Suspected phishing site | Cloudflare

phishing scam

technology software

English

The domain name 'node-show.pages.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'node-show'. The second-level label 'pages' is 5 characters long holding two vowels versus three consonants. Tokenizing the label suggests 1 word: pages. No strong language cues emerged from the frequency lists.

html/a2/9a/a29aa3a0-7097-4bba-9012-a77dde66c3d1.html.gz

5743c640722924aa6974b1f602ad1abb67f4c5240cc4829ed64147cf0e6ecf83

robots

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/


  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
 


    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  

(function(){function d(){var b=a.getElementById("cf-footer-item-ip"),c=a.getElementById("cf-footer-ip-reveal");b&&"classList"in b&&(b.classList.remove("hidden"),c.addEventListener("click",function(){c


    window._cf_translation = {};
    
    
  

☠️ Malicious - https://node-show.pages.dev/

Requests	IP Address	Location	AS Autonomous System
6	172.66.44.60	Unknown	Unknown
0	172.66.47.196	Unknown	Unknown
0	104.18.95.41	Unknown	Unknown
0	104.18.94.41	Unknown	Unknown
0	2606:4700:310c::ac42:2c3c	Unknown	Unknown
0	2606:4700:310c::ac42:2fc4	Unknown	Unknown
0	2606:4700::6812:5e29	Unknown	Unknown
0	2606:4700::6812:5f29	Unknown	Unknown
6	8	-	-

Security Scan Report: node-show.pages.dev

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Primary Scan Blocked — Fallback Capture Shown

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History