Report - asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&

Report Overview

Visited public
2023-12-02 13:55:56
Tags
fake_software scam
URL
asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Finishing URL
asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
IP / ASN
188.114.97.1
#13335 CLOUDFLARENET
Title
Security Center
Scam - Fake AntiVirus / Security software

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
asnmii.moneaaaw.com	unknown	unknown	No data	No data	7.4 kB	300 kB	188.114.97.1
maxcdn.bootstrapcdn.com	724	2012-05-25	2014-06-18 02:37:31	2023-12-02 05:09:23	473 B	28 kB	104.18.11.207
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2023-12-02 05:10:02	900 B	33 kB	104.17.24.14
cdn.jsdelivr.net	439	2012-05-16	2012-09-30 02:15:09	2023-12-02 05:09:04	993 B	51 kB	151.101.1.229
www.googletagmanager.com	75	2011-11-11	2013-05-22 04:07:37	2023-12-02 07:32:34	438 B	90 kB	142.250.74.168

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (17)

	URL	From	Size	First Seen	Last Seen
	asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/jscode.js	ScriptElement	6.5 kB	2023-09-21	2024-09-19
Pretty URL asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/jscode.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-21 00:42 Last Seen2024-09-19 22:35 Times Seen224 Hash b5fbdc10de5d4731ac77b794d8fc746b 5693a34b729c118c4a8db4b849ef4dd415dd68de 5a3f61cf70040916fc2f6a985ace65a1d65e7380a20156cb01312d3dc393df84 Loading...

	unknown	ScriptElement	147 B	2023-11-29	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-29 05:45 Last Seen2024-08-20 17:30 Times Seen18 Hash 67b1f356eb7c8938e9f447de0066e2d1 6921604f9bdc497cd1d9b4cb482df2c3d38a913d f1a3a6110019cfbfda7d2eb3ff8a0037bc8aff7a3b132168a7d06300e2fbda05 Loading...

	unknown	ScriptElement	24 B	2023-11-29	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-29 05:45 Last Seen2024-08-20 17:30 Times Seen18 Hash 83c36ed41d13c192680a244f3a3949dd fe60a888a1e603c48107e7489de3a1fd18cf1dcc ff77e469ac1359d5fd637f52b94350f151c0c706e2b02b25a26c0b0172c085f5 Loading...

	www.googletagmanager.com/gtag/js?id=G-GZ2WHBX513	ScriptElement	263 kB	2023-12-02	2023-12-02
Pretty URL www.googletagmanager.com/gtag/js?id=G-GZ2WHBX513 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-02 14:56 Last Seen2023-12-02 14:56 Times Seen1 Hash d2b446afd952da27872ee0196a22946a cd08d2fafc3c8bbb12cdd6ff07cc9456ff96057f f3e088fb2178948cc5be067ccfaab67f722a81112dd4bb52893398904105c062 Loading...

	cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js	ScriptElement	84 kB	2023-03-07	2025-05-10
Pretty URL cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js IP 151.101.1.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-10 00:33 Times Seen2435 Hash f81d0a1705048649befc8b595e455a94 aec551e4d573463088fca7d14fb644eb389f1839 b0212543cc5a4a0a31c1b5a9d1e8973261992116b4cfde3e7dfcf33b4e81a97b Loading...

	asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/main.js	ScriptElement	1.4 kB	2023-04-30	2024-08-21
Pretty URL asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/main.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-30 23:35 Last Seen2024-08-21 09:38 Times Seen291 Hash 452495a24d193e8ca9836109344a44c5 5a23dde7633bcd3c23584296c56134bcd7a760d2 07ff789eef78972d62715779e770eddfaedad82ef11bb74352296b81bb10184f Loading...

	asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/light.js	ScriptElement	503 B	2023-03-07	2025-05-09
Pretty URL asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/light.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-05-09 00:49 Times Seen4264 Hash cd6c33fbc221d0271c910af910e6ebed 9b52f24d6f10b885bb19db1c4b531469f96d2914 318698ae5e67c32550d6b40ac09848d598f6317f51a8f09638ba925f6e7cc479 Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js	ScriptElement	84 kB	2023-03-07	2025-05-09
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14 Last Seen2025-05-09 08:59 Times Seen6763 Hash 7f9fb969ce353c5d77707836391eb28d 62c4042e9ebc691a5372d653b424512a561d1670 2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515 Loading...

