Report Overview
Visitedpublic
2026-05-16 18:29:02
Tags
Submit Tags
URL
btconbase.pages.dev
Finishing URL
btconbase.pages.dev/
IP / ASN

172.66.47.125
Title
$BTCB: BITCOIN ON BASE CHAIN
Detections
urlquery
0
Network Intrusion Detection
3
Threat Detection Systems
3
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
btconbase.pages.dev 45 alert(s) on this Host | unknown | 2020-09-02 | 2026-05-16 | 2026-05-16 | 10 kB | 5.6 MB | ![]() 172.66.44.131 | |
rpc.ankr.com | 541361 | 2007-04-23 | 2021-10-24 | 2026-05-16 | 1.0 kB | 1.5 kB | ![]() 173.244.207.30 | |
ethereum.publicnode.com | 2041631 | 2016-08-16 | 2022-10-25 | 2026-05-11 | 1.0 kB | 1.4 kB | ![]() 172.66.150.162 | ![]() |
embed.tawk.to | 52083 | unknown | 2014-03-19 | 2026-05-11 | 474 B | 2.6 kB | ![]() 104.20.42.169 | |
eth.meowrpc.com | 3310557 | 2023-05-04 | 2023-05-08 | 2026-05-04 | 1.0 kB | 1.6 kB | ![]() 172.67.70.45 |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Envoy (Reverse proxies)
Envoy is an open-source edge and service proxy, designed for cloud-native applications.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | ![]() 172.66.44.131 | ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI) | |
| low | Client IP | ![]() 173.244.207.30 | ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com) | |
| low | Client IP | ![]() 173.244.207.30 | ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | btconbase.pages.dev/drainer.js | audit | Hunting_JS_WebAssembly |
| DNS4EU | btconbase.pages.dev | malicious | Sinkholed |
| Quad9 DNS | btconbase.pages.dev | malicious | Sinkholed |
JavaScript (5)
No JavaScripts
HTTP Transactions (29)
| URL | IP | Response | Size |
|---|

