Report Overview
Visitedpublic
2026-09-02 17:44:13
Submit Tags
URL
cashscat.cc/
Finishing URL
cashscat.cc/
IP / ASN
172.67.175.218
Title
$CASHCAT — They Called It Cash Cat First
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
30
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| unknown | unknown | 2026-09-02 | 2026-09-02 | 1.6 kB | 140 kB |  216.150.1.193 |  | |
cashscat.cc 139 alert(s) on this Host | unknown | unknown | 2026-09-02 | 2026-09-02 | 21 kB | 4.9 MB | 172.67.175.218 |   |
| 206724 | 2003-12-15 | 2015-06-25 | 2026-08-27 | 1.2 kB | 741 B |  149.154.166.110 |  | |
| 18239 | 2022-01-29 | 2020-06-08 | 2026-09-02 | 443 B | 944 B | 172.66.175.107 | |
Vercel (PaaS)
Vercel is a cloud platform for static frontends and serverless functions.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.jQuery (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.Nginx:1.30.1 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | cashscat.cc/ | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/338e6e2c2be0cca6-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/e9f67b0a1bfb7388-s.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/1e6f4a4be8352cbc-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/6f2049edee8beeb2-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/27145be036dbd745-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/d3ebbfd689654d3a-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/2caafad0d9e33075-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/d1f93f19f5eb03d0-s.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/47edecb87d4c975b-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/a51329d32af18bb8-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/3637a1b0f55928bf-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/4c48dfb25870a9fb-s.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/daa198f43674753e-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/8c14efce11d511c4-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/7f612c65de6e1300-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/98e207f02528a563-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/8fbf8aae21cd9b52-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/3195ddcb8417d111-s.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/75d0d809d177ae2f-s.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/2a3b9c9294c3c3e8-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/35731b92a9f1ef9d-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/6d7cc3a563fdbe78-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/7e3c9184189bbc0c-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/4b7a4c192ae21457-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/6a2969fdad2f04be-s.woff2 | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | cashscat.cc/_next/static/media/24f6455c18489ce9-s.p.woff2 | malware | Detects file containing Telegram Bot API |
| DNS4EU | cashscat.cc | malicious | Sinkholed |
| Quad9 DNS | cashscat.cc | malicious | Sinkholed |
| OpenDNS | cashscat.cc | phishing | Phishing Block |
Telegram Bot detected (1)
URL
cashscat.cc/
IP / ASN
172.67.175.218
Token
8654402884:AAE2YPHRSuv8qodkX3VDC9i1xiH1AVSIHys
Bot Overview
User ID8654402884
Usernamelinkapprovalbot
First NameApproval
Last NameN/A
Chat Info
Chat IDN/A
Chat TypeN/A
TitleN/A
User Count0
Admins0
Pending Msgs0
JavaScript (14)
No JavaScripts
HTTP Transactions (43)
| URL | IP | Response | Size |
|---|