Report Overview
Visitedpublic
2026-02-13 21:59:43
Tags
Submit Tags
URL
blures.xyz/
Finishing URL
blures.xyz/
IP / ASN
172.67.197.241
Title
Blur: NFT Marketplace for Pro Traders
Detections
urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
4
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
base.llamarpc.com | 2856799 | 2022-02-07 | 2025-06-28 | 2026-02-10 | 931 B | 1.3 kB | 104.26.15.157 |  |
blures.xyz 4 alert(s) on this Host | unknown | 2026-01-30 | 2026-02-13 | 2026-02-13 | 892 B | 19 MB | 104.21.21.103 | |
mainnet.base.org | 835121 | 1996-11-11 | 2023-08-03 | 2026-02-08 | 929 B | 2.9 kB | 172.64.147.103 | |
base.drpc.org | 3183586 | 2005-01-09 | 2023-10-27 | 2026-02-11 | 923 B | 1.8 kB | 104.18.11.59 | |
base.publicnode.com | 2170347 | 2016-08-16 | 2023-10-18 | 2026-02-10 | 935 B | 2.0 kB | 172.66.150.162 |  |
bright-lab-a57.cf-dy6gqzh2.workers.dev 4 alert(s) on this Host | unknown | 2019-02-08 | 2026-02-03 | 2026-02-11 | 1.0 kB | 3.4 MB | 104.21.64.79 | |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Cloudflare Bot Management (Security)
Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.Envoy (Reverse proxies)
Envoy is an open-source edge and service proxy, designed for cloud-native applications.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 104.21.64.79 | ET INFO Observed Cloudflare workers.dev Domain in TLS SNI | |
| low | Client IP | 104.21.64.79 | ET INFO Observed Cloudflare workers.dev Domain in TLS SNI |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | bright-lab-a57.cf-dy6gqzh2.workers.dev | malicious | Sinkholed |
| DNS4EU | bright-lab-a57.cf-dy6gqzh2.workers.dev | malicious | Sinkholed |
| Hagezi Threat Feed | blures.xyz | malicious | Sinkholed |
| Quad9 DNS | blures.xyz | malicious | Sinkholed |
JavaScript (10)
No JavaScripts
HTTP Transactions (12)
| URL | IP | Response | Size |
|---|