Report Overview
Visitedpublic
2025-12-12 06:35:16
Tags
Submit Tags
URL
flowerbooms.com/
Finishing URL
ww1.flowerbooms.com/?subid1=ab3942c7-d724-11f0-a489-27731822a4e3
IP / ASN

172.241.213.97
Title
flowerbooms.com
Detections
urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
14
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
ww1.flowerbooms.com 12 alert(s) on this Host | unknown | 2024-05-14 | 2025-09-12 | 2025-11-20 | 2.3 kB | 12 kB | ![]() 185.53.179.200 | |
yfdnza.com 3 alert(s) on this Host | 2082839 | 2025-07-22 | 2025-07-30 | 2025-12-08 | 548 B | 9.9 kB | ![]() 208.91.196.46 | |
obseu.youstarsbuilding.com | 1721811 | 2022-08-01 | 2023-11-07 | 2025-12-05 | 3.9 kB | 4.8 kB | ![]() 54.75.69.192 | |
searchnowexpert.com 1 alert(s) on this Host | 388819 | 2025-02-14 | 2025-05-24 | 2025-12-10 | 1.3 kB | 68 kB | ![]() 199.191.50.135 | |
s.yimg.com | 4553 | 1997-05-14 | 2012-05-20 | 2025-12-08 | 450 B | 14 kB | ![]() 87.248.119.252 | |
msadsscale.microsoft.com | 241518 | 1991-05-02 | 2025-01-13 | 2025-12-08 | 455 B | 73 kB | ![]() 13.107.213.53 | |
euob.youstarsbuilding.com | 2095641 | 2022-08-01 | 2023-10-25 | 2025-12-05 | 458 B | 120 kB | ![]() 54.240.174.48 | |
s.cdn-fileserver.com 9 alert(s) on this Host | 1473336 | 2025-04-08 | 2025-04-11 | 2025-12-08 | 1.5 kB | 45 kB | ![]() 188.114.96.1 | |
flowerbooms.com 3 alert(s) on this Host | 592963 | 2024-05-14 | 2024-05-16 | 2025-11-20 | 1.9 kB | 1.5 kB | ![]() 77.247.183.154 | ![]() ![]() |
l.cdn-fileserver.com 9 alert(s) on this Host | 962880 | 2025-04-08 | 2025-04-11 | 2025-12-08 | 8.8 kB | 2.6 kB | ![]() 188.114.96.1 |
Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Google Cloud (IaaS)
Google Cloud is a suite of cloud computing services.Nginx:1.28.0 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Google Cloud CDN (CDN)
Cloud CDN uses Google's global edge network to serve content closer to users.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Apache Traffic Server (Web servers)
Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.Azure (PaaS)
Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.Azure Front Door (Load balancers)
Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.Caddy (Web servers)
Amazon CloudFront (CDN)
Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Cowboy (Web servers)
Cowboy is a small, fast, modular HTTP server written in Erlang.Erlang (Programming languages)
Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | ![]() 54.75.69.192 | ![]() 172.18.0.15 | ET INFO Observed ZeroSSL SSL/TLS Certificate |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | s.cdn-fileserver.com | malicious | Sinkholed |
| DigiCert UltraDNS | s.cdn-fileserver.com | malicious | Sinkholed |
| DNS0 Zero | s.cdn-fileserver.com | malicious | Sinkholed |
| Hagezi Threat Feed | ww1.flowerbooms.com | malicious | Sinkholed |
| DNS4EU | ww1.flowerbooms.com | malicious | Sinkholed |
| DNS0 Zero | ww1.flowerbooms.com | malicious | Sinkholed |
| DigiCert UltraDNS | yfdnza.com | malicious | Sinkholed |
| DNS4EU | yfdnza.com | malicious | Sinkholed |
| DNS0 Zero | yfdnza.com | malicious | Sinkholed |
| Hagezi Threat Feed | searchnowexpert.com | malicious | Sinkholed |
| Hagezi Threat Feed | flowerbooms.com | malicious | Sinkholed |
| DigiCert UltraDNS | l.cdn-fileserver.com | malicious | Sinkholed |
| Quad9 DNS | l.cdn-fileserver.com | malicious | Sinkholed |
| DNS0 Zero | l.cdn-fileserver.com | malicious | Sinkholed |
JavaScript (15)
No JavaScripts
HTTP Transactions (22)
| URL | IP | Response | Size |
|---|







