Report - app14.buzz.app13.buzz/

Report Overview

Submitted URL
app14.buzz.app13.buzz/
IP
186.2.171.40
ASN
#59692 IQWeb FZ-LLC
Submitted
2024-04-17 03:40:46
Access
public
Website Title
Mellat Bank
Final URL
app14.buzz.app13.buzz/webview/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
26

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
app14.buzz.app13.buzz	unknown	2024-04-15	2024-04-16	2024-04-17	6.6 kB	1.4 MB	186.2.171.40

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	app14.buzz.app13.buzz/	Bank Mellat
2024-04-16	medium	app14.buzz.app13.buzz/	Bank Mellat
2024-04-16	medium	app14.buzz.app13.buzz/	Bank Mellat
2024-04-16	medium	app14.buzz.app13.buzz/	Bank Mellat
2024-04-16	medium	app14.buzz.app13.buzz/	Bank Mellat
2024-04-16	medium	app14.buzz.app13.buzz/	Bank Mellat
2024-04-16	medium	app14.buzz.app13.buzz/	Bank Mellat
2024-04-16	medium	app14.buzz.app13.buzz/	Bank Mellat
2024-04-16	medium	app14.buzz.app13.buzz/	Bank Mellat
2024-04-16	medium	app14.buzz.app13.buzz/	Bank Mellat
2024-04-16	medium	app14.buzz.app13.buzz/	Bank Mellat
2024-04-16	medium	app14.buzz.app13.buzz/	Bank Mellat
2024-04-16	medium	app14.buzz.app13.buzz/	Bank Mellat

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	app14.buzz.app13.buzz/webview/js/jquery-3.7.0.min.js	88 kB	2023-06-09	2024-04-30
Pretty URL app14.buzz.app13.buzz/webview/js/jquery-3.7.0.min.js IP 186.2.171.40 ASN #59692 IQWeb FZ-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-09 23:20:42 Last Seen2024-04-30 02:02:35 Times Seen628 Hash ed4e85ddc6e188c8490191794776f22e 83b9249bbbcd563eef7546291d0407f0e70166ce 8f764efbb2cdb303e3019325d811225ead27d656f8b40390de427db1415dc56a Loading...

	app14.buzz.app13.buzz/webview/	12 kB	2023-11-22	2024-04-17
Pretty URL app14.buzz.app13.buzz/webview/ IP 186.2.171.40 ASN #59692 IQWeb FZ-LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-22 02:33:11 Last Seen2024-04-17 06:24:51 Times Seen46 Hash 191f7262aadda479116aa6589f098185 52f014e0d9dd333e540e77e723188a58c727cf2b 78c250f28ce655f2153bea22c8936338fa8eab9d23ec9349ef5d91e4172cfba3 Loading...

	unknown	41 B	2023-10-22	2024-04-17
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-10-22 02:44:28 Last Seen2024-04-17 06:24:51 Times Seen48 Hash 1526e248eea917480d2c31b785652a7e 76de0ab7dc8d1680e6a2046d6eb56cbb49326513 b92c18f0a7e152170cbdba36650a77eb71d0cd5428cb42ecee5357ee4cdcd595 Loading...

HTTP Transactions (13)

URL IP Response Size

app14.buzz.app13.buzz/webview/css/main2.css

186.2.171.40

200 OK

24 kB

URL GET HTTP/2
app14.buzz.app13.buzz/webview/css/main2.css
IP
186.2.171.40:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://app14.buzz.app13.buzz/webview/
Certificate
IssuerLet's Encrypt
Subjectapp14.buzz.app13.buzz
Fingerprint9A:8C:F0:A5:AC:16:6B:DF:E7:4D:2E:EC:C9:DF:5E:17:2A:E7:D9:A6
ValidityTue, 16 Apr 2024 17:19:22 GMT - Mon, 15 Jul 2024 17:19:21 GMT

File type
ASCII text, with very long lines (615), with CRLF line terminators
Size
24 kB (24101 bytes)
Hash
d486bf35b88329e37c5de555f50699b4
4ec9498eafba4b255be277cb09ebbb69d9bb2615
defda7cefcf0f042d11a19b15fcf54c936813b36072883e2f0f6747ee1bfd435

