 30 May 2025 14:19:22 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Vary: accept-encoding Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Rrb%2BxOiRlWAH78%2BSeNqaEeaWUlVfd38%2F2nbxWeOeZDsOFCb8eOiLx6AC8eoAYWOV0vxNZOPPwrThFGce8dBqsQ9pGB7INah%2F9eRDBDbvNbXz%2FkBE"}]} Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} Content-Encoding: gzip Server: cloudflare CF-RAY: 947eddb90cd1712b-OSL

	challenges.cloudflare.com/turnstile/v0/api.js	104.18.95.41	302 Found	48 kB
URL GET challenges.cloudflare.com/turnstile/v0/api.js IP 104.18.95.41:443 ASN #13335 CLOUDFLARENET Requested by http://claim-nesara.pages.dev/ Certificate IssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT File type Size 48 kB (48200 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: http://claim-nesara.pages.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 302 Found date: Fri, 30 May 2025 14:19:22 GMT content-length: 0 access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/6fab0cec561d/api.js vary: Accept-Encoding server: cloudflare cf-ray: 947eddb93d7e569a-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2`

	claim-nesara.pages.dev/cdn-cgi/images/icon-exclamation.png?1376755637	104.21.48.1	200 OK	452 B
URL GET claim-nesara.pages.dev/cdn-cgi/images/icon-exclamation.png?1376755637 IP 104.21.48.1:80 ASN #13335 CLOUDFLARENET Requested by http://claim-nesara.pages.dev/ File type PNG image data, 54 x 54, 8-bit colormap, non-interlaced Size 452 B (452 bytes) Hash c33de66281e933259772399d10a6afe8 b9f9d500f8814381451011d4dcf59cd2d90ad94f f1591a5221136c49438642155691ae6c68e25b7241f3d7ebe975b09a77662016 HTTP Headers `GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: claim-nesara.pages.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://claim-nesara.pages.dev/cdn-cgi/styles/cf.errors.css Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Date: Fri, 30 May 2025 14:19:22 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: keep-alive Vary: accept-encoding Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=iUMYKTf17FUTw0uZapx3UVzMCWD4SX63TsD6uMC3oo%2FTFCEnbEnVwP0G%2BpYInyzNRPdJc%2BDlRMySwFDt0o%2BuyonJ26y6OxyBnJXqRvj6jo%2F%2FlXC%2B"}]} Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} Server: cloudflare CF-RAY: 947eddb96d77712b-OSL

	challenges.cloudflare.com/turnstile/v0/g/6fab0cec561d/api.js	104.18.95.41	200 OK	48 kB
URL GET challenges.cloudflare.com/turnstile/v0/g/6fab0cec561d/api.js IP 104.18.95.41:443 ASN #13335 CLOUDFLARENET Requested by http://claim-nesara.pages.dev/ Certificate IssuerGoogle Trust Services Subjectchallenges.cloudflare.com Fingerprint66:48:DF:B4:8B:9D:6A:8C:3A:B7:0F:CF:92:C7:AF:56:B9:3D:A2:1C ValidityTue, 29 Apr 2025 17:49:00 GMT - Mon, 28 Jul 2025 18:48:58 GMT File type JavaScript source, ASCII text, with very long lines (48199) Size 48 kB (48200 bytes) Hash 3946a8b345d6020f3f424ae5f37e818f 27267dd319814b647f04bfe0ae09e1ca51ddc896 a7fdcf655a6349724c367f366c852b2e0309e9ad7a25b376df82a48e1dd98482 HTTP Headers `GET /turnstile/v0/g/6fab0cec561d/api.js HTTP/1.1 Host: challenges.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: http://claim-nesara.pages.dev/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/3 200 OK date: Fri, 30 May 2025 14:19:22 GMT content-type: application/javascript; charset=UTF-8 last-modified: Mon, 12 May 2025 13:39:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin priority: u=3,i=?0 vary: Accept-Encoding server: cloudflare cf-ray: 947eddb9ce6d56af-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 server-timing: cfExtPri`

