Report Overview
Visitedpublic
2026-03-25 11:35:16
Submit Tags
URL
nexus-drop.org/
Finishing URL
nexus-box.eth.limo/
IP / ASN
67.199.248.12
#396982 GOOGLE-CLOUD-PLATFORM
Title
Ethereum Nexus · Secure Portal

Suspicious - Suspicious Javascript code

Suspicious - Anti-debugging code

Detections

urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
1

Host Summary

HostRankRegisteredFirst SeenLast Seen
fonts.gstatic.com
unknown2008-02-112014-04-022026-03-22
nexus-box.eth.limo
unknown2021-06-082026-03-252026-03-25
nexus-drop.org
unknown2026-03-192026-03-252026-03-25
fonts.googleapis.com
3132005-01-252012-05-232026-03-22
ajax.googleapis.com
36912005-01-252012-05-222026-03-22

Related reports

Threat Detection Systems
Detection SystemIndicatorVerdictAlert
YARAhub by abuse.chnexus-box.eth.limo/malware
Detects file containing Telegram Bot API

Telegram Bot detected (1)

URL
nexus-box.eth.limo/
IP / ASN
3.135.72.151
#16509 AMAZON-02
Token
8537112241:AAHRy21VRbA4JBxNgw-_0LyhlGtIkhmot2c
Bot Overview
User ID8537112241
UsernameDualupbot
First NameHello world 🥷
Last NameN/A
Chat Info
Chat IDN/A
Chat TypeN/A
TitleN/A
User Count0
Admins0
Pending Msgs0

JavaScript (14)

HTTP Transactions (52)

URLIPResponseSize