Report Overview
Visitedpublic
2026-04-26 13:52:54
Tags
Submit Tags
URL
vestingshield.com
Finishing URL
entry.chain-robinhood.io/
IP / ASN
104.21.40.161
Title
Explore Stock Tokens & Crypto | Robinhood EU
Detections
urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
2
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
quick-code-d48.cf-fxrcd27a.workers.dev | unknown | 2019-02-08 | 2026-03-20 | 2026-04-23 | 1.1 kB | 4.1 MB | 172.67.181.86 |  |
entry.chain-robinhood.io 4 alert(s) on this Host | unknown | 2026-02-19 | 2026-04-26 | 2026-04-26 | 934 B | 3.7 MB | 104.21.1.147 |  |
base.llamarpc.com | 2856799 | 2022-02-07 | 2025-06-28 | 2026-04-22 | 959 B | 2.3 kB | 104.21.67.22 | |
mainnet.base.org | 835121 | 1996-11-11 | 2023-08-03 | 2026-04-20 | 957 B | 2.9 kB | 172.64.147.103 | |
vestingshield.com | unknown | 2026-02-19 | 2026-04-26 | 2026-04-26 | 486 B | 3.4 MB | 104.21.40.161 | |
base.publicnode.com | 2170347 | 2016-08-16 | 2023-10-18 | 2026-04-20 | 963 B | 2.0 kB | 172.66.150.162 |  |
base.drpc.org | 3183586 | 2005-01-09 | 2023-10-27 | 2026-04-22 | 951 B | 1.8 kB | 104.18.10.59 | |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Contentful (CMS)
Contentful is an API-first content management platform to create, manage and publish content on any digital channel.Cloudflare Bot Management (Security)
Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.Envoy (Reverse proxies)
Envoy is an open-source edge and service proxy, designed for cloud-native applications.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 172.67.181.86 | ET INFO Observed Cloudflare workers.dev Domain in TLS SNI | |
| low | Client IP | 172.67.181.86 | ET INFO Observed Cloudflare workers.dev Domain in TLS SNI |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | entry.chain-robinhood.io | malicious | Sinkholed |
| DNS4EU | entry.chain-robinhood.io | malicious | Sinkholed |
JavaScript (2)
No JavaScripts
HTTP Transactions (13)
| URL | IP | Response | Size |
|---|