Report Overview
Visitedpublic
2025-08-14 20:11:10
Tags
Submit Tags
URL
trump-reward.com/
Finishing URL
trump-reward.com/
IP / ASN
23.95.67.157
Title
Biggest CRYPTO giveaway of $150,000,000
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
3
Threat Detection Systems
2
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
cdn.jsdelivr.net | 1678 | 2012-05-16 | 2012-09-30 | 2025-08-13 | 452 B | 21 kB | 151.101.193.229 | |
ipinfo.io | 1327 | 2013-04-23 | 2013-12-16 | 2025-08-08 | 433 B | 650 B | 34.117.59.81 |   |
api.telegram.org | 206724 | 2003-12-15 | 2015-06-25 | 2025-08-12 | 1.1 kB | 748 B |  149.154.167.220 |  |
code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2025-08-13 | 424 B | 88 kB | 151.101.66.137 |  |
cdn.rawgit.com | 102096 | 2014-03-20 | 2017-01-30 | 2025-08-08 | 447 B | 21 kB |  194.242.11.186 |  |
trump-reward.com 14 alert(s) on this Host | unknown | 2025-02-06 | 2025-08-14 | 2025-08-14 | 5.3 kB | 254 kB | 23.95.67.157 |   |
unpkg.com | 1093 | 2016-01-06 | 2016-01-07 | 2025-08-13 | 1.7 kB | 88 kB |  104.18.0.22 |   |
Google Cloud CDN (CDN)
Cloud CDN uses Google's global edge network to serve content closer to users.Google Cloud (IaaS)
Google Cloud is a suite of cloud computing services.Nginx:1.18.0 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Varnish (Caching)
Varnish is a reverse caching proxy.Bunny (CDN)
Nginx:1.26.2 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.jQuery:3.7.1 (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.jQuery CDN (CDN)
jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.Unpkg (CDN)
Unpkg is a content delivery network for everything on npm.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Fly.io (PaaS)
Fly is a platform for running full stack apps and databases.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | 172.18.0.13 | 34.117.59.81 | ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io) | |
| low | 172.18.0.13 | 149.154.167.220 | ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI) | |
| low | 172.18.0.13 | 149.154.167.220 | ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | trump-reward.com/scripts/visitor-logger.js | malware | Detects file containing Telegram Bot API |
| Quad9 DNS | trump-reward.com | malicious | Sinkholed |
JavaScript (9)
No JavaScripts
HTTP Transactions (22)
| URL | IP | Response | Size |
|---|