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Bank Mellat

HTTP Headers

GET /webview/css/main2.css HTTP/1.1
Host: app14.buzz.app13.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app14.buzz.app13.buzz/webview/
Cookie: __ddg1_=LpDxZ6lzWG6xNBn3afIo
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 16 Apr 2024 20:05:00 GMT
last-modified: Tue, 18 Jul 2023 01:28:24 GMT
accept-ranges: bytes
content-type: text/css
content-encoding: br
vary: Accept-Encoding
age: 27321
content-length: 24101
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

app14.buzz.app13.buzz/webview/css/style.css

186.2.171.40

200 OK

4.9 kB

URL GET HTTP/2
app14.buzz.app13.buzz/webview/css/style.css
IP
186.2.171.40:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://app14.buzz.app13.buzz/webview/
Certificate
IssuerLet's Encrypt
Subjectapp14.buzz.app13.buzz
Fingerprint9A:8C:F0:A5:AC:16:6B:DF:E7:4D:2E:EC:C9:DF:5E:17:2A:E7:D9:A6
ValidityTue, 16 Apr 2024 17:19:22 GMT - Mon, 15 Jul 2024 17:19:21 GMT

File type
ASCII text, with CRLF line terminators
Size
4.9 kB (4864 bytes)
Hash
843d770afb4c8a9782e08d5c652e9f63
d6726acd160922c5b384f4cbd3fb70a273addac8
7dd37c858df68100eb273a485ca89636ee0e0ae7e0713d82c519137f602e2ec5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Bank Mellat

HTTP Headers

GET /webview/css/style.css HTTP/1.1
Host: app14.buzz.app13.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app14.buzz.app13.buzz/webview/
Cookie: __ddg1_=LpDxZ6lzWG6xNBn3afIo
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 17 Apr 2024 00:02:23 GMT
last-modified: Mon, 07 Aug 2023 06:41:52 GMT
accept-ranges: bytes
content-type: text/css
content-encoding: br
vary: Accept-Encoding
age: 13078
ddg-cache-status: HIT,MISS
content-length: 4864
X-Firefox-Spdy: h2

app14.buzz.app13.buzz/webview/css/animate.css

186.2.171.40

200 OK

5.9 kB

URL GET HTTP/2
app14.buzz.app13.buzz/webview/css/animate.css
IP
186.2.171.40:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://app14.buzz.app13.buzz/webview/
Certificate
IssuerLet's Encrypt
Subjectapp14.buzz.app13.buzz
Fingerprint9A:8C:F0:A5:AC:16:6B:DF:E7:4D:2E:EC:C9:DF:5E:17:2A:E7:D9:A6
ValidityTue, 16 Apr 2024 17:19:22 GMT - Mon, 15 Jul 2024 17:19:21 GMT

File type
ASCII text
Size
5.9 kB (5935 bytes)
Hash
cf2741a3a7ea8427ade651533a54ef1b
afcaf144854f4916f4cc4ad17d196bca1aa66bc8
c1b6f9ed1effff87233740ce612ed3cd3fbd3cb34c0863373d820fde1b2c8d8f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Bank Mellat

HTTP Headers

GET /webview/css/animate.css HTTP/1.1
Host: app14.buzz.app13.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app14.buzz.app13.buzz/webview/
Cookie: __ddg1_=LpDxZ6lzWG6xNBn3afIo
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 16 Apr 2024 20:05:00 GMT
last-modified: Mon, 17 Jul 2023 22:18:42 GMT
accept-ranges: bytes
content-type: text/css
content-encoding: br
vary: Accept-Encoding
age: 27321
content-length: 5935
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

app14.buzz.app13.buzz/webview/js/jquery-3.7.0.min.js

186.2.171.40

200 OK

30 kB

URL GET HTTP/2
app14.buzz.app13.buzz/webview/js/jquery-3.7.0.min.js
IP
186.2.171.40:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://app14.buzz.app13.buzz/webview/
Certificate
IssuerLet's Encrypt
Subjectapp14.buzz.app13.buzz
Fingerprint9A:8C:F0:A5:AC:16:6B:DF:E7:4D:2E:EC:C9:DF:5E:17:2A:E7:D9:A6
ValidityTue, 16 Apr 2024 17:19:22 GMT - Mon, 15 Jul 2024 17:19:21 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
30 kB (30495 bytes)
Hash
ed4e85ddc6e188c8490191794776f22e
83b9249bbbcd563eef7546291d0407f0e70166ce
8f764efbb2cdb303e3019325d811225ead27d656f8b40390de427db1415dc56a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Bank Mellat

