Report Overview
Visitedpublic
2026-04-28 13:43:16
Tags
Submit Tags
URL
b-group.trade
Finishing URL
b-group.trade/
IP / ASN
104.21.66.95
Title
Bourso Group
Detections
urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
2
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
fonts.gstatic.com | unknown | 2008-02-11 | 2014-04-02 | 2026-04-26 | 1.1 kB | 99 kB |  172.217.20.163 | |
b-group.trade 9 alert(s) on this Host | unknown | 2024-12-23 | 2026-04-28 | 2026-04-28 | 3.9 kB | 3.0 MB | 172.67.158.110 |   |
back.b-group.trade 3 alert(s) on this Host | unknown | 2024-12-23 | 2026-04-28 | 2026-04-28 | 1.5 kB | 3.5 kB | 172.67.158.110 | |
geolocation-db.com | 55872 | 2019-10-23 | 2019-10-31 | 2026-04-25 | 467 B | 358 B |  159.89.102.253 |   |
fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-04-26 | 492 B | 23 kB | 172.217.20.170 |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.React (JavaScript frameworks)
React is an open-source JavaScript library for building user interfaces or UI components.Ubuntu (Operating systems)
Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.Nginx:1.14.0 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | Client IP | 159.89.102.253 | ETPRO INFO External IP Address Lookup Domain in TLS SNI (geolocation-db .com) | |
| low | Client IP | 159.89.102.253 | ET INFO External IP Lookup Domain (geolocation-db .com) in TLS SNI |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | b-group.trade | malicious | Sinkholed |
| Quad9 DNS | back.b-group.trade | malicious | Sinkholed |
JavaScript (2)
No JavaScripts
HTTP Transactions (16)
| URL | IP | Response | Size |
|---|