	unknown	ScriptElement	316 B	2023-11-29	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-29 05:45 Last Seen2024-08-20 17:30 Times Seen11 Hash 3d9c02b6bac318bdffdbd51676e51c7e 154d5d639e9656741e36998f3ee7a9a9e1a1c6f0 5d0d0e593b3bfb17b1bacfaf2ae264a740c577589f729a16c10fa75b26969d38 Loading...

	unknown	EventHandler	19 B	2023-04-10	2025-05-09
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-10 16:23 Last Seen2025-05-09 00:49 Times Seen7862 Hash 57381d43f260aa3b8c47820ca38655a3 8d087b53d91f8e3ff0def7d1d94a6dada72fac79 35b90e4b54b87ed6cd2b439eac195f9eb59e731e17248c95fb1e26e15d61f943 Loading...

	unknown	ScriptElement	665 B	2023-11-29	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-29 05:45 Last Seen2024-08-20 17:30 Times Seen18 Hash 3b41a59d7eadb9afbfc3947154a1fc47 b991626726784ec965434e63b6d639c2146c89a3 7f6e881112c9d7d489612cec804f115730339c12bad7db4d9913e81b84163a21 Loading...

	asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&	ScriptElement	10 kB	2023-11-29	2024-08-20
Pretty URL asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769& IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-29 05:45 Last Seen2024-08-20 17:30 Times Seen11 Hash 00344abc0109c391f9b2e3abe1e0d8ec aba9f1131922e10031dcabed60e89d6e6067b9a3 f9beb287e0053e5edc8166a2b8a8d819da85963e886da0d5239325426b5a64a6 Loading...

	cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.min.js	ScriptElement	11 kB	2023-03-07	2025-05-10
Pretty URL cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-10 03:39 Times Seen2470 Hash 65f1d21d5fcc9d21da758adababd0c3c e0661d07d64c00008bc9d013d16eec0a0f156dc7 d2b82e612d2a812e8be2a57300dab8923c4f2edbe7a799e7da70791b595646fe Loading...

	asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/fullscreen.js	ScriptElement	245 B	2023-03-07	2025-04-30
Pretty URL asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/fullscreen.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-04-30 14:41 Times Seen997 Hash 62f519fe72808a3ec681392b7ff47417 2ee16112e35feb9d6d48ae0f4e66187514dec811 43703d37b8fe2769cb2e12db7aa281dbcca175124d05ff4b0cc3d152534698a4 Loading...

	asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/before.js	ScriptElement	366 B	2023-03-07	2025-04-30
Pretty URL asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/before.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-04-30 14:41 Times Seen1023 Hash 87c2dc3aeb373ca8445f7410ef387689 688f4be3cfb8688b4441f382724495a7b82b3f62 31681779c6f394370dad146169896e9ec2b8f7c716c4b1db78c459033e48bf95 Loading...

		Size	First Seen	Last Seen
	#1 Write - 6885fcbfd32f3e3280ec2345144c2404	7.0 kB	2023-11-29 05:45	2024-08-20 17:30
Pretty Observations First Seen2023-11-29 05:45 Last Seen2024-08-20 17:30 Times Seen11 Hash 6885fcbfd32f3e3280ec2345144c2404 dd5941a047e4d170c402a3f31cc80e6827b3dd43 75d25ed5a2a86e4da3839c678e7c44c58fd45d1e902055410cef289898f98741 Loading...

	#2 Write - 5e495b31ae26132e1d1b927619102d4c	18 B	2023-11-02 11:53	2024-08-20 21:23
Pretty Observations First Seen2023-11-02 11:53 Last Seen2024-08-20 21:23 Times Seen151 Hash 5e495b31ae26132e1d1b927619102d4c 06aef2913469890c92f2c4d3bc1c56bd959e33fc 107a36c139dfc605a6848adc3417d797c6658e0b1099993b97017e7406f3e0c8 Loading...