HTTP Headers

GET /webview/js/jquery-3.7.0.min.js HTTP/1.1
Host: app14.buzz.app13.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app14.buzz.app13.buzz/webview/
Cookie: __ddg1_=LpDxZ6lzWG6xNBn3afIo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 17 Apr 2024 00:13:46 GMT
last-modified: Mon, 07 Aug 2023 05:56:23 GMT
accept-ranges: bytes
content-type: text/javascript
content-encoding: gzip
vary: Accept-Encoding
age: 12395
ddg-cache-status: HIT,MISS
content-length: 30495
X-Firefox-Spdy: h2

app14.buzz.app13.buzz/webview/css/main.css

186.2.171.40

200 OK

21 kB

URL GET HTTP/2
app14.buzz.app13.buzz/webview/css/main.css
IP
186.2.171.40:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://app14.buzz.app13.buzz/webview/
Certificate
IssuerLet's Encrypt
Subjectapp14.buzz.app13.buzz
Fingerprint9A:8C:F0:A5:AC:16:6B:DF:E7:4D:2E:EC:C9:DF:5E:17:2A:E7:D9:A6
ValidityTue, 16 Apr 2024 17:19:22 GMT - Mon, 15 Jul 2024 17:19:21 GMT

File type
ASCII text, with very long lines (11038)
Size
21 kB (20665 bytes)
Hash
c1e38b81b0a24a6b47a43bc9771334a7
695976b1a024de801fe1433aa7dded6c60124398
eb4a3f5ad74a15e159e3ab7244b51d846f3dfd7bb5eae106a10a45528c267ada

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Bank Mellat

HTTP Headers

GET /webview/css/main.css HTTP/1.1
Host: app14.buzz.app13.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app14.buzz.app13.buzz/webview/
Cookie: __ddg1_=LpDxZ6lzWG6xNBn3afIo
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 17 Apr 2024 00:02:23 GMT
last-modified: Mon, 07 Aug 2023 06:02:08 GMT
accept-ranges: bytes
content-type: text/css
content-encoding: br
vary: Accept-Encoding
age: 13078
ddg-cache-status: HIT,MISS
content-length: 20665
X-Firefox-Spdy: h2

app14.buzz.app13.buzz/webview/media/logo.png

186.2.171.40

200 OK

12 kB

URL GET HTTP/2
app14.buzz.app13.buzz/webview/media/logo.png
IP
186.2.171.40:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://app14.buzz.app13.buzz/webview/
Certificate
IssuerLet's Encrypt
Subjectapp14.buzz.app13.buzz
Fingerprint9A:8C:F0:A5:AC:16:6B:DF:E7:4D:2E:EC:C9:DF:5E:17:2A:E7:D9:A6
ValidityTue, 16 Apr 2024 17:19:22 GMT - Mon, 15 Jul 2024 17:19:21 GMT

File type
PNG image data, 250 x 177, 8-bit/color RGBA, non-interlaced
Size
12 kB (11738 bytes)
Hash
937760de448f26ff51db5ce53ab78f95
905a316a06f5f05406f9890f371499bde76bf681
2140e8257715b4997aa86d16ea9033f7c3b48e9df0e09062582f4104cd3f789c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Bank Mellat

HTTP Headers

GET /webview/media/logo.png HTTP/1.1
Host: app14.buzz.app13.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app14.buzz.app13.buzz/webview/
Cookie: __ddg1_=LpDxZ6lzWG6xNBn3afIo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 16 Apr 2024 20:05:00 GMT
last-modified: Tue, 18 Jul 2023 02:48:20 GMT
accept-ranges: bytes
content-length: 11738
content-type: image/png
age: 27321
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

app14.buzz.app13.buzz/

186.2.171.40

302 Found

608 kB

URL User Request GET HTTP/2
app14.buzz.app13.buzz/
IP
186.2.171.40:443
ASN
#59692 IQWeb FZ-LLC

Certificate
IssuerLet's Encrypt
Subjectapp14.buzz.app13.buzz
Fingerprint9A:8C:F0:A5:AC:16:6B:DF:E7:4D:2E:EC:C9:DF:5E:17:2A:E7:D9:A6
ValidityTue, 16 Apr 2024 17:19:22 GMT - Mon, 15 Jul 2024 17:19:21 GMT

File type
PNG image data, 2612 x 2400, 8-bit colormap, non-interlaced
Size
608 kB (608415 bytes)
Hash
f392111b73a4892ff31a779839a0911d
abaf20a09d8b95d075dec838a0dc88319e80a501
d6c9e8ad0db0155278850f60fcc7adff6b036b6f102fac9362b37aa7d8719f70

