{"report_id":"a43295fb-4e33-4794-bae4-d5e9c89bd9c1","version":6,"status":"done","tags":["fake_software","scam"],"date":"2026-03-29T12:55:34Z","url":{"schema":"http","addr":"smartprinter.buzz.malblocker.com","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":0,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"final":{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"title":"Security center","dom":{"size":22879,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (896)","md5":"0caae913d9c9211464f11cb9b26915cd","sha1":"a06d358a4170b4f4e480d00aa52551b2e9249bdd","sha256":"26cc59fe4f6ef1720b5052cd5e8271bbc550e640e284c40a98ea811e5b16bdbe","sha512":"a954391820214c9d9fb7902e8d7afb0bd7af35b03e002c7de3834c6fa50dcebb19d39534f417606e6777f554a3eb7db2e064704fca4207ce5aa286e56eb8730d","ssdeep":"384:aBixi9iYiZBknNeNrYsePfwhHZ56+XTiCBAiMA:aI4s1oNwrY/fwh/RX2CBdj","tlshash":"54a27064a8f62413016350c5baa6ab4f3fa0d607d6174e003bec4be69fd7d97dc07689","dom_hash":"domhash2a2501b4ff1f0bd6c3e04ebcfee3c077","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"smartprinter.buzz.malblocker.com","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":0,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-03T12:55:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null},{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]},"summary":[{"fqdn":"smartprinter.buzz.malblocker.com","ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"domain_registered":"2025-05-04","domain_rank":0,"first_seen":"2026-03-29T12:55:34.842923Z","last_seen":"2026-03-29T12:55:34.842923Z","alert_count":124,"request_count":31,"received_data":1545978,"sent_data":14935,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"userstatics.com","ip":{"addr":"195.177.94.253","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"domain_registered":"2020-11-05","domain_rank":262534,"first_seen":"2020-11-05T23:01:51Z","last_seen":"2026-03-23T15:48:44.433165Z","alert_count":0,"request_count":1,"received_data":549,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.2.1","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"312f3077be2c3f4ad225606df3431cff","sha1":"086a932ed8924efccb585ec2de0156b0b33b9980","sha256":"e913e0fab1f8e17d2c8f23d678732c1054590d915791a5b3775b4d1dc7c819ff","sha512":"222714a3aa506f918ac6d9de51751437dae4d35898f17ff03bc76943630ab7ca731393fa90a3b8cef3b62cbfb7ed22ae593caeabf5c815fca58abaf3a1375f8b","ssdeep":"","tlshash":"28d09be3f767097005edd56f287147457434c42c5e4162597c1c44b5407adc6645fd91","size":262,"data":"","first_seen":"2024-03-28T06:58:36Z","last_seen":"2026-04-16T09:18:29.231116Z","times_seen":419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"395e37086e6da8577a1e8a561d6bd25e","sha1":"ccd6a1742f7c0649fc576fc3d7f0f33f239a13b0","sha256":"94248756df1860f747993bb20bf2536d87ec05ac9a6862874140a75e86351a8c","sha512":"c4f8ba4cdd16a422a40cabfeefec0190eec5203fd923d24c9567db3d5c5a9a5b246688729854e16b0ed71fc6e65ecc09d73719ed19d7d304bab7cdac5af098ec","ssdeep":"","tlshash":"85f0228958872cd813322c78b39f621254e9441700edc310b30cd9425f2827fa2acad8","size":472,"data":"","first_seen":"2024-06-17T06:49:03Z","last_seen":"2026-03-29T14:20:37.106068Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"97ef9f8c8820a1b9725687fa0daff569","sha1":"f1a2c82bf4d64ac2a98ccd5fc7dbab2672ae887b","sha256":"ca9ddf29d54eb53c8b34195fbfb3305ac5b0961b70c0a4bb0076136ebc38610c","sha512":"1f92a242000925c382471d501bd7ac783ce95f909fa6d565a7df4df785c3857c0000f1f663efa9c918f71f24f853e24cd8cccccecf385f823c351ba725685dae","ssdeep":"","tlshash":"a0700000002222a002000020002ac2e028b88020ea222200000b0c2000808080000820","size":20,"data":"","first_seen":"2023-12-14T02:26:45Z","last_seen":"2026-04-13T09:24:15.415299Z","times_seen":3039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"97ef9f8c8820a1b9725687fa0daff569","sha1":"f1a2c82bf4d64ac2a98ccd5fc7dbab2672ae887b","sha256":"ca9ddf29d54eb53c8b34195fbfb3305ac5b0961b70c0a4bb0076136ebc38610c","sha512":"1f92a242000925c382471d501bd7ac783ce95f909fa6d565a7df4df785c3857c0000f1f663efa9c918f71f24f853e24cd8cccccecf385f823c351ba725685dae","ssdeep":"","tlshash":"a0700000002222a002000020002ac2e028b88020ea222200000b0c2000808080000820","size":20,"data":"","first_seen":"2023-12-14T02:26:45Z","last_seen":"2026-04-13T09:24:15.415299Z","times_seen":3039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"97ef9f8c8820a1b9725687fa0daff569","sha1":"f1a2c82bf4d64ac2a98ccd5fc7dbab2672ae887b","sha256":"ca9ddf29d54eb53c8b34195fbfb3305ac5b0961b70c0a4bb0076136ebc38610c","sha512":"1f92a242000925c382471d501bd7ac783ce95f909fa6d565a7df4df785c3857c0000f1f663efa9c918f71f24f853e24cd8cccccecf385f823c351ba725685dae","ssdeep":"","tlshash":"a0700000002222a002000020002ac2e028b88020ea222200000b0c2000808080000820","size":20,"data":"","first_seen":"2023-12-14T02:26:45Z","last_seen":"2026-04-13T09:24:15.415299Z","times_seen":3039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"97ef9f8c8820a1b9725687fa0daff569","sha1":"f1a2c82bf4d64ac2a98ccd5fc7dbab2672ae887b","sha256":"ca9ddf29d54eb53c8b34195fbfb3305ac5b0961b70c0a4bb0076136ebc38610c","sha512":"1f92a242000925c382471d501bd7ac783ce95f909fa6d565a7df4df785c3857c0000f1f663efa9c918f71f24f853e24cd8cccccecf385f823c351ba725685dae","ssdeep":"","tlshash":"a0700000002222a002000020002ac2e028b88020ea222200000b0c2000808080000820","size":20,"data":"","first_seen":"2023-12-14T02:26:45Z","last_seen":"2026-04-13T09:24:15.415299Z","times_seen":3039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"97ef9f8c8820a1b9725687fa0daff569","sha1":"f1a2c82bf4d64ac2a98ccd5fc7dbab2672ae887b","sha256":"ca9ddf29d54eb53c8b34195fbfb3305ac5b0961b70c0a4bb0076136ebc38610c","sha512":"1f92a242000925c382471d501bd7ac783ce95f909fa6d565a7df4df785c3857c0000f1f663efa9c918f71f24f853e24cd8cccccecf385f823c351ba725685dae","ssdeep":"","tlshash":"a0700000002222a002000020002ac2e028b88020ea222200000b0c2000808080000820","size":20,"data":"","first_seen":"2023-12-14T02:26:45Z","last_seen":"2026-04-13T09:24:15.415299Z","times_seen":3039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"97ef9f8c8820a1b9725687fa0daff569","sha1":"f1a2c82bf4d64ac2a98ccd5fc7dbab2672ae887b","sha256":"ca9ddf29d54eb53c8b34195fbfb3305ac5b0961b70c0a4bb0076136ebc38610c","sha512":"1f92a242000925c382471d501bd7ac783ce95f909fa6d565a7df4df785c3857c0000f1f663efa9c918f71f24f853e24cd8cccccecf385f823c351ba725685dae","ssdeep":"","tlshash":"a0700000002222a002000020002ac2e028b88020ea222200000b0c2000808080000820","size":20,"data":"","first_seen":"2023-12-14T02:26:45Z","last_seen":"2026-04-13T09:24:15.415