HTTP Transactions (20)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.min.js

104.17.24.14

200 OK

4.0 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (11084), with no line terminators
Size
4.0 kB (3980 bytes)
Hash
65f1d21d5fcc9d21da758adababd0c3c
e0661d07d64c00008bc9d013d16eec0a0f156dc7
d2b82e612d2a812e8be2a57300dab8923c4f2edbe7a799e7da70791b595646fe

HTTP Headers

GET /ajax/libs/modernizr/2.8.3/modernizr.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 02 Dec 2023 13:55:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 3980
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f26-2b4c"
last-modified: Mon, 04 May 2020 16:13:26 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 130767
expires: Thu, 21 Nov 2024 13:55:39 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jG79x2IHz0jrYbHa055jCiubf9JwWro2LpF86Iuqq4Ketq0Lxj0BWvEezVyFJ4IwynHFO9tp6sAC4nXgg1QDVOOp2rAQ5xmBnxZGh2QUgTNqGzfhXpZEN%2FLflsdPc%2BKAz8FjKbkb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82f411997e775684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js

104.17.24.14

200 OK

27 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (32180)
Size
27 kB (26660 bytes)
Hash
7f9fb969ce353c5d77707836391eb28d
62c4042e9ebc691a5372d653b424512a561d1670
2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515

HTTP Headers

GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 02 Dec 2023 13:55:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 26660
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-14983"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 732602
expires: Thu, 21 Nov 2024 13:55:39 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FDZi0P3Ly2evX%2BldJmvHhnUq6c6FhuEQB%2F6wfMycr5jXEM6%2Fad2nfn7oe5It69l%2FJuDfdncK0%2BMjc9DoAsLt%2FCVcmJNW7gVe9Khi%2Fkzz3vaAm6NmCPVo2OzPhsQuG2f%2Fsmh63D%2F2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82f411997e745684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js

151.101.1.229

200 OK

23 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
ASCII text, with very long lines (65299)
Size
23 kB (23377 bytes)
Hash
f81d0a1705048649befc8b595e455a94
aec551e4d573463088fca7d14fb644eb389f1839
b0212543cc5a4a0a31c1b5a9d1e8973261992116b4cfde3e7dfcf33b4e81a97b

HTTP Headers

GET /npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://asnmii.moneaaaw.com
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 4.6.0
x-jsd-version-type: version
etag: W/"1499a-rsVR5NVzRjCI/KfRT7ZE6zifGDk"
content-encoding: br
accept-ranges: bytes
date: Sat, 02 Dec 2023 13:55:39 GMT
age: 22640155
x-served-by: cache-fra-eddf8230133-FRA, cache-bma1669-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23377
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css

151.101.1.229

200 OK

26 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
ASCII text, with very long lines (65326)
Size
26 kB (26291 bytes)
Hash
d432e4222814b62dd30c9513dcc29440
2cac4afc120983921411296bd4e8fd8a94ba237e
4ffcc598ee6cff4692c1cea272cd8a2f195f6dec32473e94370d6cdcfa5fe601

HTTP Headers

GET /npm/bootstrap@4.6.0/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://asnmii.moneaaaw.com
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.6.0
x-jsd-version-type: version
etag: W/"27681-LKxK/BIJg5IUESlr1Oj9ipS6I34"
content-encoding: br
accept-ranges: bytes
date: Sat, 02 Dec 2023 13:55:39 GMT
age: 22485033
x-served-by: cache-fra-eddf8230111-FRA, cache-bma1669-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26291
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-GZ2WHBX513

142.250.74.168

200 OK

89 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=G-GZ2WHBX513
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT

File type
ASCII text, with very long lines (5955)
Size
89 kB (89380 bytes)
Hash
d2b446afd952da27872ee0196a22946a
cd08d2fafc3c8bbb12cdd6ff07cc9456ff96057f
f3e088fb2178948cc5be067ccfaab67f722a81112dd4bb52893398904105c062

HTTP Headers

GET /gtag/js?id=G-GZ2WHBX513 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 02 Dec 2023 13:55:39 GMT
expires: Sat, 02 Dec 2023 13:55:39 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89380
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/microsoft.png

188.114.97.1

200 OK

1.0 kB

URL GET HTTP/3
asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/microsoft.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerGoogle Trust Services LLC
Subjectmoneaaaw.com
Fingerprint63:0D:24:1F:2F:A8:FB:62:80:5E:55:2F:1C:89:36:13:DB:88:D7:47
ValidityFri, 01 Dec 2023 12:30:33 GMT - Thu, 29 Feb 2024 12:30:32 GMT

File type
PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced\012- data
Size
1.0 kB (1045 bytes)
Hash
bf2b460590fbb9d8e9611a6e9006b816
561e1dab259d61e798b3ce380527b71b61074ff3
ee4bc5fe81fa7c1e8497d79c9c8a96485df217092d334e9b48fa8840fed11d03

