Report Overview
Visitedpublic
2026-01-25 04:49:57
Tags
Submit Tags
URL
www.rewardhub.safevpnapp.com/
Finishing URL
www.rewardhub.safevpnapp.com/home.php
IP / ASN
139.99.61.249
Title
Plant Earn - Earn Real USDT Daily
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
15
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
unpkg.com | 1093 | 2016-01-06 | 2016-01-07 | 2026-01-18 | 1.8 kB | 1.3 MB |  104.18.1.22 |   |
flushpersist.com 3 alert(s) on this Host | 23810 | 2025-07-01 | 2025-07-08 | 2026-01-21 | 779 B | 530 B |  172.240.127.234 |   |
protrafficinspector.com | 614186 | 2025-06-18 | 2025-07-25 | 2026-01-21 | 472 B | 437 B |  63.178.76.99 | |
www.rewardhub.safevpnapp.com | unknown | 2025-07-26 | 2026-01-24 | 2026-01-24 | 2.8 kB | 329 kB | 139.99.61.249 |     |
preferencenail.com 3 alert(s) on this Host | 20606 | 2025-07-01 | 2025-07-08 | 2026-01-21 | 426 B | 86 kB |  185.196.197.72 | |
fonts.gstatic.com | unknown | 2008-02-11 | 2014-04-02 | 2026-01-18 | 2.8 kB | 283 kB | 172.217.21.163 | |
fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-01-18 | 491 B | 13 kB | 216.58.211.10 | |
pl28018948.effectivegatecpm.com 3 alert(s) on this Host | unknown | 2025-10-07 | 2026-01-24 | 2026-01-24 | 477 B | 108 kB | 172.240.127.244 | |
realizationnewestfangs.com 3 alert(s) on this Host | unknown | 2024-09-03 | 2025-10-02 | 2026-01-21 | 520 B | 525 B | 172.240.127.234 | |
weirdopt.com 3 alert(s) on this Host | 37519 | 2025-07-01 | 2025-07-08 | 2026-01-22 | 431 B | 377 B | 185.196.197.71 | |
Fly.io (PaaS)
Fly is a platform for running full stack apps and databases.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Envoy (Reverse proxies)
Envoy is an open-source edge and service proxy, designed for cloud-native applications.Nginx:1.21.6 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Alpine.js (JavaScript frameworks)
Unpkg (CDN)
Unpkg is a content delivery network for everything on npm.LiteSpeed (Web servers)
LiteSpeed is a high-scalability web server.PHP (Programming languages)
PHP is a general-purpose scripting language used for web development.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | preferencenail.com | malicious | Sinkholed |
| Quad9 DNS | preferencenail.com | malicious | Sinkholed |
| Hagezi Threat Feed | preferencenail.com | malicious | Sinkholed |
| Cloudflare DNS | weirdopt.com | malicious | Sinkholed |
| Quad9 DNS | weirdopt.com | malicious | Sinkholed |
| DNS4EU | weirdopt.com | malicious | Sinkholed |
| DNS4EU | pl28018948.effectivegatecpm.com | malicious | Sinkholed |
| Cloudflare DNS | pl28018948.effectivegatecpm.com | malicious | Sinkholed |
| Quad9 DNS | pl28018948.effectivegatecpm.com | malicious | Sinkholed |
| Cloudflare DNS | realizationnewestfangs.com | malicious | Sinkholed |
| DNS4EU | realizationnewestfangs.com | malicious | Sinkholed |
| Quad9 DNS | realizationnewestfangs.com | malicious | Sinkholed |
| Quad9 DNS | flushpersist.com | malicious | Sinkholed |
| Cloudflare DNS | flushpersist.com | malicious | Sinkholed |
| Hagezi Threat Feed | flushpersist.com | malicious | Sinkholed |
JavaScript (32)
| HASH | FROM | Size | First Seen | Last Seen | |
|---|---|---|---|---|---|
| 425ee18238006a833ea6857e45b8461f | DocumentWrite | 97 B | 2026-01-24 | 2026-01-25 | |
Introduced by DocumentWrite First Seen 2026-01-24 Last Seen 2026-01-25 Times Seen 2 Size 97 B (97 bytes) MD5 425ee18238006a833ea6857e45b8461f SHA1 7a37bc09b9b88cc1693fbf5fa4f2a38d83e51f70 Loading... | |||||
| 98f7744d0a211339328b9fb275dcbfc0 | DocumentWrite | 97 B | 2026-01-24 | 2026-01-25 | |
Introduced by DocumentWrite First Seen 2026-01-24 Last Seen 2026-01-25 Times Seen 2 Size 97 B (97 bytes) MD5 98f7744d0a211339328b9fb275dcbfc0 SHA1 20a24534c6eeebbd802f922f450ebc34e099ebcc Loading... | |||||
| 4394e15afb2bf8127e283df521972bff | DocumentWrite | 97 B | 2026-01-24 | 2026-01-25 | |
Introduced by DocumentWrite First Seen 2026-01-24 Last Seen 2026-01-25 Times Seen 2 Size 97 B (97 bytes) MD5 4394e15afb2bf8127e283df521972bff SHA1 0bc6b9d62613ac4d1b2daa8eb90f6b5e4fe575fc Loading... | |||||
HTTP Transactions (21)
| URL | IP | Response | Size |
|---|