Report - globnew.msamaze.cloud/Globe/Globe_prize_ob/indexc.html?campaign_id=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa&landing_page_title=Globe_prize_ob-PushOnly(safe)&bemobdata=c=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa..l=bf196afa-21e4-42aa-b2a7-4e7a7222e801..a=0..b=0..r=bemo.yuworld.cloud..ts=1685373511278

Report Overview

Submitted URL
globnew.msamaze.cloud/Globe/Globe_prize_ob/indexc.html?campaign_id=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa&landing_page_title=Globe_prize_ob-PushOnly(safe)&bemobdata=c=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa..l=bf196afa-21e4-42aa-b2a7-4e7a7222e801..a=0..b=0..r=bemo.yuworld.cloud..ts=1685373511278
IP
54.230.111.78
ASN
#16509 AMAZON-02
Submitted
2023-05-29 15:18:59
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
6

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.r2m02.amazontrust.com	unknown	2007-05-11	2022-10-12	2023-05-29	340 B	982 B	54.230.80.227
globnew.msamaze.cloud	unknown	2022-12-17	2023-03-26	2023-05-28	3.7 kB	130 kB	54.230.111.89
bujerdaz.com	unknown	2022-10-03	2022-10-03	2023-05-28	1.0 kB	43 kB	139.45.197.250

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-05-29	medium	globnew.msamaze.cloud/sw-check-permissions-871e8.js

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-05-29	medium	bujerdaz.com
2023-05-29	medium	bujerdaz.com

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	globnew.msamaze.cloud/Globe/Globe_prize_ob/indexc.html?campaign_id=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa&landing_page_title=Globe_prize_ob-PushOnly(safe)&bemobdata=c=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa..l=bf196afa-21e4-42aa-b2a7-4e7a7222e801..a=0..b=0..r=bemo.yuworld.cloud..ts=1685373511278	496 B	2023-03-13	2023-12-25
Pretty URL globnew.msamaze.cloud/Globe/Globe_prize_ob/indexc.html?campaign_id=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa&landing_page_title=Globe_prize_ob-PushOnly(safe)&bemobdata=c=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa..l=bf196afa-21e4-42aa-b2a7-4e7a7222e801..a=0..b=0..r=bemo.yuworld.cloud..ts=1685373511278 IP 54.230.111.89 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-13 23:17:16 Last Seen2023-12-25 15:40:07 Times Seen224 Hash 80f201826aa4b9d70f2f26eb94fb5819 f9843bcc13be819db8e6c36567eaa2b3d772e85a fd4005dbe7e1a3883458c013d3ebda09beeaa0c4048a9427b2cc481ac5a81b43 Loading...

	bujerdaz.com/pfe/current/micro.tag.min.js?z=5706466&sw=/sw-check-permissions-871e8.js	42 kB	2023-05-29	2023-05-30
Pretty URL bujerdaz.com/pfe/current/micro.tag.min.js?z=5706466&sw=/sw-check-permissions-871e8.js IP 139.45.197.250 ASN #9002 RETN Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-29 13:30:26 Last Seen2023-05-30 14:17:18 Times Seen136 Hash 348aaf537e25d9ba3675b0202c78cb6d eaccff0d833dcb09d9f359cdcde33798deec6bfd cc5c0daa5580f8ad52aba290bf9055d9322a43e36d4fed60ebfd2d2e01f19987 Loading...

HTTP Transactions (8)

URL IP Response Size

ocsp.r2m02.amazontrust.com/

54.230.80.227

471 B

URL
ocsp.r2m02.amazontrust.com/
IP
54.230.80.227:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
4f28dbbf66899f364011865450ec9cfb
63594ba058932252aa18a004e5a197c67f706a2a
32c19e1cb1263ae77de857ed011213448f2b78c272113979a129f59d9ba411d5

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Mon, 29 May 2023 15:18:41 GMT
Etag: "6473da7c-1d7"
Expires: Mon, 29 May 2023 17:18:41 GMT
Last-Modified: Sun, 28 May 2023 22:49:32 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wjToPHbJY1x5RvSyDcC_xUi1_JoHEg7ncMmJ_psHPRARBQSFKBJlyQ==

globnew.msamaze.cloud/Globe/Globe_prize_ob/img/prize.png

54.230.111.89

200 OK

2.9 kB

URL GET HTTP/2
globnew.msamaze.cloud/Globe/Globe_prize_ob/img/prize.png
IP
54.230.111.89:443
ASN
#16509 AMAZON-02