299Z","times_seen":3039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"08f198befbb57455bd794a3f28f7a283","sha1":"19256936a696c4c6fbc2d280a794d3d0054da95e","sha256":"0d3a59b81a029accf4748e9e9ed336081af5afa92542dd2f6ff203e324673c1f","sha512":"628554a56a00c3fefeec912d588b940c9b7e1dd09b74a23af392a63400486480fb60e07fc0a63b4dd3e69943d1a9d4fefe19e8d2685d1434a9221f74c8311ee3","ssdeep":"","tlshash":"4ba01266a27348e0019959b9181203443534442805001604281440b00024d991016cc1","size":84,"data":"","first_seen":"2023-10-29T20:07:52Z","last_seen":"2026-04-16T17:29:57.491391Z","times_seen":983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca898fd4c3375bab993d5051889360fa","sha1":"2ff9768f7b0af1a6cefa5b1a70fc222f7dd6e0f0","sha256":"9b99ef1c5fb8cade9a71477c8615e71185ecbbf61645641e84e1a089b1ed1e5d","sha512":"0976d27e900848a9f6913a4edfb1b444fd390e180e4d7f8b836f21aa5648860f14a76690bd87426f2810ddf057f2446bd00a1f474d7dedd7bdda562bd1f1a869","ssdeep":"","tlshash":"e2b0120b72d790a04a5b7823111bc2042831202714438a03361c16a04f51e948442fa4","size":108,"data":"","first_seen":"2024-06-22T19:59:11Z","last_seen":"2026-04-16T17:29:57.492624Z","times_seen":440,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"fad9457456d6151f71d98cd44c273090","sha1":"13cfe78c5f28ac6d411ff0b285c90b7f4205b204","sha256":"23da1911437a63956db0ad03445d71b853448500cfa4142bc30e537df61bdd41","sha512":"68e3f39f01c7bbed25f134124f77c85a216fe25e73e245af4d8298d1a445fc21e3e9bcd15bc14e39f0c3fa017788a57155e01dd0de63f05190901bec064f6180","ssdeep":"","tlshash":"4ca0244f71f1f010c0573517c00543443434c1003c4d0f07100c07714430715c511d04","size":73,"data":"","first_seen":"2024-06-22T19:59:11Z","last_seen":"2026-04-16T09:18:29.23647Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/js/flscn.js","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"c638dfa22c9c0616c5d75c14210a3881","sha1":"f7d14a169f8baac0b54f580039cb4a2b07823e3a","sha256":"34ccdb50687c38ca7f6f04c46aaba862b1e93f6bd1ab158915a4ae1034f2e65e","sha512":"1db742697ba05936fae8a57ad0d0f8084a2ced47ed59f7d6d8e88b91489f1365539f6e63529b1fe5e30171184d6acfa5d0bbd5043805fd8cd2d6496d73592698","ssdeep":"","tlshash":"f7d022bb8a0014b0e0b5ea2ea62bdacbfc30406b3000bc32380c24f60f38ccc0360d90","size":269,"data":"","first_seen":"2024-06-22T19:59:11Z","last_seen":"2026-04-24T01:23:35.083325Z","times_seen":1166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/js/esc.js","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"894af36ec36119261a35ce05dfa6b1d0","sha1":"b7726e977bd1f28ab0d302a4c7341b13122d033c","sha256":"36c93ecca4ea10ed850a8b04465a4141f6afc135419d644181e63a98da87a376","sha512":"0b97eaa5562bc0ad43af4494416ebf94f72d95873e55e4713818a5e39d08c334499bf13062e28fc08469dc097ed920fc9f824253b97709bf8fa841be31d2b872","ssdeep":"","tlshash":"24b0125e103a282445323a240623c718e521400340436289f6c94391bf710288a1fd0c","size":99,"data":"","first_seen":"2024-06-22T19:59:11Z","last_seen":"2026-04-24T01:23:35.078603Z","times_seen":1182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"1532be6a9e1903c1b62eb465b3388a75","sha1":"9f00d381d3d038cbc696e21ca023552c3ce7d041","sha256":"6477e3b13d177cdef566c31a48b0c3fc1d2e78f9a4952452ff847ed3f769435c","sha512":"91c9d0cf1cc2a5edff4940f3ee5a0bc9f55d1ab695894a51f6522542c8bb838574a487f67030083eba2304d3872aac4208d5513e32c177358c6e759db137f609","ssdeep":"","tlshash":"25d0220321eb00600faf387b012992003cd1d03b0f0dd814350ca8600f2bf28c17bac0","size":219,"data":"","first_seen":"2023-11-18T03:55:33Z","last_seen":"2026-04-16T17:29:57.493909Z","times_seen":850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"0cf86a01b9967e10b85b88d2aa6cc3a0","sha1":"748e1b9cb423eb6e3574f548f60e98da9ef52f38","sha256":"4904384af749dc39bf34674a84bfdb0ca104361cf88aec4131d649acf1b274b9","sha512":"712aca0f80ebf8a2d365bc422ce111ea841cf62f29aee29f2fe0b1e10ccc120a87183b6909a6da5283882f619bbe3e6e8e622847953ba579fcd6a5dfc76fd650","ssdeep":"","tlshash":"19c0921af4e86200023335381d2fa448ae33360f7609af483e8c5ae00f2e0299557a24","size":152,"data":"","first_seen":"2024-03-28T06:58:36Z","last_seen":"2026-04-16T17:29:57.495217Z","times_seen":1081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"a467760daf1e2b0b580ef05677e343d4","sha1":"6af82335927cd2a240eb5ea0c6ed631f748fe1e6","sha256":"435a574dbee07ec4768b6406bcaae52f356237d17c5fc9e885972276e6cfe503","sha512":"709dd69b2b1d4824f37ed4e71c11928e6673fdb998e8407799b44599b771d7b41a68c8e428546251e8ab2d4d7614a58659ad20bbcddbefdfc783fa17e0e96bfc","ssdeep":"","tlshash":"27e0671de067ad76f43320c05f23815288326e6fb143ca08fa5c58f59fa851fe60bd05","size":355,"data":"","first_seen":"2024-03-28T06:58:36Z","last_seen":"2026-04-14T09:00:31.581559Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a5b0845305a1c8f39abe549861a8813","sha1":"cf75e4b067d3832496fd8dce09bb741528643562","sha256":"1364ad582702962d736c9ec451b5d2e8abe3ce394076606dc429e236680f2ba9","sha512":"475d9da4eaab4ffea303b7c31881c14c8c6f9c372bed3eced479c7001a33a1cb5af120e4867e5e1003479275944aa9ea6ce024d32eed86f27c9cfa3e1e42b02c","ssdeep":"","tlshash":"8bd0921af8e96610023335385d3fa404ee33750b71499e543e9d5ae04f2d23a8803a04","size":284,"data":"","first_seen":"2023-11-18T03:55:33Z","last_seen":"2026-04-16T17:29:57.498382Z","times_seen":1020,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"633281eb35c1ff264a1a5e65567b3458","sha1":"9702599f65434e7b91d08132fcaab64fe4549445","sha256":"1adb07bdd5cce2d3baefe4381150c681f062ed36148a3a0d046a7d5acd6bc606","sha512":"eee66b555a8f6e429749f94336b5541656980a2ebd5a578fdbcfaca3ca1d8f4941c78a13de2bf1c1726d1701002a7e09693aef0eeec5b57315cec7d9c3116393","ssdeep":"","tlshash":"2ec0922df8e96105023331385d3ba408ae37781b60469e413d5d19e14f192398847908","size":146,"data":"","first_seen":"2023-11-18T03:55:33Z","last_seen":"2026-04-16T17:29:57.499049Z","times_seen":806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/js/main.js","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0fd124a6e7d3c05c530ff4e76b07464","sha1":"e74b051467d3ac5b3122c27938a3baa2aa65ba9f","sha256":"3616cf46b53ecac41813d66874380a99715b0b31baf1c27c5db0ba320b9369c8","sha512":"bb4032b3159d5198e5ed855eae99318520029310a9972a667dcea3c8b36d14a4623c6d4db9394298f608863611740437bb72a7e07461d2609725f7c4963ccf96","ssdeep":"","tlshash":"ec41dc6a7752206669b3737cebaf5200f516362b02874942babc10d81f76d68e139f6c","size":2193,"data":"","first_seen":"2024-06-22T19:59:11Z","last_seen":"2026-04-24T01:23:35.08887Z","times_seen":1184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/js/jquery.min.js","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"20c129bedb4a26db02fc0f54d026c3f5","sha1":"093b9d2728788de24a728742070a348b2848573f","sha256":"436ecc90fab5ed1034b68a4a0e924e0132d93d9e7fb59b4fe23018eb7d9242c1","sha512":"1997641a1dba92af7c28fe67c14fc3f89c1e49be14dd8a8903c3c5d4a4aae6161b00bf37d02eda6e8b45f88936c0a7871c1d465036d6f1d18c36ed8d419b78de","ssdeep":"1536:AP1Wk7i6GUHdXXeyQazBu+4HhiO2Id0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrb:K4UdeJiz6UAIJ8pa98Hrb","tlshash":"1183d6d9b2c67062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84817,"data":"","first_seen":"2023-12-11T03:59:36Z","last_seen":"2026-04-16T17:29:57.445385Z","times_seen":1693,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c07597feccf3d40b0df286928900c23","sha1":"a18b8ef254426223cc1c0e1373a48b56fa496e34","sha256":"bc4636e53b583dbd1cdeeca8acabf609e6a43c5b3a342fed1dd38fc64a8fbfbc","sha512":"4044a1a6c58084e8e371bd712750c58b78a11dd0549d0771b9a8bb369a114a81ebce1af22b2c54351ec04f51dc82e993689a40c970ad0af1dbc5cd4ef567854e","ssdeep":"","tlshash":"0af05c1d04f6352617171738136ac284347ccb935105acc4b06c0fc4dfb1679b2b2e0d","size":527,"data":"","first_seen":"2024-03-28T06:58:36Z","last_seen":"2026-04-14T09:00:31.583487Z","times_seen":515,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"15ce533fe2f7c43694d69cc21926330e","sha1":"74461f8ae051774cf5370d296f40b479b4fa1748","sha256":"e847bf0446af7c6b3bc9925ce9f757e888ec8eb992f0efe1cdfb3db23f75d4a6","sha512":"3e6b5fb4315fa0e0504ad32bb59844cb0a523dcdcc348360f1b77a79b61846f6dd21fd66152868601ed774b770bbf8a17267eea7f178460f9b7806cb43cd0cb7","ssdeep":"","tlshash":"cea0222c20f328008203b838c33bfa0c3033000320080800b32c03a03f02020cc0ea0c","size":81,"data":"","first_seen":"2023-11-18T03:55:33Z","last_seen":"2026-04-14T09:00:31.584013Z","times_seen":486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"d18c808b2fc58ce55994193e05ba6b74","sha1":"3e93d73aff6c4572589f5b13b8586a9980f62a65","sha256":"14e330255d454bef1765d43741fb8c3c9b58bf630b8df9df2590e67cb889bb8b","sha512":"f615643fc5a9e2a780019d554072878ad62e7b5b4821fbd71251e78bfc82018d0d954862c6a0f354a92ab59c372c1b9b797bcb83c4b2c4cd3c12bc4247841e8b","ssdeep":"","tlshash":"73e02b3970d31491850a7b68073be080383017f3c00a4d50f40c9e743f86c0199dbab2","size":365,"data":"","first_seen":"2024-03-28T06:58:36Z","last_seen":"2026-03-31T13:12:47.484684Z","times_seen":480,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"userstatics.com/get/script.js?referrer=https://smartprinter.buzz.malblocker.com/","fqdn":"userstatics.com","domain":"userstatics.com","tld":"com"},"ip":{"addr":"195.177.94.253","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fea7fbf2c619fd4b7716fcaa64070c6c","sha1":"f192732937981a26f526b7c1293a2ae13bc59a22","sha256":"df9690fea031319de38a437cb6d393026c4aae70642ed394c4254ed64f035b26","sha512":"145c293c29dc95f829b71b3e7378fac6a17d3081f9d2e17a986bed2cc5f07f4bc35e791010264c841f02057a64a9f297d4f62335fef59f0c237a541599edb6c3","ssdeep":"","tlshash":"61c09b148f1d87f5203642de75e3c3c8947460e67515d40a644f64f95599ed30ec1d91","size":133,"data":"","first_seen":"2023-11-04T00:48:23Z","last_seen":"2026-04-26T10:00:49.787437Z","times_seen":5074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"eventHandler","is_inline":false,"md5":"57381d43f260aa3b8c47820ca38655a3","sha1":"8d087b53d91f8e3ff0def7d1d94a6dada72fac79","sha256":"35b90e4b54b87ed6cd2b439eac195f9eb59e731e17248c95fb1e26e15d61f943","sha512":"e39f2aae6c3f8f32fb2f9d0345265a29a63a7874120b0f7eddbf1a2c08787e2f754f1777d346ef99c94483abf37918c424f9a4318c995de1a37241cefeef2186","ssdeep":"","tlshash":"c0700088b080a02002022020022b2008a0ba0000200c0000800002803e200088022800","size":19,"data":"","first_seen":"2023-04-10T16:23:44Z","last_seen":"2026-04-26T06:36:27.066102Z","times_seen":12570,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/js/bootstrap.min.js","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":false,"md5":"02d223393e00c273efdcb1ade8f4f8b1","sha1":"0cc93b8421d89c24a889642428b363cb831de78a","sha256":"79c599dd760cec0c1621a1af49d9a2a49da5d45e1b37d4575bace0a5e0226582","sha512":"339296df3b6e2080a65488634aa5ded35a15d9ba5edb8f203b1aa695c62b13302fc2cecfc37cfa04ad2219baf0bddad4414862dde5e0b71a7923c3c3a3d61f8d","ssdeep":"768:wfAnnayQIk8HVheIE8Dg76TXQI4vPKMEK6viTlCDFm4n6xOp6Pxg3/wCVaAk2:wfUnTcWCw6xJxg7aAz","tlshash":"0343a54a7254787206df747a817b060bb3366c99a50a816cb8699ced2f7cd483277f3c","size":60044,"data":"","first_seen":"2023-03-07T01:06:50Z","last_seen":"2026-04-26T08:59:43.96603Z","times_seen":12750,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"caa4c391d151c115699d7b1404d8a783","sha1":"d0d646b16bb978587c8d150e279367add1b103c3","sha256":"8c3b84c03a283421751b798d28f2de4817764cce524553a1969d448e45ede4db","sha512":"5e88fce88b16155bcecb53388c39db512eb121730e2a5a2357423354b02570987a2c202fb26397749a64ae57d19464b33d1e585103c5284b3d9c83f147ac6b35","ssdeep":"","tlshash":"19c09b5b1d5b544064367a5dcf47b29431730493510164417f2d87153f31617b1007e5","size":151,"data":"","first_seen":"2023-11-18T03:55:33Z","last_seen":"2026-04-14T09:00:31.585303Z","times_seen":481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"introduction_type":"scriptElement","is_inline":true,"md5":"2325f2d12e501a5694b04d8f8362c149","sha1":"0d6faa7f107ca098ce93a2971c4a33586e1b8002","sha256":"47d20479d27952c07206c2679967e5e5cc5c21bfc69f77608a9e36bad8d3467d","sha512":"550917e94fe56c1ac5bc7bec9c604ad0a301496245e187aef9fc1caf98325f58f119f186e72504473a67d7cbb681047ed886d6b7f8df052f04006364298537e5","ssdeep":"","tlshash":"d311320ff32f3e76403932c0ab4fb18ae724109666a51c913cea4eee5af4c66010dd67","size":1033,"data":"","first_seen":"2023-03-07T12:09:10Z","last_seen":"2026-04-14T09:00:31.586092Z","times_seen":487,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/js/flscn.js","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:16.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /js/flscn.js HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 160\r\ncontent-type: application/javascript\r\ndate: Sun, 29 Mar 2026 12:55:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":269,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"c638dfa22c9c0616c5d75c14210a3881","sha1":"f7d14a169f8baac0b54f580039cb4a2b07823e3a","sha256":"34ccdb50687c38ca7f6f04c46aaba862b1e93f6bd1ab158915a4ae1034f2e65e","sha512":"1db742697ba05936fae8a57ad0d0f8084a2ced47ed59f7d6d8e88b91489f1365539f6e63529b1fe5e30171184d6acfa5d0bbd5043805fd8cd2d6496d73592698","ssdeep":"","tlshash":"f7d022bb8a0014b0e0b5ea2ea62bdacbfc30406b3000bc32380c24f60f38ccc0360d90","first_seen":"2024-06-22T19:59:11Z","last_seen":"2026-04-24T01:23:35.083325Z","times_seen":1166,"resource_available":true,"data":null}},"time_used":3764,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3622,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/images/msmm.png","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:16.