Report Overview
Visitedpublic
2026-02-13 23:06:16
Tags
Submit Tags
URL
check-plasma.app/
Finishing URL
check-plasma.app/
IP / ASN
104.21.73.72
#13335 CLOUDFLARENET
Title
Plasma - Stablecoin infrastructure for instant payments

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
4

Host Summary

HostRankRegisteredFirst SeenLast Seen
fonts.googleapis.com
3132005-01-252012-05-232026-02-08
www.googletagmanager.com
2832011-11-112012-10-042026-02-08
fumbling-pill.click
unknown2026-01-162026-02-122026-02-12
public-bsc.nownodes.io
unknown2019-05-202025-10-142026-02-12
api.ipify.org
81662014-01-052014-10-062026-02-09
check-plasma.app
unknownunknownNo dataNo data
fonts.gstatic.com
unknown2008-02-112014-04-022026-02-08
cdn.prod.website-files.com
201592019-01-232023-11-012026-02-09

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP
104.26.13.205
ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI
Threat Detection Systems
Detection SystemIndicatorVerdictAlert
Nextron YARA rulescheck-plasma.app/assets/secure.php?req=pingmalware
PHP webshell obfuscated by encoding of mixed hex and dec
Nextron YARA rulescheck-plasma.app/assets/secure.php?req=pingmalware
Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.
DNS4EUcheck-plasma.appmalicious
Sinkholed
Quad9 DNSpublic-bsc.nownodes.iomalicious
Sinkholed

JavaScript (12)

HTTP Transactions (93)

URLIPResponseSize