Report Overview
Visitedpublic
2026-04-08 12:40:50
Submit Tags
URL
puemp.fun
Finishing URL
puemp.fun/live/9BB6NFEcjBCtnNLFko2FqVQBq8HHM13kCyYcdQbgpump
IP / ASN
172.67.136.107
Title
pump
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
3
Threat Detection Systems
2
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
frontend-api.pump.fun | 1853078 | 2023-09-19 | 2024-06-06 | 2026-04-01 | 9.0 kB | 162 kB | 104.18.34.22 |  |
api.codetabs.com | 3131649 | 2016-09-07 | 2018-11-13 | 2026-04-03 | 19 kB | 24 kB | 172.67.209.158 | |
ipfs.io 1 alert(s) on this Host | 19271 | 2014-05-16 | 2015-09-09 | 2026-04-03 | 480 B | 1.1 kB |  209.94.90.1 |  |
api.dexscreener.com | 2085659 | 2021-06-11 | 2022-05-19 | 2026-04-06 | 8.3 kB | 764 kB | 172.64.149.113 | |
api.telegram.org | 206724 | 2003-12-15 | 2015-06-25 | 2026-04-04 | 1.1 kB | 1.9 kB |  149.154.166.110 |  |
puemp.fun 2 alert(s) on this Host | unknown | unknown | No data | No data | 6.8 kB | 5.7 MB | 172.67.136.107 | |
imagedelivery.net | 15876 | 2021-04-09 | 2021-09-20 | 2026-04-01 | 1.0 kB | 870 B | 104.18.2.36 | |
thingproxy.freeboard.io | 6634612 | 2013-11-19 | 2014-10-08 | 2026-04-01 | 9.1 kB | 0 B | 0.0.0.0 | |
public-api.birdeye.so | 5262007 | 2021-11-17 | 2024-01-06 | 2026-04-01 | 2.5 kB | 1.8 kB | 172.66.161.182 |   |
mainnet.helius-rpc.com | 1872545 | 2023-04-06 | 2023-04-11 | 2026-04-05 | 1.1 kB | 2.5 kB | 104.18.36.169 | |
api.dicebear.com | 868285 | 2013-06-21 | 2021-11-13 | 2026-04-01 | 4.5 kB | 64 kB |  194.242.11.186 |  |
ipapi.co | 7936 | 2016-04-19 | 2017-01-31 | 2026-04-01 | 419 B | 2.5 kB | 172.67.69.226 | |
pump.mypinata.cloud | 1441738 | 2020-01-28 | 2024-04-12 | 2026-04-01 | 518 B | 1.7 kB | 172.64.155.162 | |
raw.githubusercontent.com | 22021 | 2014-02-06 | 2014-03-01 | 2026-04-01 | 524 B | 33 kB | 185.199.108.133 |    |
corsproxy.io | 175528 | 2022-01-30 | 2016-05-19 | 2026-04-04 | 9.6 kB | 14 kB | 172.67.73.211 | |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.IPFS (Network storage)
IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.Cloudflare Bot Management (Security)
Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.Nginx:1.18.0 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Express (Web frameworks, Web servers)
Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.Node.js (Programming languages)
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.Bunny (CDN)
Varnish (Caching)
Varnish is a reverse caching proxy.Fastly (CDN)
Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video & streaming services.GitHub Pages (PaaS)
GitHub Pages is a static site hosting service.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 149.154.166.110 | ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI) | |
| low | Client IP | 149.154.166.110 | ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI) | |
| medium | Client IP | 209.94.90.1 | ET INFO Observed Peer-to-Peer File Sharing Service Domain (ipfs .io in TLS SNI) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | puemp.fun/visitor-tracker.js | malware | Detects file containing Telegram Bot API |
| DigiCert UltraDNS | ipfs.io | malicious | Sinkholed |
Telegram Bot detected (1)
URL
puemp.fun/visitor-tracker.js
IP / ASN
172.67.136.107
Token
8663663207:AAEFmT9OM4SJdsdHXk8jdzFiLZEgIIEbBzw
Bot Overview
User ID8663663207
Usernamedfgdfgfdhdhdf_bot
First Namebot
Last NameN/A
Chat Info
Chat ID-1003858801643
Chat Typesupergroup
TitleWT sol
User Count4
Admins2
Pending Msgs8
JavaScript (20)
No JavaScripts
HTTP Transactions (143)
| URL | IP | Response | Size |
|---|