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /images/msmm.png HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 168\r\ncontent-type: image/png\r\ndate: Sun, 29 Mar 2026 12:55:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":168,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 31 x 30, 4-bit colormap, non-interlaced","md5":"acb05ebcd5f488fc99169cff02b6dd04","sha1":"dca893a7b514503e947a57aa072482a0e0cba912","sha256":"1ab5ef4e7e196cb1ff39df44e1a0a39f6880b906ef6fd6da3cfdbb92ffd33115","sha512":"13fb028e0b360c36355fbe5d98377548b6008e6939d3ac5296fd20fe7c52359183bfca7505ad9ef7c8bfe068fb59b91850f86d4c11765746850737174eff522e","ssdeep":"","tlshash":"9dc0c0dd56900ce6a30c0653401c49907b16037c3020b700f0fb6234391023e8344133","first_seen":"2023-05-23T11:29:58Z","last_seen":"2026-04-24T08:13:04.498397Z","times_seen":5593,"resource_available":false,"data":null}},"time_used":3761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3617,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/images/dm.png","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:16.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /images/dm.png HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35689\r\ncontent-type: image/png\r\ndate: Sun, 29 Mar 2026 12:55:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":35689,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1260, 8-bit/color RGBA, non-interlaced","md5":"25fb1b036a658d3b2ca359031483b7b2","sha1":"dbd4896260d75cd28031479e1495b82dbba0f726","sha256":"426eec34428ca37958c3697503680648f7d9658ae0fe6300e80ddc17797ceb85","sha512":"bd1273b94de729dfa0afead57a5a62cc08862203dfadc3f1d2ffb63907fecb65cef1f0961ca0b0b21ed87f27125efb7f67c1603637890f1edc9af2634474dfcb","ssdeep":"768:+dk7X7ai/932LWKhxepn/1eKWrJznfCfjlwXYyD0ixKuxMUH:+dsQSKhxOQKWrJznf6JnIxUuxDH","tlshash":"fcf2c06f88359f57ca25c0f3d548876a72389bee43f816547bf1cbb8bc97a4a0019c51","first_seen":"2024-01-16T03:20:59Z","last_seen":"2026-04-24T08:13:04.420336Z","times_seen":1607,"resource_available":false,"data":null}},"time_used":4175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3610,"receive":565,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/w1.html","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:24.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /w1.html HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 29 Mar 2026 12:55:25 GMT\r\nserver: nginx/1.23.4\r\ncontent-type: text/html\r\ncontent-length: 358\r\nlast-modified: Sat, 28 Aug 2021 19:11:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":583,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"51618ac2b7cf5c4937213e965c00f20a","sha1":"7e704e57162ed18743bef9f95e2dea558954751b","sha256":"0b41f69e6564b9c89b1b344744c5b06eb4adc0e584028909286d2b936e1afed5","sha512":"d07af4309bf8156644d604676eec62cf78128dae1cd1808e865e02bf7302b3dea5b1eda42eecd6e8687c84b85a6a52c07bd45b120b8fe5940d8d80586a2d0fb0","ssdeep":"","tlshash":"0df0e1671c61c4437421c64a33e1de6c54583213d109e969b6de511ccb89bdc88d3a25","first_seen":"2023-03-12T18:04:12Z","last_seen":"2026-04-26T08:08:55.331842Z","times_seen":11976,"resource_available":true,"data":null}},"time_used":1027,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1027,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-29T12:55:12.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 12:55:15 GMT\r\nserver: nginx/1.23.4\r\ncontent-type: text/html\r\ncontent-length: 7790\r\nlast-modified: Mon, 01 Jul 2024 19:35:08 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":22859,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (896)","md5":"e29ce2f906791779e40bc3497d3530e8","sha1":"fdba2bd9e21eb5dd556723e65a8137e49a1cdadb","sha256":"439b95dd7522b888586d9c7d7532f1b47747413e74befdb03210c575846a3349","sha512":"7bcf85fbb6f91930e230b4555d69946608f449b70afc956908dc271a89866017020788623655daba31f7a5efb25e9242bc169ce6002c72cf175c59880f7b30a0","ssdeep":"384:RBixi9iYiZBk/NENfYFeMfwhj7Z56+XTiCBAiMa:RI4s1oFSfYlfwhj7RX2CBdZ","tlshash":"81a26f60a8f62413016350c5baa7ab4f3fa0d607d6064e013bec4be6afd7d97dd07689","first_seen":"2024-08-11T12:47:11Z","last_seen":"2026-03-29T14:20:37.074885Z","times_seen":8,"resource_available":true,"data":null}},"time_used":5380,"timings":{"blocked":1432,"dns":366,"connect":143,"send":0,"wait":2515,"receive":0,"ssl":920},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/js/esc.js","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:16.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /js/esc.js HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 102\r\ncontent-type: application/javascript\r\ndate: Sun, 29 Mar 2026 12:55:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":99,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"894af36ec36119261a35ce05dfa6b1d0","sha1":"b7726e977bd1f28ab0d302a4c7341b13122d033c","sha256":"36c93ecca4ea10ed850a8b04465a4141f6afc135419d644181e63a98da87a376","sha512":"0b97eaa5562bc0ad43af4494416ebf94f72d95873e55e4713818a5e39d08c334499bf13062e28fc08469dc097ed920fc9f824253b97709bf8fa841be31d2b872","ssdeep":"","tlshash":"24b0125e103a282445323a240623c718e521400340436289f6c94391bf710288a1fd0c","first_seen":"2024-06-22T19:59:11Z","last_seen":"2026-04-24T01:23:35.078603Z","times_seen":1182,"resource_available":true,"data":null}},"time_used":3765,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3622,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/images/bg1.png","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:16.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /images/bg1.png HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 82975\r\ncontent-type: image/png\r\ndate: Sun, 29 Mar 2026 12:55:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":82975,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1060 x 900, 8-bit/color RGBA, non-interlaced","md5":"4b59edf47cd6be2ab34ffccb7b1b6fa2","sha1":"7c9aee51611747206b5019c431def5e7ad65e32c","sha256":"83a132d9141372a3c75799bd6194a5752b3db074ef77a9e9a3249ff9fbc38d23","sha512":"a455d49822641b303354da971fff1e90c54a890031d40bdd9020574ae2fd9947c9f0bd37ebff473cc84c15c683a49152c63bf16c3dfa89abbc4aaef1f258ff91","ssdeep":"1536:XTnSoUmpbFWDxrDuW7rHUiEa8D26u6NiWIxu12ri/:LrUWWJiW7rnEJD2cIYSi/","tlshash":"4083f11b8d23d079dc2e49b3443c4a6af7ea67d4d05694b2367510ccfd12a803a79fab","first_seen":"2024-05-01T17:53:53Z","last_seen":"2026-04-24T08:13:04.492259Z","times_seen":1281,"resource_available":false,"data":null}},"time_used":4031,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3614,"receive":417,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/images/re.gif","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:16.