Requested by
https://globnew.msamaze.cloud/Globe/Globe_prize_ob/indexc.html?campaign_id=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa&landing_page_title=Globe_prize_ob-PushOnly(safe)&bemobdata=c=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa..l=bf196afa-21e4-42aa-b2a7-4e7a7222e801..a=0..b=0..r=bemo.yuworld.cloud..ts=1685373511278
Certificate
IssuerAmazon
Subject*.msamaze.cloud
Fingerprint4C:26:DA:62:BC:16:E7:52:C0:AD:03:57:67:EA:9D:C8:49:63:51:2E
ValidityMon, 19 Dec 2022 00:00:00 GMT - Wed, 17 Jan 2024 23:59:59 GMT

File type
PNG image data, 96 x 106, 8-bit colormap, non-interlaced\012- data
Size
2.9 kB (2868 bytes)
Hash
61710e84d51f96e9bc51babda9c3f255
582965d469667d948acc3ae75ccf8b156bf31f6e
eaf97d6be9a14b4da47a0382c4a362621a9f4225326b250ba1da944c9e8d9de6

HTTP Headers

GET /Globe/Globe_prize_ob/img/prize.png HTTP/1.1
Host: globnew.msamaze.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://globnew.msamaze.cloud/Globe/Globe_prize_ob/indexc.html?campaign_id=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa&landing_page_title=Globe_prize_ob-PushOnly(safe)&bemobdata=c=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa..l=bf196afa-21e4-42aa-b2a7-4e7a7222e801..a=0..b=0..r=bemo.yuworld.cloud..ts=1685373511278
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 2868
last-modified: Fri, 10 Feb 2023 19:43:31 GMT
server: AmazonS3
date: Mon, 29 May 2023 01:19:04 GMT
etag: "61710e84d51f96e9bc51babda9c3f255"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cl1inJcoKrcZN-lxzXyBUDXJaYC_4zQfzHciQM0uhaFB3CciNVf3kA==
age: 50378
X-Firefox-Spdy: h2

bujerdaz.com/zone?&pub=0&zone_id=5706466&is_mobile=false&domain=globnew.msamaze.cloud&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest

139.45.197.250

200 OK

0 B

URL POST HTTP/2
bujerdaz.com/zone?&pub=0&zone_id=5706466&is_mobile=false&domain=globnew.msamaze.cloud&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest
IP
139.45.197.250:443
ASN
#9002 RETN Limited

Requested by
https://globnew.msamaze.cloud/Globe/Globe_prize_ob/indexc.html?campaign_id=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa&landing_page_title=Globe_prize_ob-PushOnly(safe)&bemobdata=c=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa..l=bf196afa-21e4-42aa-b2a7-4e7a7222e801..a=0..b=0..r=bemo.yuworld.cloud..ts=1685373511278
Certificate
IssuerLet's Encrypt
Subjectbujerdaz.com
FingerprintEC:3D:AD:EA:5C:70:D3:88:1E:54:A9:0F:F1:EA:AE:31:A8:7A:CA:2B
ValiditySun, 12 Mar 2023 05:38:01 GMT - Sat, 10 Jun 2023 05:38:00 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

POST /zone?&pub=0&zone_id=5706466&is_mobile=false&domain=globnew.msamaze.cloud&var=&ymid=&var_3=&var_4=&dsig=&action=prerequest HTTP/1.1
Host: bujerdaz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://globnew.msamaze.cloud
DNT: 1
Connection: keep-alive
Referer: https://globnew.msamaze.cloud/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 15:18:42 GMT
content-length: 0
x-trace-id: bb5d5c064bfb4fdda4aa917726b13058
access-control-allow-origin: https://globnew.msamaze.cloud
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

globnew.msamaze.cloud/sw-check-permissions-871e8.js

54.230.111.89

200 OK

566 B

URL GET HTTP/2
globnew.msamaze.cloud/sw-check-permissions-871e8.js
IP
54.230.111.89:443
ASN
#16509 AMAZON-02

Requested by
https://globnew.msamaze.cloud/Globe/Globe_prize_ob/indexc.html?campaign_id=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa&landing_page_title=Globe_prize_ob-PushOnly(safe)&bemobdata=c=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa..l=bf196afa-21e4-42aa-b2a7-4e7a7222e801..a=0..b=0..r=bemo.yuworld.cloud..ts=1685373511278
Certificate
IssuerAmazon
Subject*.msamaze.cloud
Fingerprint4C:26:DA:62:BC:16:E7:52:C0:AD:03:57:67:EA:9D:C8:49:63:51:2E
ValidityMon, 19 Dec 2022 00:00:00 GMT - Wed, 17 Jan 2024 23:59:59 GMT

