Report Overview
Visitedpublic
2026-03-12 13:49:12
Tags
Submit Tags
URL
nfttkcrd.icu
Finishing URL
nfttkcrd.icu/
IP / ASN
172.67.214.101
Title
NFT Track
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
1
Threat Detection Systems
1
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
camorope-client-a.meiqia.com | 1631624 | 2009-01-27 | 2018-09-20 | 2026-03-11 | 1.3 kB | 991 B |  43.174.225.10 |  |
fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-03-08 | 632 B | 82 kB |  192.178.204.95 | |
edge-api.meiqia.com | 1537350 | 2009-01-27 | 2022-05-13 | 2026-03-08 | 1.1 kB | 2.0 kB | 43.174.224.10 | |
nfttkcrd.icu 1 alert(s) on this Host | unknown | 2026-03-10 | 2026-03-12 | 2026-03-12 | 5.3 kB | 4.8 MB | 188.114.97.1 |  |
www.pianzw.xyz | unknown | 2025-04-10 | 2025-08-06 | 2026-03-02 | 413 B | 683 B | 188.114.96.1 | |
new-api.meiqia.com | 987273 | 2009-01-27 | 2018-07-31 | 2026-03-08 | 1.9 kB | 8.7 kB | 43.174.225.10 | |
static.meiqia.com | 1675070 | 2009-01-27 | 2016-07-23 | 2026-03-08 | 2.7 kB | 1.5 MB | 101.33.21.239 |  |
Envoy (Reverse proxies)
Envoy is an open-source edge and service proxy, designed for cloud-native applications.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Alibaba Cloud Object Storage Service (IaaS)
Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | Client IP | 188.114.97.1 | ET INFO Suspicious Domain (*.icu) in TLS SNI |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | nfttkcrd.icu/assets/index.cc5ede67.js | malware | Detects file containing Telegram Bot API |
JavaScript (16)
No JavaScripts
HTTP Transactions (27)
| URL | IP | Response | Size |
|---|