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /images/re.gif HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14751\r\ncontent-type: image/gif\r\ndate: Sun, 29 Mar 2026 12:55:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14751,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 193 x 71","md5":"6fcb78e0cd7933a70eea2cf071f82118","sha1":"70364bffd62fe33360abe70ecc7f7c0541b3b54c","sha256":"4b436b0b6a47db85c88f83dc3fe3fd9a96c0a4018b28832165df929dffe0bc86","sha512":"af086b13f6041fed8f9457fd4fea33b3bf4a1ed985a4edaf8e59ad22a772652d83a619d070bee3c81686166717526d5c2ef3097c1c088e4729fb15b09caea961","ssdeep":"384:NiDfi0nwQ3tIzj2nK7xnnw8/8D2gi1jqaAyLrwjWVkvY597Kk/USIZ:NMfiU3mWKVnF06gi1j6+cskvo9W6UH","tlshash":"2c62cf5ed1ad0343fe4c34b726641e6b560cc8261f63a2836a5b35ea27111dc4334e7f","first_seen":"2023-08-02T18:46:50Z","last_seen":"2026-04-25T11:54:41.412075Z","times_seen":12338,"resource_available":false,"data":null}},"time_used":4172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3607,"receive":565,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/w1.html","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:28.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /w1.html HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 29 Mar 2026 12:55:29 GMT\r\nserver: nginx/1.23.4\r\ncontent-type: text/html\r\ncontent-length: 358\r\nlast-modified: Sat, 28 Aug 2021 19:11:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":583,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"51618ac2b7cf5c4937213e965c00f20a","sha1":"7e704e57162ed18743bef9f95e2dea558954751b","sha256":"0b41f69e6564b9c89b1b344744c5b06eb4adc0e584028909286d2b936e1afed5","sha512":"d07af4309bf8156644d604676eec62cf78128dae1cd1808e865e02bf7302b3dea5b1eda42eecd6e8687c84b85a6a52c07bd45b120b8fe5940d8d80586a2d0fb0","ssdeep":"","tlshash":"0df0e1671c61c4437421c64a33e1de6c54583213d109e969b6de511ccb89bdc88d3a25","first_seen":"2023-03-12T18:04:12Z","last_seen":"2026-04-26T08:08:55.331842Z","times_seen":11976,"resource_available":true,"data":null}},"time_used":995,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":995,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/media/eng.mp3","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:20.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /media/eng.mp3 HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 110229\r\ncontent-range: bytes 0-110228/110229\r\ncontent-type: audio/mpeg\r\ndate: Sun, 29 Mar 2026 12:55:20 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":110229,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains:\n- MPEG ADTS, layer III, v2,  48 kbps, 22.05 kHz, Monaural","md5":"a4377c5fd4e6589312346a1108b07132","sha1":"d73499b6f2d05ec302e6a775ee42aceb8d8494ba","sha256":"9fa4f2ad709ff397d792afa42087c38ac2d13ac10ee104e557f594ffbf93a603","sha512":"3f4be0e75c77954ca3f7fec019c8587913e7fb1332b7ddbfd57de929df4e4ff39f8873a19dc4c4e73be23816a4696a138df01b05a9dcb78f3662986df81bc9d8","ssdeep":"3072:HYT6JU/gx58z+zxQWTKMMY4xUPoHalFAMyq:4T6LuyKlhdal+MH","tlshash":"1eb3013bf00810b8b96d12a686ce9926d6471cfc226c4397dc12b602f5bfea2d35f5d4","first_seen":"2024-01-16T03:20:59Z","last_seen":"2026-04-26T01:50:58.747095Z","times_seen":632,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"userstatics.com/get/script.js?referrer=https://smartprinter.buzz.malblocker.com/","fqdn":"userstatics.com","domain":"userstatics.com","tld":"com"},"ip":{"addr":"195.177.94.253","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:21.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"userstatics.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 18:42:22 GMT","end":"Mon, 01 Jun 2026 18:42:21 GMT"},"fingerprint":{"sha1":"18:0A:C0:7A:B2:8A:E2:12:D0:C0:A8:37:4C:3E:33:C4:A8:B0:31:D8","sha256":"A7:A8:54:0B:C5:5D:9D:CE:62:D3:8E:AF:2B:23:40:9A:9F:7A:46:6B:B8:AD:C6:B8:56:81:F1:42:A5:32:7C:14"}}},"request":{"raw":"GET /get/script.js?referrer=https://smartprinter.buzz.malblocker.com/ HTTP/1.1\r\nHost: userstatics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 29 Mar 2026 12:55:21 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 133\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.2.1\r\nAccess-Control-Allow-Origin: https://smartprinter.buzz.malblocker.com\r\nAccess-Control-Allow-Methods: GET, POST\r\nAccess-Control-Allow-Headers: X-Requested-With,content-type\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.2.1","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":133,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"fea7fbf2c619fd4b7716fcaa64070c6c","sha1":"f192732937981a26f526b7c1293a2ae13bc59a22","sha256":"df9690fea031319de38a437cb6d393026c4aae70642ed394c4254ed64f035b26","sha512":"145c293c29dc95f829b71b3e7378fac6a17d3081f9d2e17a986bed2cc5f07f4bc35e791010264c841f02057a64a9f297d4f62335fef59f0c237a541599edb6c3","ssdeep":"","tlshash":"61c09b148f1d87f5203642de75e3c3c8947460e67515d40a644f64f95599ed30ec1d91","first_seen":"2023-11-04T00:48:23Z","last_seen":"2026-04-26T10:00:49.787437Z","times_seen":5074,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":116,"dns":21,"connect":43,"send":0,"wait":139,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/w1.html","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:22.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /w1.html HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 29 Mar 2026 12:55:23 GMT\r\nserver: nginx/1.23.4\r\ncontent-type: text/html\r\ncontent-length: 358\r\nlast-modified: Sat, 28 Aug 2021 19:11:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":583,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"51618ac2b7cf5c4937213e965c00f20a","sha1":"7e704e57162ed18743bef9f95e2dea558954751b","sha256":"0b41f69e6564b9c89b1b344744c5b06eb4adc0e584028909286d2b936e1afed5","sha512":"d07af4309bf8156644d604676eec62cf78128dae1cd1808e865e02bf7302b3dea5b1eda42eecd6e8687c84b85a6a52c07bd45b120b8fe5940d8d80586a2d0fb0","ssdeep":"","tlshash":"0df0e1671c61c4437421c64a33e1de6c54583213d109e969b6de511ccb89bdc88d3a25","first_seen":"2023-03-12T18:04:12Z","last_seen":"2026-04-26T08:08:55.331842Z","times_seen":11976,"resource_available":true,"data":null}},"time_used":879,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":879,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/w3.html","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:23.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /w3.html HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/w3.html","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:25.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /w3.html HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 29 Mar 2026 12:55:26 GMT\r\nserver: nginx/1.23.4\r\ncontent-type: text/html\r\ncontent-length: 358\r\nlast-modified: Sat, 28 Aug 2021 19:11:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":583,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"51618ac2b7cf5c4937213e965c00f20a","sha1":"7e704e57162ed18743bef9f95e2dea558954751b","sha256":"0b41f69e6564b9c89b1b344744c5b06eb4adc0e584028909286d2b936e1afed5","sha512":"d07af4309bf8156644d604676eec62cf78128dae1cd1808e865e02bf7302b3dea5b1eda42eecd6e8687c84b85a6a52c07bd45b120b8fe5940d8d80586a2d0fb0","ssdeep":"","tlshash":"0df0e1671c61c4437421c64a33e1de6c54583213d109e969b6de511ccb89bdc88d3a25","first_seen":"2023-03-12T18:04:12Z","last_seen":"2026-04-26T08:08:55.331842Z","times_seen":11976,"resource_available":true,"data":null}},"time_used":919,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":919,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/css/bootstrap.min.css","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:16.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sun, 29 Mar 2026 12:55:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":220780,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65335)","md5":"5b42276b3039eaf18cc199cb4c8db7b8","sha1":"719956aa52db4c8afdc5c0cfb3cbdead6258b8a6","sha256":"932ea15108928991bcf0c0a46415fc652de5ffc0158c35205357b90c65eeb386","sha512":"ef639578068f795f27dc17598fb84e91a3d2124feec290e4686c8fe16da34b3002f2d7e23b82cc1035a82f7b85a7999c66efbc11e85be06859585c2faecb3af5","ssdeep":"1536:u1tfA98f66e7K5wlP72N9S3I17sYciHKVOpz600I4V9:ytfA98fXpKVOpz600I4V9","tlshash":"5e2482e6f190317d9ca7c1499590befd866fa945db120aaaf003776807cabd30963dcc","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-04-26T10:14:33.323682Z","times_seen":5793,"resource_available":false,"data":null}},"time_used":3627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3627,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/js/main.js","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:16.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 699\r\ncontent-type: application/javascript\r\ndate: Sun, 29 Mar 2026 12:55:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2193,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e0fd124a6e7d3c05c530ff4e76b07464","sha1":"e74b051467d3ac5b3122c27938a3baa2aa65ba9f","sha256":"3616cf46b53ecac41813d66874380a99715b0b31baf1c27c5db0ba320b9369c8","sha512":"bb4032b3159d5198e5ed855eae99318520029310a9972a667dcea3c8b36d14a4623c6d4db9394298f608863611740437bb72a7e07461d2609725f7c4963ccf96","ssdeep":"","tlshash":"ec41dc6a7752206669b3737cebaf5200f516362b02874942babc10d81f76d68e139f6c","first_seen":"2024-06-22T19:59:11Z","last_seen":"2026-04-24T01:23:35.08887Z","times_seen":1184,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/images/bel.png","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:16.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /images/bel.png HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 276\r\ncontent-type: image/png\r\ndate: Sun, 29 Mar 2026 12:55:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 13 x 13, 8-bit colormap, non-interlaced","md5":"7616d96c388301e391653647e1f5f057","sha1":"b1868c8f0f46309a8e26f584ac82000d54c06ecd","sha256":"4c1606563842cce5f1788329d4417ae3618b33c6365c56a7122439b6ab45c977","sha512":"c7e5938d274d9d8b5218cf05f83b9b14cc89d1c9b4a7a18596354c548a84d499bc3818e242edb2f1376a561dec7deba134dd2adaac0283c145da77ca43a8e517","ssdeep":"","tlshash":"93d023d7d1707cd4c4140b5d002545e19a56d40c5453530a841cd4724d434b457d4375","first_seen":"2023-05-23T11:29:58Z","last_seen":"2026-04-24T08:13:04.493065Z","times_seen":4925,"resource_available":false,"data":null}},"time_used":4029,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3611,"receive":418,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/css/font-awesome.min.css","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:16.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /css/font-awesome.min.css HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 6251\r\ncontent-type: text/css\r\ndate: Sun, 29 Mar 2026 12:55:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":27428,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27265)","md5":"fd1609eb97e739683acf23120fd6f6c9","sha1":"19b2e83fe8df09b85e74835c398aefee816bdfcb","sha256":"ce26d1b76dae2f3b5d0ccc8d0ecd88d2edb411101b8a4c5edc4d9aa7008c9b04","sha512":"2183fdcc8aef88b15048e735eb2d588868ae4caad624b4c369f276402188caba9c962065699798aa27bc4c18ae97e16bf8fcf219d762b73726afb1a924babcd2","ssdeep":"384:ci5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8c:3lr+Klk3YlKfwYUf8l8yQ/T","tlshash":"edc230f8e54c01d66731c48bff81b36862baf73dd5814d99f01f690c29d22a522c5bba","first_seen":"2023-12-11T03:59:36Z","last_seen":"2026-04-26T01:50:58.729469Z","times_seen":1270,"resource_available":false,"data":null}},"time_used":3768,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3625,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/images/set.png","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:16.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /images/set.png HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 364\r\ncontent-type: image/png\r\ndate: Sun, 29 Mar 2026 12:55:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced","md5":"e144c3378090087c8ce129a30cb6cb4e","sha1":"59da5466551de941d0215e45c54aa2ceaf436be1","sha256":"b13a03e0db893734298cbe203bf264407636ffe5dab0a141f83c492d0034dd6a","sha512":"3004885b1dcc8c8544024f3c1345b80ab6b50759f290a3545bfa4ed7ea93426e838b7a04556294298bad1c6198431fbde06e999628e45de10119dd1d4fabe32a","ssdeep":"","tlshash":"6ee0c0e6ea2ffd47d4884271725b4202889f0acc031147666b01d97b5067723d6cc121","first_seen":"2023-04-18T09:00:53Z","last_seen":"2026-04-24T08:13:04.436169Z","times_seen":6461,"resource_available":true,"data":null}},"time_used":3761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3617,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/media/beep.mp3","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:20.