File type
Java source, ASCII text
Size
566 B (566 bytes)
Hash
9af4c4cc6fccc38d741dc4b40684b619
964ad18c2826bf48d1d197bf82b221a70d37e5a0
6d87353fc28792da1dffdf4c5a2e905e133f2a5ae5eb1fdbe0e06f80c962ca80

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /sw-check-permissions-871e8.js HTTP/1.1
Host: globnew.msamaze.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://globnew.msamaze.cloud/Globe/Globe_prize_ob/indexc.html?campaign_id=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa&landing_page_title=Globe_prize_ob-PushOnly(safe)&bemobdata=c=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa..l=bf196afa-21e4-42aa-b2a7-4e7a7222e801..a=0..b=0..r=bemo.yuworld.cloud..ts=1685373511278
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-length: 566
last-modified: Fri, 10 Feb 2023 16:17:39 GMT
server: AmazonS3
date: Mon, 29 May 2023 01:19:05 GMT
etag: "9af4c4cc6fccc38d741dc4b40684b619"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jGFixfHEsFX1P3jZ-kAQ0VvandKSVFAyop16xQUb9K25mkGq0nowqQ==
age: 50378
X-Firefox-Spdy: h2

globnew.msamaze.cloud/favicon.ico

54.230.111.89

404 Not Found

346 B

URL GET HTTP/2
globnew.msamaze.cloud/favicon.ico
IP
54.230.111.89:443
ASN
#16509 AMAZON-02

Requested by
https://globnew.msamaze.cloud/Globe/Globe_prize_ob/indexc.html?campaign_id=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa&landing_page_title=Globe_prize_ob-PushOnly(safe)&bemobdata=c=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa..l=bf196afa-21e4-42aa-b2a7-4e7a7222e801..a=0..b=0..r=bemo.yuworld.cloud..ts=1685373511278
Certificate
IssuerAmazon
Subject*.msamaze.cloud
Fingerprint4C:26:DA:62:BC:16:E7:52:C0:AD:03:57:67:EA:9D:C8:49:63:51:2E
ValidityMon, 19 Dec 2022 00:00:00 GMT - Wed, 17 Jan 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
346 B (346 bytes)
Hash
7018f1fef5eaa875e38a5ce62c3e9f36
0577d2c5fd41bc6afe12f81a3f41e90c181ccd76
6b400aafaab63d4f8399245da2b453eb35c046be9db6ab7bcd3025282bc070f8

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: globnew.msamaze.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://globnew.msamaze.cloud/Globe/Globe_prize_ob/indexc.html?campaign_id=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa&landing_page_title=Globe_prize_ob-PushOnly(safe)&bemobdata=c=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa..l=bf196afa-21e4-42aa-b2a7-4e7a7222e801..a=0..b=0..r=bemo.yuworld.cloud..ts=1685373511278
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
content-type: text/html; charset=utf-8
content-length: 346
date: Mon, 29 May 2023 15:18:41 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hM1fD_QVar6J5SHlXDxeb3jWTEfEvvwIplE5dpqOuMWGp4P34LVT8w==
X-Firefox-Spdy: h2

globnew.msamaze.cloud/Globe/Globe_prize_ob/indexc.html?campaign_id=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa&landing_page_title=Globe_prize_ob-PushOnly(safe)&bemobdata=c=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa..l=bf196afa-21e4-42aa-b2a7-4e7a7222e801..a=0..b=0..r=bemo.yuworld.cloud..ts=1685373511278

54.230.111.89

200 OK

10 kB

URL User Request GET HTTP/2
globnew.msamaze.cloud/Globe/Globe_prize_ob/indexc.html?campaign_id=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa&landing_page_title=Globe_prize_ob-PushOnly(safe)&bemobdata=c=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa..l=bf196afa-21e4-42aa-b2a7-4e7a7222e801..a=0..b=0..r=bemo.yuworld.cloud..ts=1685373511278
IP
54.230.111.89:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subject*.msamaze.cloud
Fingerprint4C:26:DA:62:BC:16:E7:52:C0:AD:03:57:67:EA:9D:C8:49:63:51:2E
ValidityMon, 19 Dec 2022 00:00:00 GMT - Wed, 17 Jan 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
10 kB (10339 bytes)
Hash
455f2e5b3cc522c6a8a0ad284c3e1fa0
dedd4cf1633dd6bb8df7a5e9c663443114351c56
d4f945bb579871a959fa2cf2a3693b7b16ba9929f6bb7f59bfacda51f0869853

