Report Overview
Visitedpublic
2026-03-24 02:47:54
Tags
Submit Tags
URL
sirens-rewards.xyz/
Finishing URL
sirens-rewards.xyz/
IP / ASN
104.21.65.131
Title
Siren | Distribution
Detections
urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
2
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
auth-portal-2505.vercel.app | unknown | unknown | 2026-03-24 | 2026-03-24 | 956 B | 2.2 MB |  64.29.17.195 |  |
evm.chrome-extension-hsi23-bc.com 8 alert(s) on this Host | unknown | 2026-02-23 | 2026-03-24 | 2026-03-24 | 2.3 kB | 4.5 kB | 104.21.90.162 |  |
sirens-rewards.xyz | unknown | 2026-03-23 | 2026-03-24 | 2026-03-24 | 9.6 kB | 1.8 MB | 104.21.65.131 |  |
dns.google | 158 | 2018-04-16 | 2018-10-26 | 2026-03-19 | 505 B | 805 B | 8.8.4.4 | |
presale.alexbeckertoken.cc | unknown | 2024-09-02 | 2024-10-20 | 2026-03-21 | 464 B | 0 B | 0.0.0.0 | |
fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-03-22 | 477 B | 11 kB | 142.250.178.106 | |
fonts.gstatic.com | unknown | 2008-02-11 | 2014-04-02 | 2026-03-22 | 1.7 kB | 148 kB | 142.251.143.131 |
Vercel (PaaS)
Vercel is a cloud platform for static frontends and serverless functions.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.jQuery:3.6.0 (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 8.8.4.4 | ET INFO Observed Google DNS over HTTPS Domain (dns .google in TLS SNI) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | evm.chrome-extension-hsi23-bc.com | malicious | Sinkholed |
| DNS4EU | evm.chrome-extension-hsi23-bc.com | malicious | Sinkholed |
JavaScript (10)
No JavaScripts
HTTP Transactions (32)
| URL | IP | Response | Size |
|---|