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /fjkgbfjkgbiruuiriur/wos/microsoft.png HTTP/1.1
Host: asnmii.moneaaaw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:55:39 GMT
content-type: image/png
content-length: 1045
last-modified: Fri, 01 Dec 2023 20:29:21 GMT
etag: "656a4221-415"
expires: Mon, 01 Jan 2024 13:55:39 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5d9DYeZucjre8AwEl%2FnZs9NMPrQO%2BUZIc9VSn6kaaLK6YgGvwQg6o%2BmXp12S8syGndDPFj4NnC%2FvMibNmIeX5xlHYH74Buyx3gC%2BGex7uQjrNo28GkD61fFDgnDS3KYq0ZR6ue5X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f411993a8d56c3-OSL
alt-svc: h3=":443"; ma=86400

asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/def.png

188.114.97.1

200 OK

3.8 kB

URL GET HTTP/3
asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/def.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerGoogle Trust Services LLC
Subjectmoneaaaw.com
Fingerprint63:0D:24:1F:2F:A8:FB:62:80:5E:55:2F:1C:89:36:13:DB:88:D7:47
ValidityFri, 01 Dec 2023 12:30:33 GMT - Thu, 29 Feb 2024 12:30:32 GMT

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Size
3.8 kB (3834 bytes)
Hash
77a2ffc5545f87551d74781201de9b3b
c9c3798afd2ae95aa3bba3c428335d49c8255b06
316e6a6737bd296ab30aca2ef7fa36f119d15786a2432d01e31fdc130272f15c

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /fjkgbfjkgbiruuiriur/wos/def.png HTTP/1.1
Host: asnmii.moneaaaw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:55:39 GMT
content-type: image/png
content-length: 3834
last-modified: Fri, 01 Dec 2023 20:29:18 GMT
etag: "656a421e-efa"
expires: Mon, 01 Jan 2024 13:55:39 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=THxiE3gu5p9AUUA6b3FeQuLjdad%2FNwwwbTQkk0vAG%2FoPxER2wMk%2FQfPds2uj49jExpFjYe6qK2UxOVy8ktZtpYv5HTxFTkjtYUnHzOwg4W1vXDfz5FQ6tyENut2KxxI4Jt4Fbro%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f411993a9156c3-OSL
alt-svc: h3=":443"; ma=86400

asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/virus-images.jpg

188.114.97.1

200 OK

8.2 kB

URL GET HTTP/3
asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/virus-images.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerGoogle Trust Services LLC
Subjectmoneaaaw.com
Fingerprint63:0D:24:1F:2F:A8:FB:62:80:5E:55:2F:1C:89:36:13:DB:88:D7:47
ValidityFri, 01 Dec 2023 12:30:33 GMT - Thu, 29 Feb 2024 12:30:32 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 254x71, components 3\012- data
Size
8.2 kB (8196 bytes)
Hash
5fc559a242f0ea0a023f10830887d2af
9d744c2f3a6bf5b715496350c8de7124cdd7ddc8
3b531d403dc8ce7cbb0efb1a0c307cfb2bbaaf21feaff9f3546f13bebda71887

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /fjkgbfjkgbiruuiriur/wos/virus-images.jpg HTTP/1.1
Host: asnmii.moneaaaw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:55:39 GMT
content-type: image/jpeg
content-length: 8196
last-modified: Fri, 01 Dec 2023 20:29:12 GMT
etag: "656a4218-2004"
expires: Mon, 01 Jan 2024 13:55:39 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kmAvXx%2F6DIDx2SUOy5AbC8%2Bc44Sxwt895zyLU%2FwqaafToXS22rKqmmzm1%2FM7r0ewGYqQxYsp9r94ix5jZSZ1%2FfCku18GoP29myg%2BFSiNNGKRKRGHW4fF7%2Bl%2BIBFkjtvBvvJ1HwBG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f411993a9756c3-OSL
alt-svc: h3=":443"; ma=86400

asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&

188.114.97.1

200 OK

49 kB

URL User Request GET HTTP/2
asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectmoneaaaw.com
Fingerprint63:0D:24:1F:2F:A8:FB:62:80:5E:55:2F:1C:89:36:13:DB:88:D7:47
ValidityFri, 01 Dec 2023 12:30:33 GMT - Thu, 29 Feb 2024 12:30:32 GMT

File type
HTML document, ASCII text, with very long lines (10482), with no line terminators
Size
49 kB (49406 bytes)
Hash
1025857932908193729ddbe440b6a84c
a10d7b20fcac0c1fd52f8dbe4c0979e8cda38644
27c788474e8de5020c07016ebcb567d2772ae5ecd37d7f56854c25431e56377e

HTTP Headers

GET /fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769& HTTP/1.1
Host: asnmii.moneaaaw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 02 Dec 2023 13:55:38 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BBuS2TyQ4UUOuLTSA%2BLEECdp0lCKrlKM%2FhCop%2BOfhTuusb4yy90yqZrpYTetfgEnWIVX2sauvGar4QU94HcNzB4HLWsaaQl%2BlX96kh0M%2BBzlOdjVGs57e%2B8WDQixLBVvtpS57Swb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f4119578e47129-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/bg2.jpg

188.114.97.1

200 OK

114 kB

URL GET HTTP/3
asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/bg2.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerGoogle Trust Services LLC
Subjectmoneaaaw.com
Fingerprint63:0D:24:1F:2F:A8:FB:62:80:5E:55:2F:1C:89:36:13:DB:88:D7:47
ValidityFri, 01 Dec 2023 12:30:33 GMT - Thu, 29 Feb 2024 12:30:32 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x941, components 3\012- data
Size
114 kB (113635 bytes)
Hash
5e20d8c5bd6c7a06298a2663a1cc8403
b6a831847567c49b247932edea74bbaec30dd4c5
948b1331677d0f9991d50376bfba436033c5a9cc5919cf9f74c03424b6f3e342

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /fjkgbfjkgbiruuiriur/wos/bg2.jpg HTTP/1.1
Host: asnmii.moneaaaw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:55:39 GMT
content-type: image/jpeg
content-length: 113635
last-modified: Fri, 01 Dec 2023 20:29:27 GMT
etag: "656a4227-1bbe3"
expires: Mon, 01 Jan 2024 13:55:39 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fW61%2B%2FKUGghMEo5lJ3B%2BqV%2FNwJOmKnvxIsADMaW85IvHybOolOeDG7P4mP8dc%2BDBW3zJeO9eICG4a8HcRADfcsjtfnyV9bn9N9B7Twc6qiHFWB2v9XJwd%2Bz80gI0kvB5n3JqLBvu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f411993a8956c3-OSL
alt-svc: h3=":443"; ma=86400

asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/cross.png

188.114.97.1

200 OK

44 kB

URL GET HTTP/3
asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/cross.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerGoogle Trust Services LLC
Subjectmoneaaaw.com
Fingerprint63:0D:24:1F:2F:A8:FB:62:80:5E:55:2F:1C:89:36:13:DB:88:D7:47
ValidityFri, 01 Dec 2023 12:30:33 GMT - Thu, 29 Feb 2024 12:30:32 GMT

File type
PNG image data, 2080 x 2080, 8-bit/color RGBA, non-interlaced\012- data
Size
44 kB (44098 bytes)
Hash
4487a588bf2a07e3d1936d705c5ceefd
db193b3e2ab9fbee6eae99ced2366b1ef5f16971
3821ef20f5904fdb993e34d87ff8fb9c5786a382efb0eeee8b4f00c91428b701

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /fjkgbfjkgbiruuiriur/wos/cross.png HTTP/1.1
Host: asnmii.moneaaaw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:55:39 GMT
content-type: image/png
content-length: 44098
last-modified: Fri, 01 Dec 2023 20:29:24 GMT
etag: "656a4224-ac42"
expires: Mon, 01 Jan 2024 13:55:39 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BFQ3zQAKfEuvjQMHdAMSBwP5YeTOuxqKtUe8p6eRLM02XWtR3n5wwm9ZaJBGG5SS1YYzsTjFkuL%2B3742jVSydzT%2FJ7MY25E90V2U%2F2TpnJe1IkcRq4QdkfAnBZMzbY%2FIAqubOKga"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82f411993a9256c3-OSL
alt-svc: h3=":443"; ma=86400

asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/fullscreen.js

188.114.97.1

200 OK

245 B

URL GET HTTP/3
asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/fullscreen.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerGoogle Trust Services LLC
Subjectmoneaaaw.com
Fingerprint63:0D:24:1F:2F:A8:FB:62:80:5E:55:2F:1C:89:36:13:DB:88:D7:47
ValidityFri, 01 Dec 2023 12:30:33 GMT - Thu, 29 Feb 2024 12:30:32 GMT