HTTP Headers

GET /Globe/Globe_prize_ob/indexc.html?campaign_id=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa&landing_page_title=Globe_prize_ob-PushOnly(safe)&bemobdata=c=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa..l=bf196afa-21e4-42aa-b2a7-4e7a7222e801..a=0..b=0..r=bemo.yuworld.cloud..ts=1685373511278 HTTP/1.1
Host: globnew.msamaze.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html
last-modified: Fri, 24 Feb 2023 17:09:50 GMT
server: AmazonS3
content-encoding: br
date: Mon, 29 May 2023 02:11:31 GMT
etag: W/"455f2e5b3cc522c6a8a0ad284c3e1fa0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9NT6pECMrH3lBs4EnRwmGEasW_Wdj6v6nSOtfx2VEFdpy8HHTWl-9A==
age: 47231
X-Firefox-Spdy: h2

globnew.msamaze.cloud/Globe/Globe_prize_ob/css/style.css

54.230.111.89

200 OK

114 kB

URL GET HTTP/2
globnew.msamaze.cloud/Globe/Globe_prize_ob/css/style.css
IP
54.230.111.89:443
ASN
#16509 AMAZON-02

Requested by
https://globnew.msamaze.cloud/Globe/Globe_prize_ob/indexc.html?campaign_id=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa&landing_page_title=Globe_prize_ob-PushOnly(safe)&bemobdata=c=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa..l=bf196afa-21e4-42aa-b2a7-4e7a7222e801..a=0..b=0..r=bemo.yuworld.cloud..ts=1685373511278
Certificate
IssuerAmazon
Subject*.msamaze.cloud
Fingerprint4C:26:DA:62:BC:16:E7:52:C0:AD:03:57:67:EA:9D:C8:49:63:51:2E
ValidityMon, 19 Dec 2022 00:00:00 GMT - Wed, 17 Jan 2024 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
114 kB (113892 bytes)
Hash
06d3735b996ef910aa3cddca35f2d751
47cd75e762b68d5ad0a5f5ca7175b61fa954a18d
18e9c27de0a212ecb4fc5468492d1060b8f5e753939fdbe4596121020ffcf936

HTTP Headers

GET /Globe/Globe_prize_ob/css/style.css HTTP/1.1
Host: globnew.msamaze.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://globnew.msamaze.cloud/Globe/Globe_prize_ob/indexc.html?campaign_id=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa&landing_page_title=Globe_prize_ob-PushOnly(safe)&bemobdata=c=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa..l=bf196afa-21e4-42aa-b2a7-4e7a7222e801..a=0..b=0..r=bemo.yuworld.cloud..ts=1685373511278
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
last-modified: Fri, 10 Feb 2023 19:43:31 GMT
server: AmazonS3
content-encoding: br
date: Mon, 29 May 2023 01:21:21 GMT
etag: W/"06d3735b996ef910aa3cddca35f2d751"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GdCsyteqnHlm9LMwyHCtkVlGDuZEPHasHTzSqVaGesLKMbGu7UIHVw==
age: 50241
X-Firefox-Spdy: h2

bujerdaz.com/pfe/current/micro.tag.min.js?z=5706466&sw=/sw-check-permissions-871e8.js

139.45.197.250

200 OK

42 kB

URL GET HTTP/2
bujerdaz.com/pfe/current/micro.tag.min.js?z=5706466&sw=/sw-check-permissions-871e8.js
IP
139.45.197.250:443
ASN
#9002 RETN Limited

Requested by
https://globnew.msamaze.cloud/Globe/Globe_prize_ob/indexc.html?campaign_id=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa&landing_page_title=Globe_prize_ob-PushOnly(safe)&bemobdata=c=375d5830-a0f0-4f2f-8b2c-fa9046abe8aa..l=bf196afa-21e4-42aa-b2a7-4e7a7222e801..a=0..b=0..r=bemo.yuworld.cloud..ts=1685373511278
Certificate
IssuerLet's Encrypt
Subjectbujerdaz.com
FingerprintEC:3D:AD:EA:5C:70:D3:88:1E:54:A9:0F:F1:EA:AE:31:A8:7A:CA:2B
ValiditySun, 12 Mar 2023 05:38:01 GMT - Sat, 10 Jun 2023 05:38:00 GMT

File type
C source, ASCII text, with very long lines (42050), with no line terminators
Size
42 kB (42050 bytes)
Hash
348aaf537e25d9ba3675b0202c78cb6d
eaccff0d833dcb09d9f359cdcde33798deec6bfd
cc5c0daa5580f8ad52aba290bf9055d9322a43e36d4fed60ebfd2d2e01f19987

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /pfe/current/micro.tag.min.js?z=5706466&sw=/sw-check-permissions-871e8.js HTTP/1.1
Host: bujerdaz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://globnew.msamaze.cloud/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 15:18:41 GMT
content-type: application/javascript
last-modified: Mon, 29 May 2023 10:02:24 GMT
etag: W/"64747830-a442"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (8)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL POST HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN