Report Overview
Visitedpublic
2025-09-03 15:41:22
Submit Tags
URL
easter-ton-gift.vercel.app
Finishing URL
easter-ton-gift.vercel.app/
IP / ASN
216.198.79.3
Title
Easter Season Message of Hope | World Christian Association
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
2
Threat Detection Systems
3
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
claim.lens.xyz | unknown | 2014-06-02 | 2022-05-18 | 2023-05-04 | 452 B | 516 B |  172.66.40.88 |   |
aws-v2-cdn.token.im | unknown | unknown | 2018-06-15 | 2025-08-28 | 481 B | 57 kB | 34.120.113.83 | |
static.mytonwallet.io | 785922 | 2022-03-28 | 2024-07-22 | 2025-08-31 | 454 B | 6.0 kB |  160.202.131.1 |   |
cdn.mirailabs.co | 1551427 | 2021-08-20 | 2024-12-30 | 2025-08-28 | 470 B | 20 kB | 172.67.73.146 |  |
wallet.ton.org | 654858 | 2003-11-13 | 2023-12-21 | 2025-08-28 | 456 B | 6.4 kB | 104.26.14.213 |    |
img.gatedataimg.com | 1518807 | 2021-06-22 | 2024-10-15 | 2025-08-28 | 489 B | 8.5 kB | 54.240.174.54 |   |
code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2025-08-27 | 475 B | 88 kB | 151.101.66.137 | |
static.nicegram.app | 732709 | 2019-05-13 | 2025-06-04 | 2025-08-28 | 448 B | 11 kB | 172.67.73.17 | |
ipapi.co | 7936 | 2016-04-19 | 2017-01-31 | 2025-09-01 | 453 B | 1.7 kB | 172.67.69.226 | |
cdn.echooo.xyz | 1481817 | 2022-05-02 | 2023-11-28 | 2025-09-01 | 478 B | 58 kB | 34.107.165.184 |    |
downloads.mycactus.com | unknown | 2017-05-18 | 2025-08-31 | 2025-08-31 | 462 B | 6.1 kB | 54.240.174.45 | |
lens.xyz | 232008 | 2014-06-02 | 2021-02-04 | 2025-08-24 | 446 B | 796 B | 172.66.40.88 | |
hk.tpstatic.net | 1374103 | 2022-12-01 | 2023-02-15 | 2025-08-28 | 456 B | 12 kB |  163.181.243.185 |  |
public.bnbstatic.com | 355007 | 2018-03-27 | 2020-11-23 | 2025-09-01 | 487 B | 3.9 kB | 54.240.174.93 | |
s.pvcliping.com | 1545203 | 2017-03-07 | 2020-04-26 | 2025-08-28 | 469 B | 1.5 kB | 154.41.93.241 | |
blitzwallet.cfd 1 alert(s) on this Host | 658393 | 2025-05-26 | 2025-07-30 | 2025-08-28 | 458 B | 5.6 kB |  45.9.149.136 |  |
tonkeeper.com | 36988 | 2021-08-20 | 2021-08-24 | 2025-08-28 | 924 B | 22 kB | 172.67.74.36 | |
img.bitgetimg.com | 1433117 | 2021-05-18 | 2022-11-16 | 2025-08-28 | 467 B | 2.9 kB | 54.240.174.89 | |
xtonwallet.com | 60292 | 2022-11-06 | 2022-12-10 | 2025-08-28 | 463 B | 8.8 kB | 188.114.97.1 | |
raw.githubusercontent.com | 22021 | 2014-02-06 | 2014-03-01 | 2025-08-28 | 5.1 kB | 273 kB | 185.199.109.133 | |
pub.tomo.inc | 653488 | 2023-09-20 | 2023-12-17 | 2025-08-28 | 441 B | 2.2 kB | 54.240.174.10 | |
tonhub.com | 39539 | 2021-02-27 | 2015-09-27 | 2025-08-28 | 450 B | 70 kB | 104.26.0.199 | |
easter-ton-gift.vercel.app 20 alert(s) on this Host | unknown | 2020-01-28 | 2025-09-03 | 2025-09-03 | 8.9 kB | 1.3 MB | 64.29.17.3 |  |
api.telegram.org | 206724 | 2003-12-15 | 2015-06-25 | 2025-09-02 | 2.0 kB | 836 B | 149.154.167.220 | |
static.okx.com | 459285 | 2001-07-03 | 2022-12-01 | 2025-09-01 | 951 B | 14 kB | 54.240.174.58 |  |
chain-cdn.uxuy.com | 653779 | 2008-03-28 | 2025-04-19 | 2025-08-28 | 458 B | 5.4 kB | 104.21.48.1 | |
wallet.tg | 62080 | 2023-09-25 | 2020-01-17 | 2025-08-28 | 449 B | 26 kB |  45.196.29.100 | |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Vercel (PaaS)
Vercel is a cloud platform for static frontends and serverless functions.OpenResty (Web servers)
OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Varnish (Caching)
Varnish is a reverse caching proxy.Fastly (CDN)
Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video & streaming services.GitHub Pages (PaaS)
GitHub Pages is a static site hosting service.Amazon S3 (CDN)
Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.Amazon CloudFront (CDN)
Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.Google Cloud CDN (CDN)
Cloud CDN uses Google's global edge network to serve content closer to users.Google Cloud Storage (Miscellaneous)
Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.Google Cloud (IaaS)
Google Cloud is a suite of cloud computing services.Tengine (Web servers)
Tengine is a web server which is based on the Nginx HTTP server.Caddy (Web servers)
jQuery:3.7.1 (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.jQuery CDN (CDN)
jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.Nginx:1.18.0 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Alibaba Cloud Object Storage Service (IaaS)
Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.Cloudflare Bot Management (Security)
Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | 172.18.0.4 | 149.154.167.220 | ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI) | |
| low | 172.18.0.4 | 149.154.167.220 | ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | easter-ton-gift.vercel.app/assets/js/web3.js | malware | Detects file containing Telegram Bot API |
| Quad9 DNS | easter-ton-gift.vercel.app | malicious | Sinkholed |
| Quad9 DNS | blitzwallet.cfd | malicious | Sinkholed |
Telegram Bot detected (1)
URL
easter-ton-gift.vercel.app/assets/js/web3.js
IP / ASN
64.29.17.3
Token
7416114523:AAG42EC_qSY84WaZTxP8-iugkp9QwVm8z6o
Bot Overview
User ID7416114523
UsernameBigSoldrainbot
First Namedrain
Last NameN/A
Chat Info
Chat IDN/A
Chat TypeN/A
TitleN/A
User Count0
Admins0
Pending Msgs0
JavaScript (4)
No JavaScripts
HTTP Transactions (56)
| URL | IP | Response | Size |
|---|