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /media/beep.mp3 HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8405\r\ncontent-range: bytes 0-8404/8405\r\ncontent-type: audio/mpeg\r\ndate: Sun, 29 Mar 2026 12:55:20 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8405,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 56 kbps, 44.1 kHz, Monaural","md5":"8618fbb0911e3b8fc96725dee8bfd81f","sha1":"1bbcb78922946d0cf18fbf3a9e092e36453eb767","sha256":"0589be7715d2320e559eae6bd26f3528e97450c70293da2e1e8ce45f77f99ab1","sha512":"5446ba0132541be0100f0ce418a4349c2ed6181fd9816d6c30b213e4e773ce6bd979789c422cfaece228b296b79a0f4f36b97bda8117a09f84416662a4513a55","ssdeep":"192:aXnUfcyMlDiVE9UQuKCCy6BAtdHtv8/okoR4X:WUfcVlDiVFKByZtdHwCE","tlshash":"74026cdaba011c6df51b92f863ee4310f49b284baf2dd447f2f616909a7b4c81727312","first_seen":"2023-04-05T08:40:11Z","last_seen":"2026-04-24T16:28:33.887846Z","times_seen":10891,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":434,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/css/tapa.css","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:16.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /css/tapa.css HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 6098\r\ncontent-type: text/css\r\ndate: Sun, 29 Mar 2026 12:55:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19972,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (339), with CRLF line terminators","md5":"1f8d6bab3268d4d2feae857eb742fafc","sha1":"740d80a802dc406497660b91a6e4e93cc1e3b771","sha256":"04e7cab3f04cb7c718c7cb4e038de2e87e274788b00f2c2fe869bb12c29c5762","sha512":"b4b78201a45e3ab27faff74e300503a59871cb9a2543cfbedd480a63cbacd4712a34faf0b584232f0eeded717a07c3c1f58baaa58a8bcf675483cfc5f5893cfb","ssdeep":"192:G5pyua9kzex5XO05bsXxruzG61fMDOe1tFpFabFOlY5x015Vq7r2VrqCDz7frYYi:apyu02rJmQ6gPCIS","tlshash":"e1923f20da023042a237cb787bb15b52fb5510639b4706babfe8a254cfb587d5162fcd","first_seen":"2024-06-22T19:59:11Z","last_seen":"2026-03-29T14:20:37.07543Z","times_seen":16,"resource_available":false,"data":null}},"time_used":3630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3628,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/images/f24.png","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:16.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /images/f24.png HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 837596\r\ncontent-type: image/png\r\ndate: Sun, 29 Mar 2026 12:55:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":837596,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 2782, 8-bit/color RGB, non-interlaced","md5":"5e4ed5e1cb3341e575d44011c36409f1","sha1":"ec381f1d76a53e7398c771ec480a8e953185d4e4","sha256":"ab73c43df3eb40f77ec6d37c19c60ce231e0ea68e812eeda663619e11c4a95cd","sha512":"276d31f05cd85648a9ca9dc76612d3b7b98b6c2847cc61f3f3fb2de0613c271f2f32d7bd29821fd67ee51b5cae9bb9189db18a968a8b8ab08640dda6018ee651","ssdeep":"12288:CTndmEEysWubd076tQJ1PCBPuISZDof39tenhdkq/EVthERA6r0qeIiFJ:9EETWsdUS81sPGDse5JWdJ","tlshash":"a2052386f58e0888ddd04e351b634fb5bbb6b9c5f504926bba6363454fb13cc0c6e829","first_seen":"2023-05-17T11:17:05Z","last_seen":"2026-04-24T01:23:35.089244Z","times_seen":966,"resource_available":false,"data":null}},"time_used":3618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":858,"receive":2760,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/images/mnc.png","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:16.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /images/mnc.png HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 187\r\ncontent-type: image/png\r\ndate: Sun, 29 Mar 2026 12:55:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":187,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 140 x 30, 1-bit colormap, non-interlaced","md5":"271021cfa45940978184be0489841fd3","sha1":"201030af9b1bc5d3c8d453efbfdf89b68d6c1be5","sha256":"c5a324f181af16879b6c4c52b731b23392f2816def159b157c4de620cff1cd41","sha512":"efa6766f88b385f91eb0b3d0298ae16ca461055581e5ac898bc90931388898ba341fe780c0a4433dfa9a106fe408701944e89ff6f75dba7d46aee83d6173c50d","ssdeep":"","tlshash":"a2c022cb0f013a33d11c04a26d9a0c89840f0a4cc28af01bcc4006397c122c2165461e","first_seen":"2023-05-23T11:29:58Z","last_seen":"2026-04-24T08:13:04.480184Z","times_seen":4913,"resource_available":false,"data":null}},"time_used":3761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3618,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/w3","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:20.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /w3 HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 12:55:21 GMT\r\nserver: nginx/1.23.4\r\ncontent-length: 0\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\nx-server-cache: false\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":791,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/w3.html","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:21.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /w3.html HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/js/jquery.min.js","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:16.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Sun, 29 Mar 2026 12:55:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":84817,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32478)","md5":"20c129bedb4a26db02fc0f54d026c3f5","sha1":"093b9d2728788de24a728742070a348b2848573f","sha256":"436ecc90fab5ed1034b68a4a0e924e0132d93d9e7fb59b4fe23018eb7d9242c1","sha512":"1997641a1dba92af7c28fe67c14fc3f89c1e49be14dd8a8903c3c5d4a4aae6161b00bf37d02eda6e8b45f88936c0a7871c1d465036d6f1d18c36ed8d419b78de","ssdeep":"1536:AP1Wk7i6GUHdXXeyQazBu+4HhiO2Id0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrb:K4UdeJiz6UAIJ8pa98Hrb","tlshash":"1183d6d9b2c67062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-12-11T03:59:36Z","last_seen":"2026-04-16T17:29:57.445385Z","times_seen":1693,"resource_available":true,"data":null}},"time_used":3627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3627,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/js/bootstrap.min.js","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:16.