Report Overview
Visitedpublic
2026-03-08 18:49:03
Tags
Submit Tags
URL
xn--pump-tya.fun/live/8616Po7A6WD4z1Gh8tjjse2VuiNGUoBmDgDVvRBbpump
Finishing URL
xn--pump-tya.fun/live/8616Po7A6WD4z1Gh8tjjse2VuiNGUoBmDgDVvRBbpump
IP / ASN
104.21.70.4
Title
pump
Detections
urlquery
0
Network Intrusion Detection
8
Threat Detection Systems
8
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
thingproxy.freeboard.io | 6634612 | 2013-11-19 | 2014-10-08 | 2026-03-01 | 11 kB | 0 B | 0.0.0.0 | |
imagedelivery.net | 15876 | 2021-04-09 | 2021-09-20 | 2026-03-04 | 525 B | 3.1 kB | 104.18.3.36 |  |
mainnet.helius-rpc.com | 1872545 | 2023-04-06 | 2023-04-11 | 2026-03-04 | 1.2 kB | 1.6 kB | 172.64.151.87 | |
public-api.birdeye.so | 5262007 | 2021-11-17 | 2024-01-06 | 2026-03-03 | 3.8 kB | 2.7 kB | 172.66.161.182 |   |
raw.githubusercontent.com | 22021 | 2014-02-06 | 2014-03-01 | 2026-03-04 | 531 B | 33 kB |  185.199.111.133 |    |
api.allorigins.win | 1896907 | 2019-03-05 | 2019-03-27 | 2026-03-01 | 4.5 kB | 54 kB | 188.114.96.1 | |
fonts.reown.com | unknown | 2000-01-28 | 2025-09-26 | 2026-02-28 | 3.4 kB | 338 kB | 104.20.46.121 | |
solana.publicnode.com | unknown | 2016-08-16 | 2025-10-03 | 2026-03-07 | 1.0 kB | 1.5 kB | 172.66.150.162 |  |
tokens.jup.ag | 3826033 | 2021-09-15 | 2024-07-17 | 2026-02-28 | 483 B | 0 B | 0.0.0.0 | |
cdn.dexscreener.com | 1560830 | 2021-06-11 | 2023-07-13 | 2026-03-02 | 489 B | 24 kB | 172.64.149.113 | |
aahdjjsivunugynqjvyfbhqnjekniyfboma.com | unknown | 2025-10-12 | 2025-10-27 | 2026-02-28 | 547 B | 919 B |  194.242.11.186 |  |
xn--pump-tya.fun | unknown | unknown | No data | No data | 22 kB | 11 MB | 188.114.96.1 | |
api.codetabs.com | 3131649 | 2016-09-07 | 2018-11-13 | 2026-03-06 | 23 kB | 27 kB | 104.21.58.226 | |
rpc.ankr.com | 541361 | 2007-04-23 | 2021-10-24 | 2026-03-02 | 1.1 kB | 1.4 kB |  173.244.207.30 | |
pump.mypinata.cloud | 1441738 | 2020-01-28 | 2024-04-12 | 2026-02-28 | 1.1 kB | 1.7 kB | 0.0.0.0 | |
api.mainnet-beta.solana.com | 1956745 | 1993-04-16 | 2020-02-22 | 2026-02-28 | 1.1 kB | 1.1 kB | 74.63.225.119 | |
corsproxy.io | 175528 | 2022-01-30 | 2016-05-19 | 2026-03-04 | 12 kB | 18 kB | 104.26.7.163 | |
pub-14c1504681d2427684ac1f489338d075.r2.dev 8 alert(s) on this Host | unknown | 2022-08-23 | 2026-02-25 | 2026-03-04 | 3.8 kB | 41 MB | 104.18.50.34 | |
api.dexscreener.com | 2085659 | 2021-06-11 | 2022-05-19 | 2026-02-28 | 9.0 kB | 108 kB | 172.64.149.113 | |
api.dicebear.com | 868285 | 2013-06-21 | 2021-11-13 | 2026-03-03 | 5.5 kB | 63 kB | 194.242.11.186 | |
frontend-api.pump.fun | 1853078 | 2023-09-19 | 2024-06-06 | 2026-03-03 | 10 kB | 148 kB | 104.18.34.22 | |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Cloudflare Bot Management (Security)
Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.Express (Web frameworks, Web servers)
Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.Node.js (Programming languages)
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.Fastly (CDN)
Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video & streaming services.GitHub Pages (PaaS)
GitHub Pages is a static site hosting service.Varnish (Caching)
Varnish is a reverse caching proxy.Envoy (Reverse proxies)
Envoy is an open-source edge and service proxy, designed for cloud-native applications.Bunny (CDN)
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 173.244.207.30 | ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com) | |
| low | Client IP | 173.244.207.30 | ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com) | |
| low | Client IP | 104.18.50.34 | ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI | |
| low | Client IP | 104.18.50.34 | ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI | |
| low | Client IP | 104.18.50.34 | ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI | |
| low | Client IP | 104.18.50.34 | ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI | |
| low | Client IP | 104.18.50.34 | ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI | |
| low | Client IP | 104.18.50.34 | ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-mobile.gif | malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-desktop.gif | malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-desktop.gif | malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-mobile.gif | malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-mobile.gif | malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-desktop.gif | malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-mobile.gif | malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-desktop.gif | malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
JavaScript (3)
No JavaScripts
HTTP Transactions (218)
| URL | IP | Response | Size |
|---|