Report Overview
Visitedpublic
2026-03-02 20:58:21
Submit Tags
URL
solanascope9.live
Finishing URL
solanascope9.live/
IP / ASN
85.137.252.93
#6739 Vodafone Ono, S.A.
Title
SolanaScope | AI-Powered Wallet Analytics & Portfolio Insights

Suspicious - Anti-debugging code

Detections

urlquery
2
Network Intrusion Detection
9
Threat Detection Systems
9

Host Summary

HostRankRegisteredFirst SeenLast Seen
pub-14c1504681d2427684ac1f489338d075.r2.dev
unknown2022-08-232026-02-252026-02-25
dns.google
1582018-04-162018-10-262026-02-25
solanascope9.live
unknownunknownNo dataNo data
cdn.dexscreener.com
15608302021-06-112023-07-132026-03-02
lafqi4.vercel.app
unknown2020-01-282026-03-022026-03-02
api.dexscreener.com
20856592021-06-112022-05-192026-02-28
fonts.gstatic.com
unknown2008-02-112014-04-022026-03-01

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP
8.8.4.4
ET INFO Observed Google DNS over HTTPS Domain (dns .google in TLS SNI)
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
lowClient IP
104.18.54.45
ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI
Threat Detection Systems
Detection SystemIndicatorVerdictAlert
Private YARA ruleslafqi4.vercel.app/demo.php?id=69952789c8df00fbc3e2b8ee&parent_url=solanascope9.live%2Faudit
Hunting_JS_WebAssembly
Nextron YARA rulespub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-mobile.gifmalware
Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rulespub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-mobile.gifmalware
Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rulespub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-desktop.gifmalware
Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rulespub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-desktop.gifmalware
Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rulespub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-desktop.gifmalware
Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rulespub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-mobile.gifmalware
Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rulespub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-desktop.gifmalware
Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type
Nextron YARA rulespub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-mobile.gifmalware
Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type

JavaScript (24)

HTTP Transactions (97)

URLIPResponseSize