Report - media1.xmoneyx.buzz

Report Overview

Visitedpublic

2025-03-01 08:54:25

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
media1.xmoneyx.buzz	unknown	2024-04-03	2025-03-01	2025-03-01	763 B	4.3 kB	172.67.142.68

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-03-01 08:53:55	medium	Client IP	172.67.142.68	ET INFO HTTP Request to a *.buzz domain
2025-03-01 08:53:55	medium	Client IP	172.67.142.68	ET INFO HTTP Request to a *.buzz domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

GET media1.xmoneyx.buzz/

172.67.142.68

404 Not Found

29 B

URL User Request GET HTTP

media1.xmoneyx.buzz/

IP / ASN

172.67.142.68

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeUnicode text, UTF-8 text, with no line terminators

First Seen2023-04-05

Last Seen2025-07-01

Times Seen5384

Size29 B (29 bytes)

MD5ecaa88f7fa0bf610a5a26cf545dcd3aa

SHA157218c316b6921e2cd61027a2387edc31a2d9471

SHA256f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5

Detections

Analyzer	Verdict	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

GET / HTTP/1.1
Host: media1.xmoneyx.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Sat, 01 Mar 2025 08:53:55 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.2.12
Cache-Control: no-store
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lpaFDdm8LuazoDtaVxYOT86rzD50MAHeJ%2F5YSAYIoLs4jjLPCuVr0QOkYfYTm5p7sMtTBKWzx6i3deMSTcrlrBfy%2Bksr%2BVrT524YRtzY7dBPVairBTJqrdOQUtATgwKT2xLLphiu"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 91976d3c0a2256a9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=456&min_rtt=456&rtt_var=228&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=404&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

GET media1.xmoneyx.buzz/favicon.ico

172.67.142.68

200 OK

2.5 kB

URL GET HTTP

media1.xmoneyx.buzz/favicon.ico

IP / ASN

172.67.142.68

#13335 CLOUDFLARENET

Requested byhttp://media1.xmoneyx.buzz/

Resource Info

File typeMS Windows icon resource - 1 icon, 48x48, 32 bits/pixel

First Seen2024-10-11

Last Seen2025-08-05

Times Seen64

Size2.5 kB (2478 bytes)

MD53fac7fe75283c981d673eb6b06fd4aef

SHA1563d79ee4e8f58174548fed59f2ed244aa376fbd

SHA25697c2c71a8e4ddb2ce7eff4c0115b5b592cda86e069c28d107a46dd1c1f5d5ea8

Detections

Analyzer	Verdict	Alert
suricata	medium	ET INFO HTTP Request to a *.buzz domain

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: media1.xmoneyx.buzz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://media1.xmoneyx.buzz/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 01 Mar 2025 08:53:55 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 29 Nov 2024 20:52:42 GMT
ETag: W/"25be-62813614a1a80"
Age: 747
Cache-Control: max-age=14400
cf-cache-status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yMl20Fr2lOHKIoEEirjuy3m0DoF28uqsTlVWICmvQ2HC56VuIOL63LrsfXNEdfpVJKrTiBoMK5MJ%2Bl6LUcDW5blJwGiT1sZlInnFycf2W%2BiX%2BPhVS9v1GnIidSZIcDqLE6TAU%2FX5"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 91976d3d6baa56a9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=468&min_rtt=456&rtt_var=149&sent=4&recv=6&lost=0&retrans=0&sent_bytes=899&recv_bytes=767&delivery_rate=5227436&cwnd=251&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"