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript\r\ndate: Sun, 29 Mar 2026 12:55:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":60044,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (59765)","md5":"02d223393e00c273efdcb1ade8f4f8b1","sha1":"0cc93b8421d89c24a889642428b363cb831de78a","sha256":"79c599dd760cec0c1621a1af49d9a2a49da5d45e1b37d4575bace0a5e0226582","sha512":"339296df3b6e2080a65488634aa5ded35a15d9ba5edb8f203b1aa695c62b13302fc2cecfc37cfa04ad2219baf0bddad4414862dde5e0b71a7923c3c3a3d61f8d","ssdeep":"768:wfAnnayQIk8HVheIE8Dg76TXQI4vPKMEK6viTlCDFm4n6xOp6Pxg3/wCVaAk2:wfUnTcWCw6xJxg7aAz","tlshash":"0343a54a7254787206df747a817b060bb3366c99a50a816cb8699ced2f7cd483277f3c","first_seen":"2023-03-07T01:06:50Z","last_seen":"2026-04-26T08:59:43.96603Z","times_seen":12750,"resource_available":true,"data":null}},"time_used":3626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3626,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/w1.html","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:26.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /w1.html HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/w3.html","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:27.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /w3.html HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 29 Mar 2026 12:55:28 GMT\r\nserver: nginx/1.23.4\r\ncontent-type: text/html\r\ncontent-length: 358\r\nlast-modified: Sat, 28 Aug 2021 19:11:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":583,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"51618ac2b7cf5c4937213e965c00f20a","sha1":"7e704e57162ed18743bef9f95e2dea558954751b","sha256":"0b41f69e6564b9c89b1b344744c5b06eb4adc0e584028909286d2b936e1afed5","sha512":"d07af4309bf8156644d604676eec62cf78128dae1cd1808e865e02bf7302b3dea5b1eda42eecd6e8687c84b85a6a52c07bd45b120b8fe5940d8d80586a2d0fb0","ssdeep":"","tlshash":"0df0e1671c61c4437421c64a33e1de6c54583213d109e969b6de511ccb89bdc88d3a25","first_seen":"2023-03-12T18:04:12Z","last_seen":"2026-04-26T08:08:55.331842Z","times_seen":11976,"resource_available":true,"data":null}},"time_used":1269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1268,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/images/vsc.png","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:16.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /images/vsc.png HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 722\r\ncontent-type: image/png\r\ndate: Sun, 29 Mar 2026 12:55:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":722,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 1-bit colormap, non-interlaced","md5":"42d8f2cc1ae5759c2369f255f36ebc03","sha1":"8e592162eec14e72d0a751d714a641dbece91f6b","sha256":"31c6dbe9d867436244f38566adad57e3870f4c8489c6804280eb564bfac5c1bd","sha512":"4b5bdcec4f3d6901cd4352f81d239ce418b21d8445cd704002d2a59f4ad2dbd15dd6653f65365bd99fadcb6df9187466f30a2543e0456efbb869b3281c8a1e23","ssdeep":"","tlshash":"410188d641718f16d157e0b8f5878165ae150f216c1171434ffb4089465ff735bd83a8","first_seen":"2023-05-23T11:29:58Z","last_seen":"2026-04-24T08:13:04.43504Z","times_seen":4929,"resource_available":false,"data":null}},"time_used":3759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3614,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/images/scn.png","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:16.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /images/scn.png HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 01 Jul 2024 13:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6015\r\ncontent-type: image/png\r\ndate: Sun, 29 Mar 2026 12:55:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6015,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 892 x 40, 8-bit/color RGBA, non-interlaced","md5":"aaa338d0476883524bb1fd0d0212b2ed","sha1":"a84f1a5a4b31c35e4212577a8d09731fe6a43d8b","sha256":"9e3f599d1db72217010598a7411f62b877558b5f023db4754333a32328b8f893","sha512":"3a9c6212c03fb041ecee61ae5f53fe8657bfb395e6c536593066ef2a907f2135f25a6156419adab2b3eb2ed602ad3cc9e69f1b98c81fbe49d548d8ebb87346eb","ssdeep":"96:MSDZ/I09Da01l+gmkyTt6Hk8nTb0BYUmAzQ5XdtYRskB3r6EEfOT7Wlfjh9SQ3y7:MSDS0tKg9E05TfUmAz0tYKarvNfur53s","tlshash":"1fc19e37e991e6af7dde3980cadd4186eb31333d456a2334114273ed986ad028b26077","first_seen":"2024-05-01T17:53:53Z","last_seen":"2026-04-24T08:13:04.49002Z","times_seen":1166,"resource_available":false,"data":null}},"time_used":3877,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3615,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}},{"url":{"schema":"https","addr":"smartprinter.buzz.malblocker.com/w3.html","fqdn":"smartprinter.buzz.malblocker.com","domain":"malblocker.com","tld":"com"},"ip":{"addr":"216.10.241.228","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smartprinter.buzz.malblocker.com/","date":"2026-03-29T12:55:29.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.buzz.malblocker.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 18:35:54 GMT","end":"Wed, 27 May 2026 18:35:53 GMT"},"fingerprint":{"sha1":"43:1D:9E:98:49:7F:1F:27:F3:8C:42:DB:5B:D2:98:95:60:AA:6F:DB","sha256":"7C:EB:E2:13:50:33:C8:D3:57:E2:EE:B7:12:58:A4:3F:28:29:C7:42:C5:1E:F7:22:CA:FE:AF:34:03:91:4A:DD"}}},"request":{"raw":"GET /w3.html HTTP/1.1\r\nHost: smartprinter.buzz.malblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smartprinter.buzz.malblocker.com/\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 29 Mar 2026 12:55:31 GMT\r\nserver: nginx/1.23.4\r\ncontent-type: text/html\r\ncontent-length: 358\r\nlast-modified: Sat, 28 Aug 2021 19:11:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.23.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":583,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"51618ac2b7cf5c4937213e965c00f20a","sha1":"7e704e57162ed18743bef9f95e2dea558954751b","sha256":"0b41f69e6564b9c89b1b344744c5b06eb4adc0e584028909286d2b936e1afed5","sha512":"d07af4309bf8156644d604676eec62cf78128dae1cd1808e865e02bf7302b3dea5b1eda42eecd6e8687c84b85a6a52c07bd45b120b8fe5940d8d80586a2d0fb0","ssdeep":"","tlshash":"0df0e1671c61c4437421c64a33e1de6c54583213d109e969b6de511ccb89bdc88d3a25","first_seen":"2023-03-12T18:04:12Z","last_seen":"2026-04-26T08:08:55.331842Z","times_seen":11976,"resource_available":true,"data":null}},"time_used":1837,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1837,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-29","alert":"Phishing Block","trigger":"smartprinter.buzz.malblocker.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"smartprinter.buzz.malblocker.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fake AntiVirus / Security software","verdict":"scam","severity":"medium","comment":"Asset commenly seen with fake AntiVirus fraud","tags":["fake_software","scam"],"meta":null}]}}]}