Report Overview
Visitedpublic
2026-02-17 15:14:33
Tags
Submit Tags
URL
access.nexo-chain.com/
Finishing URL
access.nexo-chain.com/
IP / ASN
172.67.198.38
Title
Crypto Loan with Nexo | Get Funds And Keep Your Crypto
Detections
urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
4
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
access.nexo-chain.com 3 alert(s) on this Host | unknown | 2026-02-15 | 2026-02-17 | 2026-02-17 | 1.3 kB | 5.2 MB | 104.21.68.196 |  |
base.publicnode.com | 2170347 | 2016-08-16 | 2023-10-18 | 2026-02-10 | 957 B | 2.0 kB | 104.20.24.117 |  |
mainnet.base.org | 835121 | 1996-11-11 | 2023-08-03 | 2026-02-16 | 951 B | 2.9 kB | 104.18.40.153 | |
base.llamarpc.com | 2856799 | 2022-02-07 | 2025-06-28 | 2026-02-10 | 953 B | 2.2 kB | 104.26.15.157 | |
bright-lab-a57.cf-dy6gqzh2.workers.dev 6 alert(s) on this Host | unknown | 2019-02-08 | 2026-02-03 | 2026-02-11 | 1.0 kB | 4.1 MB | 172.67.179.78 | |
base.drpc.org | 3183586 | 2005-01-09 | 2023-10-27 | 2026-02-11 | 945 B | 1.8 kB | 104.18.10.59 | |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Envoy (Reverse proxies)
Envoy is an open-source edge and service proxy, designed for cloud-native applications.Cloudflare Bot Management (Security)
Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 172.67.179.78 | ET INFO Observed Cloudflare workers.dev Domain in TLS SNI | |
| low | Client IP | 172.67.179.78 | ET INFO Observed Cloudflare workers.dev Domain in TLS SNI |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | access.nexo-chain.com | malicious | Sinkholed |
| OpenDNS | bright-lab-a57.cf-dy6gqzh2.workers.dev | phishing | Phishing Block |
| DNS4EU | bright-lab-a57.cf-dy6gqzh2.workers.dev | malicious | Sinkholed |
| Cloudflare DNS | bright-lab-a57.cf-dy6gqzh2.workers.dev | malicious | Sinkholed |
JavaScript (3)
No JavaScripts
HTTP Transactions (13)
| URL | IP | Response | Size |
|---|