File type
ASCII text, with no line terminators
Size
245 B (245 bytes)
Hash
e70e5bc6acccc111d1016ccb1de66c20
b75154dabdb11f3c546fe085efdd740a8b88ea90
c8988f92f8e1a825f5f34ed45ca542b25eab1b845c5a0f459dff5045a4ee486e

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /fjkgbfjkgbiruuiriur/wos/fullscreen.js HTTP/1.1
Host: asnmii.moneaaaw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:55:39 GMT
content-type: application/javascript
last-modified: Fri, 01 Dec 2023 20:29:31 GMT
vary: Accept-Encoding
etag: W/"656a422b-f5"
expires: Mon, 01 Jan 2024 13:55:39 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g67cX4onooU3mK9KSECqU2JU6HpN%2F1lmIsnUPsJ8XV%2B%2BRL9jziOh4kkTpP4MILMpToDjIquDJbWp8ZHkiE9YRMjqkbTgl%2Fzh%2BcVcfcrvrS9AI88V1GSE8ktKhntKAhQ01eSJ2Wb4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f411994ab356c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/alert-en.wav

188.114.97.1

206 Partial Content

49 kB

URL GET HTTP/3
asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/alert-en.wav
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerGoogle Trust Services LLC
Subjectmoneaaaw.com
Fingerprint63:0D:24:1F:2F:A8:FB:62:80:5E:55:2F:1C:89:36:13:DB:88:D7:47
ValidityFri, 01 Dec 2023 12:30:33 GMT - Thu, 29 Feb 2024 12:30:32 GMT

File type
RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, mono 22050 Hz\012- data
Size
49 kB (48868 bytes)
Hash
eaba2def43c393dec5968574cb6a93b2
2301a72722e9e456c60bb3a261790c876a3e0c32
01779f322914cd536b687be02e2f8bb3cf91821bfa2dbaa2bbff255c38724641

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /fjkgbfjkgbiruuiriur/wos/alert-en.wav HTTP/1.1
Host: asnmii.moneaaaw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Cookie: _ga_GZ2WHBX513=GS1.1.1701525344.1.0.1701525344.0.0.0; _ga=GA1.1.93813590.1701525345
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 206 Partial Content
date: Sat, 02 Dec 2023 13:55:40 GMT
content-type: application/octet-stream
content-length: 1701582
last-modified: Fri, 01 Dec 2023 20:29:28 GMT
etag: "656a4228-19f6ce"
content-range: bytes 0-1701581/1701582
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mZ3a0aVByhAp2UwED7WQo6BfvrV%2FGy4Max1nn3blx81V%2B658ZiK%2FF3wiTTCua%2Bx5Ac0%2FAq%2B%2Fo0Xn5YGoT0JCu3TyntRrF%2BdFAfgO4ZebkGEpTDExkeLFsuqidZxyir76Nm9kCCvI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f4119cd85656c3-OSL
alt-svc: h3=":443"; ma=86400

maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css

104.18.11.207

200 OK

28 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT

File type
ASCII text, with very long lines (27303)
Size
28 kB (27466 bytes)
Hash
4fbd15cb6047af93373f4f895639c8bf
12d6861075de8e293265ff6ff03b1f3adcb44c76
ddd92f10ad162c7449eff0acaf40598c05b1111739587edb75e5326b6697c5d5

HTTP Headers

GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 02 Dec 2023 13:55:39 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"4fbd15cb6047af93373f4f895639c8bf"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 10/31/2023 18:58:32
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1047
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 25754c75fb460a03a208e88579fbc0b3
cdn-cache: HIT
cf-cache-status: HIT
age: 628984
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82f411997d63b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/before.js

188.114.97.1

200 OK

366 B

URL GET HTTP/3
asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/before.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerGoogle Trust Services LLC
Subjectmoneaaaw.com
Fingerprint63:0D:24:1F:2F:A8:FB:62:80:5E:55:2F:1C:89:36:13:DB:88:D7:47
ValidityFri, 01 Dec 2023 12:30:33 GMT - Thu, 29 Feb 2024 12:30:32 GMT

