Report Overview
Visitedpublic
2025-08-21 04:37:38
Submit Tags
URL
quasar-migration.com/
Finishing URL
quasar-migration.com/
IP / ASN
104.21.32.1
#13335 CLOUDFLARENET
Title
quasar-migration.com/

Suspicious - Suspicious Javascript code

Detections

urlquery
2
Network Intrusion Detection
10
Threat Detection Systems
1

Host Summary

HostRankRegisteredFirst SeenLast Seen
bsc-dataseed.bnbchain.org
20775822020-01-132023-08-032025-08-17
app.quasar.fi
unknown2022-02-042025-08-212025-08-21
bsc-rpc.publicnode.com
21424102016-08-162024-05-082025-08-21
cdn.jsdelivr.net
16782012-05-162012-09-302025-08-20
quasar-migration.com
unknown2025-08-102025-08-212025-08-21
1rpc.io
470662022-08-022022-08-182025-08-16
cdnjs.cloudflare.com
12222009-02-172012-05-232025-08-20
api.ipify.org
81662014-01-052014-10-062025-08-20
binance.nodereal.io
18049852021-07-192022-10-202025-08-19

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
low
172.18.0.20
104.26.13.205
ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI
low
172.18.0.20
104.26.13.205
ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI
low
172.18.0.20
54.170.244.142
ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)
low
172.18.0.20
20.105.41.175
ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)
low
172.18.0.20
20.105.41.175
ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)
low
172.18.0.20
54.170.244.142
ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)
low
172.18.0.20
104.20.24.117
ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)
low
172.18.0.20
104.20.24.117
ET INFO Observed Smart Chain Domain in TLS SNI (bsc-rpc .publicnode .com)
low
172.18.0.20
3.254.213.200
ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)
low
172.18.0.20
3.254.213.200
ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)
Threat Detection Systems
Detection SystemIndicatorVerdictAlert
YARAhub by abuse.chquasar-migration.com/malware
Detects file containing Telegram Bot API

Telegram Bot detected (1)

URL
quasar-migration.com/
IP / ASN
104.21.48.1
#13335 CLOUDFLARENET
Token
8394590328:AAGqulOinyUS1rWN40DT7kKeXSyfiaWOvxI
Bot Overview
User ID8394590328
UsernameFirst2respond_bot
First NameFirstresponderbot
Last NameN/A
Chat Info
Chat ID8194544838
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs0

JavaScript (14)

HTTP Transactions (34)

URLIPResponseSize