	claim-nesara.pages.dev/favicon.ico	104.21.48.1	403 Forbidden	4.4 kB
URL GET claim-nesara.pages.dev/favicon.ico IP 104.21.48.1:80 ASN #13335 CLOUDFLARENET Requested by http://claim-nesara.pages.dev/ File type HTML document, ASCII text, with very long lines (396) Size 4.4 kB (4386 bytes) Hash 1bf2a6da23c3bfcc2715817587313fa3 e831db1f56e46fe6b3c836041b2a9abe6ef6e181 1218139f10a8028737e28f5f8e6043daff7bd49ccf005448b4fca61e8df77f2e HTTP Headers `GET /favicon.ico HTTP/1.1 Host: claim-nesara.pages.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://claim-nesara.pages.dev/ Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Date: Fri, 30 May 2025 14:19:22 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Vary: accept-encoding Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1s%2F44WEuZj9fc4WO98PuI64d4JvOYkAK6yYwIPl81TJ7q7QNGIIQV4TRCXjCy2U%2FVX4TVNjsny0MQXI8R7vFEyiyI4%2FjVUA2v%2F5iI07wydofPzlV"}]} Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} Content-Encoding: gzip Server: cloudflare CF-RAY: 947eddba8f8f712b-OSL alt-svc: h2=":443"; ma=60

	claim-nesara.pages.dev/	104.21.48.1	403 Forbidden	4.4 kB
URL User Request GET claim-nesara.pages.dev/ IP 104.21.48.1:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services Subjectclaim-nesara.pages.dev Fingerprint8A:03:1F:09:84:89:33:59:92:DE:7D:26:A4:17:83:9D:34:EC:87:40 ValidityMon, 12 May 2025 02:14:59 GMT - Sun, 10 Aug 2025 03:13:28 GMT File type HTML document, ASCII text, with very long lines (396) Size 4.4 kB (4386 bytes) Hash e374f793e3ce13ee2e130ed52639e96e 1668b6af987e0c1c0d5afda5fd3fee8983d3addc a4ec6828804534e8b69838a08f6a22a5e3cdf4530ac7d68685b7d211e89d0af2 HTTP Headers `GET / HTTP/1.1 Host: claim-nesara.pages.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 403 Forbidden date: Fri, 30 May 2025 14:19:22 GMT content-type: text/html; charset=utf-8 vary: accept-encoding report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=BRBAQvA5v0rJjIf4roO16%2FyLF0xyZdRDv4cvOMaSndyeZRQxkwZ%2F2yHhm49g8ke3wBrPMmoi9m3n661msJGuVHxLmIiMOem2gNwKz9Zkxlp0lUnr"}]} nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} content-encoding: br server: cloudflare cf-ray: 947eddb6f9490b02-OSL X-Firefox-Spdy: h2

	claim-nesara.pages.dev/	104.21.48.1	403 Forbidden	4.4 kB
URL User Request GET claim-nesara.pages.dev/ IP 104.21.48.1:80 ASN #13335 CLOUDFLARENET File type HTML document, ASCII text, with very long lines (396) Size 4.4 kB (4386 bytes) Hash 8bbb3ebba60fd743703bbf2862806981 d52cf85ae08117f3465908da768f6fd7db2b2466 c6b9e6e52e60e39d7184335c296b642b825916860c9fce867aef4a61cf7df159 HTTP Headers `GET / HTTP/1.1 Host: claim-nesara.pages.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 403 Forbidden Date: Fri, 30 May 2025 14:19:22 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Vary: accept-encoding Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=uCukopRUXFKCBlJPzzXGsW5fJrAa767jNpzmun97U7OXMYUx2qRFV90wzseNASFBqzNWQaCVlFe2ioDcI09239eYSGD7jYIholZoFbz39WwV%2BhIp"}]} Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} Content-Encoding: gzip Server: cloudflare CF-RAY: 947eddb80ae6712b-OSL alt-svc: h2=":443"; ma=60

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (7)

URL GET

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size