File type
ASCII text, with very long lines (380), with no line terminators
Size
366 B (366 bytes)
Hash
30ab0fccfb4c857f608e51c255c26796
5923f53a21825d79b436e2c98e6ab53068370ad3
92e7f01957ef9660eb84aa2d821d4fff017b66659f7a74b900fad60053a1c88c

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /fjkgbfjkgbiruuiriur/wos/before.js HTTP/1.1
Host: asnmii.moneaaaw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:55:39 GMT
content-type: application/javascript
last-modified: Fri, 01 Dec 2023 20:29:17 GMT
vary: Accept-Encoding
etag: W/"656a421d-16e"
expires: Mon, 01 Jan 2024 13:55:39 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bOAXvEG%2FXYncMF%2FIWfV5lYrHsZal6bZjARonyarEhJUzV%2BpstKBm%2FqTdJpM3BuRrnr1Gs4qi5HH8P4%2BScCxkT5wWRIQhuhbfTC92I7mWrp5%2BrLQgZEEy8HFfPd4xjeAxFAxzCfHU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f411994ab756c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/main.js

188.114.97.1

200 OK

1.4 kB

URL GET HTTP/3
asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/main.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerGoogle Trust Services LLC
Subjectmoneaaaw.com
Fingerprint63:0D:24:1F:2F:A8:FB:62:80:5E:55:2F:1C:89:36:13:DB:88:D7:47
ValidityFri, 01 Dec 2023 12:30:33 GMT - Thu, 29 Feb 2024 12:30:32 GMT

File type
ASCII text, with very long lines (1587), with no line terminators
Size
1.4 kB (1429 bytes)
Hash
8a61bd76a24b9f1ae3f0864256fe2219
48e7ab3d8ed14bf21d63c879e48899e70793073a
e65cc6553c751e915ab1ff5ab7698bdf0aaf907845ce6324407f6e49b4c154a6

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /fjkgbfjkgbiruuiriur/wos/main.js HTTP/1.1
Host: asnmii.moneaaaw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:55:39 GMT
content-type: application/javascript
last-modified: Fri, 01 Dec 2023 20:29:22 GMT
vary: Accept-Encoding
etag: W/"656a4222-595"
expires: Mon, 01 Jan 2024 13:55:39 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZleFWGv%2BIA%2F3JhbCgOvxmdNqnxj2BYVB2drwcsly9J4XpPO%2BrmIpAfK23UA4fq27PvKvBIDlQgSv1xYb1jGFjXP1C4Dc4y6NynM5GCa%2FaXmtkPjXj9exb84xL4a81seJhPkY%2FCHQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f411994ab956c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/light.js

188.114.97.1

200 OK

503 B

URL GET HTTP/3
asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/light.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerGoogle Trust Services LLC
Subjectmoneaaaw.com
Fingerprint63:0D:24:1F:2F:A8:FB:62:80:5E:55:2F:1C:89:36:13:DB:88:D7:47
ValidityFri, 01 Dec 2023 12:30:33 GMT - Thu, 29 Feb 2024 12:30:32 GMT

File type
ASCII text, with very long lines (545), with no line terminators
Size
503 B (503 bytes)
Hash
d64718a85daf432be5f8d3c9fe3a45bd
d1b2721f29e5a1a6e6344a53162f32c53eb98e1e
de0997f0917e44e1840ce9d82cc86fd7f6cae542f906c62d78ae71c6af0ee303

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /fjkgbfjkgbiruuiriur/wos/light.js HTTP/1.1
Host: asnmii.moneaaaw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:55:39 GMT
content-type: application/javascript
last-modified: Fri, 01 Dec 2023 20:29:21 GMT
vary: Accept-Encoding
etag: W/"656a4221-1f7"
expires: Mon, 01 Jan 2024 13:55:39 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ugl4dGgG2HMUG7PhFa0rM1FSBP2Djodmwr5X0si%2Bn5g%2FP1K1wkmcdT8x35CA8piew6l6hgi2VRNMoHkzO4JZOX3fHivpjATM%2B%2FIIx%2FU9mK1sVJo1nhDntNEnpbb16GpXfa1f0hUt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f411994acd56c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

asnmii.moneaaaw.com/favicon.ico

188.114.97.1

404 Not Found

146 B

URL GET HTTP/3
asnmii.moneaaaw.com/favicon.ico
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerGoogle Trust Services LLC
Subjectmoneaaaw.com
Fingerprint63:0D:24:1F:2F:A8:FB:62:80:5E:55:2F:1C:89:36:13:DB:88:D7:47
ValidityFri, 01 Dec 2023 12:30:33 GMT - Thu, 29 Feb 2024 12:30:32 GMT

