Report Overview
Visitedpublic
2026-08-23 18:22:37
Tags
Submit Tags
URL
tokenop.xyz/
Finishing URL
tokenop.xyz/
IP / ASN
172.67.147.116
Title
Claim | Lab
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
7
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
stake.lab.pro | unknown | 2025-05-27 | 2026-08-18 | 2026-08-18 | 2.2 kB | 137 kB |  216.150.16.1 |  |
ipwho.is | 18239 | 2022-01-29 | 2020-06-08 | 2026-08-18 | 443 B | 941 B | 172.66.175.107 |  |
cdn.jsdelivr.net | 1678 | 2012-05-16 | 2012-09-30 | 2026-08-16 | 543 B | 15 kB | 151.101.65.229 | |
tokenop.xyz 54 alert(s) on this Host | unknown | unknown | No data | No data | 12 kB | 8.8 MB | 104.21.55.100 |  |
api.telegram.org | 206724 | 2003-12-15 | 2015-06-25 | 2026-08-19 | 1.2 kB | 724 B |  149.154.166.110 |  |
Vercel (PaaS)
Vercel is a cloud platform for static frontends and serverless functions.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.jQuery (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.Nginx:1.30.1 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | tokenop.xyz/ | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | tokenop.xyz/fonts/Rubik/static/Rubik-Medium.ttf | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | tokenop.xyz/fonts/Rubik/static/Rubik-Regular.ttf | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | tokenop.xyz/fonts/Rubik/static/Rubik-Bold.ttf | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | tokenop.xyz/favicon.ico | malware | Detects file containing Telegram Bot API |
| OpenDNS | tokenop.xyz | phishing | Phishing Block |
| DNS4EU | tokenop.xyz | malicious | Sinkholed |
JavaScript (14)
No JavaScripts
HTTP Transactions (32)
| URL | IP | Response | Size |
|---|