Report Overview
Visitedpublic
2026-03-15 01:38:11
Tags
Submit Tags
URL
cashbackterminal.gg
Finishing URL
cashbackterminal.gg/
IP / ASN
104.21.89.124
Title
Pump.fun x Padre Cashback - Get Up to 30% Back on Your Losses
Detections
urlquery
0
Network Intrusion Detection
7
Threat Detection Systems
12
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
pub-14c1504681d2427684ac1f489338d075.r2.dev 8 alert(s) on this Host | unknown | 2022-08-23 | 2026-02-25 | 2026-03-12 | 3.9 kB | 41 MB | 104.18.50.34 |  |
link-modal-7425.vercel.app | unknown | unknown | No data | No data | 2.3 kB | 2.9 MB |  216.198.79.131 |  |
fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-03-08 | 482 B | 13 kB | 142.251.143.138 | |
cloudflare-dns.com 1 alert(s) on this Host | 112 | 2018-03-28 | 2015-04-09 | 2026-03-09 | 517 B | 522 B | 104.16.249.249 | |
fonts.gstatic.com | unknown | 2008-02-11 | 2014-04-02 | 2026-03-08 | 2.8 kB | 247 kB | 142.251.142.227 | |
api.dexscreener.com | 2085659 | 2021-06-11 | 2022-05-19 | 2026-03-09 | 506 B | 41 kB | 104.18.38.143 | |
cashbackterminal.gg 14 alert(s) on this Host | unknown | unknown | No data | No data | 3.1 kB | 124 kB | 104.21.89.124 | |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Vercel (PaaS)
Vercel is a cloud platform for static frontends and serverless functions.Cloudflare Bot Management (Security)
Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 104.16.249.249 | ET INFO Observed Cloudflare DNS over HTTPS Domain (cloudflare-dns .com in TLS SNI) | |
| low | Client IP | 104.18.50.34 | ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI | |
| low | Client IP | 104.18.50.34 | ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI | |
| low | Client IP | 104.18.50.34 | ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI | |
| low | Client IP | 104.18.50.34 | ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI | |
| low | Client IP | 104.18.50.34 | ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI | |
| low | Client IP | 104.18.50.34 | ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | link-modal-7425.vercel.app/demo.php?id=69afcbf5d52f72e0618b388f&parent_url=cashbackterminal.gg%2F | audit | Hunting_JS_WebAssembly |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-desktop.gif | malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-desktop.gif | malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-desktop.gif | malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-mobile.gif | malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-desktop.gif | malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-mobile.gif | malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-mobile.gif | malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| Nextron YARA rules | pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-mobile.gif | malware | Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type |
| DigiCert UltraDNS | cashbackterminal.gg | malicious | Sinkholed |
| DNS4EU | cashbackterminal.gg | malicious | Sinkholed |
| DigiCert UltraDNS | cloudflare-dns.com | malicious | Sinkholed |
JavaScript (6)
No JavaScripts
HTTP Transactions (27)
| URL | IP | Response | Size |
|---|