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Size
146 B (146 bytes)
Hash
40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: asnmii.moneaaaw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Cookie: _ga_GZ2WHBX513=GS1.1.1701525344.1.0.1701525344.0.0.0; _ga=GA1.1.93813590.1701525345
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Sat, 02 Dec 2023 13:55:40 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GxkW69SHTeYtyckuU%2B%2Fi0gvnVb4vczTbKL9TMyxuJGHq1bhQjA6%2FHWEyxPfYOhDH6B0jPsm%2B9mNgi5LQUXt0iuA1P3VZrR8UYV%2B3OUv9wgskkqq1JoERKWI1B0spphrzz5UjtTYS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f4119e9af756c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/main.css

188.114.97.1

200 OK

12 kB

URL GET HTTP/3
asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/main.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerGoogle Trust Services LLC
Subjectmoneaaaw.com
Fingerprint63:0D:24:1F:2F:A8:FB:62:80:5E:55:2F:1C:89:36:13:DB:88:D7:47
ValidityFri, 01 Dec 2023 12:30:33 GMT - Thu, 29 Feb 2024 12:30:32 GMT

File type
ASCII text, with CRLF line terminators
Size
12 kB (12111 bytes)
Hash
28169309e74f1e0028e6e719676ab188
bfcad26f7a2ee391cb20e446b0f1a4e17499507a
d5d2eaec4d8f18123d2db3b457a892a5566da301d10ddb3afa85d059c64df7f6

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /fjkgbfjkgbiruuiriur/wos/main.css HTTP/1.1
Host: asnmii.moneaaaw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:55:39 GMT
content-type: text/css
last-modified: Fri, 01 Dec 2023 20:29:22 GMT
vary: Accept-Encoding
etag: W/"656a4222-2f4f"
expires: Mon, 01 Jan 2024 13:55:39 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lX6nUhv9v5F9M4Q9YhWNkzaEf1rpeiLsUm8a85jEQYCyTnRm7COj1K2pVbxqlfElsnEBMYVQ%2FLgFAsIidw%2FRExjd%2B3GNVepkQqPj2w1HuTca7uy%2FXf1EkvDwmPPJ%2F3Oqvx97BpIi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f411993a8656c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/jscode.js

188.114.97.1

200 OK

6.5 kB

URL GET HTTP/3
asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/jscode.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Certificate
IssuerGoogle Trust Services LLC
Subjectmoneaaaw.com
Fingerprint63:0D:24:1F:2F:A8:FB:62:80:5E:55:2F:1C:89:36:13:DB:88:D7:47
ValidityFri, 01 Dec 2023 12:30:33 GMT - Thu, 29 Feb 2024 12:30:32 GMT

File type
ASCII text, with very long lines (6918), with no line terminators
Size
6.5 kB (6477 bytes)
Hash
fbde4da0cb2f7af54c8ad1096fe4d1ce
9609bb67494ece0223a173a55025d128b14f1530
d70004786e99422691c01033d6753fa256b2d088f486c6509f374f12605f4c61

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake AntiVirus / Security software

HTTP Headers

GET /fjkgbfjkgbiruuiriur/wos/jscode.js HTTP/1.1
Host: asnmii.moneaaaw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://asnmii.moneaaaw.com/fjkgbfjkgbiruuiriur/wos/?t=(0101)-50555-94769&
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 02 Dec 2023 13:55:39 GMT
content-type: application/javascript
last-modified: Fri, 01 Dec 2023 20:29:15 GMT
vary: Accept-Encoding
etag: W/"656a421b-194d"
expires: Mon, 01 Jan 2024 13:55:39 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dvCDlA2AVQ0CUrbXRNeZR%2FUndCYqIf48IMAoI03%2Bz6loeYL6uui%2FiKbzPPeJg%2FCV1XjRlWHi5HWVMki3ZfiYA1fSCWm7jtiexT%2BD7JQw5j9UoylHnGDsyXIdnA2QngSa8JaTaE59"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82f411995add56c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (17)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML