Report Overview
Visitedpublic
2026-04-18 12:45:14
Tags
Submit Tags
URL
heleket.top
Finishing URL
new-pay.heleket.com/
IP / ASN
104.21.38.55
Title
Heleket Pay
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
new-pay.heleket.com | unknown | 2024-02-08 | 2026-03-24 | 2026-04-18 | 11 kB | 1.8 MB |  31.133.222.28 |  |
www.google.com | 22 | 1997-09-15 | 2015-05-10 | 2026-04-12 | 3.5 kB | 2.0 kB |  142.251.152.119 | |
www.googletagmanager.com | 283 | 2011-11-11 | 2012-10-04 | 2026-04-12 | 1.4 kB | 1.4 MB | 142.250.74.8 | |
heleket.top 3 alert(s) on this Host | unknown | 2026-04-10 | 2026-04-18 | 2026-04-18 | 1.6 kB | 85 kB | 188.114.97.1 |  |
backend.heleket.com | unknown | 2024-02-08 | 2026-03-18 | 2026-04-18 | 3.4 kB | 2.5 kB | 31.133.222.28 | |
static.zdassets.com | 16846 | 2013-01-28 | 2018-06-23 | 2026-04-13 | 2.7 kB | 1.5 MB | 216.198.54.3 |  |
ekr.zdassets.com | 18657 | 2013-01-28 | 2018-06-13 | 2026-04-15 | 972 B | 6.0 kB | 216.198.54.3 |  |
trxworks.sbs 2 alert(s) on this Host | unknown | 2026-03-27 | 2026-03-28 | 2026-04-18 | 418 B | 326 kB | 104.21.67.193 |
Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Envoy (Reverse proxies)
Envoy is an open-source edge and service proxy, designed for cloud-native applications.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | heleket.top | malicious | Sinkholed |
| DNS4EU | trxworks.sbs | malicious | Sinkholed |
| Hagezi Threat Feed | trxworks.sbs | malicious | Sinkholed |
JavaScript (20)
No JavaScripts
HTTP Transactions (47)
| URL | IP | Response | Size |
|---|