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Bank Mellat

HTTP Headers

GET / HTTP/1.1
Host: app14.buzz.app13.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
set-cookie: __ddg1_=LpDxZ6lzWG6xNBn3afIo; Domain=.app13.buzz; HttpOnly; Path=/; Expires=Thu, 17-Apr-2025 03:40:21 GMT
date: Wed, 17 Apr 2024 03:40:21 GMT
location: ./webview
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
X-Firefox-Spdy: h2

app14.buzz.app13.buzz/webview/media/backimg.svg

186.2.171.40

200 OK

1.0 kB

URL GET HTTP/2
app14.buzz.app13.buzz/webview/media/backimg.svg
IP
186.2.171.40:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://app14.buzz.app13.buzz/webview/
Certificate
IssuerLet's Encrypt
Subjectapp14.buzz.app13.buzz
Fingerprint9A:8C:F0:A5:AC:16:6B:DF:E7:4D:2E:EC:C9:DF:5E:17:2A:E7:D9:A6
ValidityTue, 16 Apr 2024 17:19:22 GMT - Mon, 15 Jul 2024 17:19:21 GMT

File type
SVG Scalable Vector Graphics image
Size
1.0 kB (1006 bytes)
Hash
ccd4aa39c19063cb07d06daa62874ff9
4deff38b5875ea55729aa5e002059c9b68af4763
c917b66b1f26c24730dbd3de5cfef604a46cc47b4be6c0d036a185e188e0bcf6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Bank Mellat

HTTP Headers

GET /webview/media/backimg.svg HTTP/1.1
Host: app14.buzz.app13.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app14.buzz.app13.buzz/webview/css/main.css
Cookie: __ddg1_=LpDxZ6lzWG6xNBn3afIo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 16 Apr 2024 20:05:01 GMT
last-modified: Tue, 18 Jul 2023 01:19:44 GMT
accept-ranges: bytes
content-type: image/svg+xml
content-encoding: br
vary: Accept-Encoding
age: 27320
content-length: 1006
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2

app14.buzz.app13.buzz/webview/fonts/weblight.woff2

186.2.171.40

200 OK

29 kB

URL GET HTTP/2
app14.buzz.app13.buzz/webview/fonts/weblight.woff2
IP
186.2.171.40:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://app14.buzz.app13.buzz/webview/
Certificate
IssuerLet's Encrypt
Subjectapp14.buzz.app13.buzz
Fingerprint9A:8C:F0:A5:AC:16:6B:DF:E7:4D:2E:EC:C9:DF:5E:17:2A:E7:D9:A6
ValidityTue, 16 Apr 2024 17:19:22 GMT - Mon, 15 Jul 2024 17:19:21 GMT

File type
Web Open Font Format (Version 2), TrueType, length 29284, version 1.0
Size
29 kB (29284 bytes)
Hash
eb5adaac0d814e1e8e5cbd75efb9db3e
86437711b342274a5f43ba41870b38eb6205fb97
e3822f2d078338746add72d0f2a1b2725df116b9daa09c40cf3b970742893713

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Bank Mellat

HTTP Headers

GET /webview/fonts/weblight.woff2 HTTP/1.1
Host: app14.buzz.app13.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app14.buzz.app13.buzz/webview/css/style.css
Cookie: __ddg1_=LpDxZ6lzWG6xNBn3afIo
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 17 Apr 2024 03:40:21 GMT
last-modified: Mon, 17 Jul 2023 09:32:44 GMT
accept-ranges: bytes
content-type: font/woff2
content-encoding: gzip
vary: Accept-Encoding
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

app14.buzz.app13.buzz/webview

186.2.171.40

301 Moved Permanently

33 kB

URL User Request GET HTTP/2
app14.buzz.app13.buzz/webview
IP
186.2.171.40:443
ASN
#59692 IQWeb FZ-LLC

Certificate
IssuerLet's Encrypt
Subjectapp14.buzz.app13.buzz
Fingerprint9A:8C:F0:A5:AC:16:6B:DF:E7:4D:2E:EC:C9:DF:5E:17:2A:E7:D9:A6
ValidityTue, 16 Apr 2024 17:19:22 GMT - Mon, 15 Jul 2024 17:19:21 GMT

File type

Size
33 kB (33219 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Bank Mellat

HTTP Headers

GET /webview HTTP/1.1
Host: app14.buzz.app13.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=LpDxZ6lzWG6xNBn3afIo
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 17 Apr 2024 03:40:21 GMT
location: https://app14.buzz.app13.buzz/webview/
content-type: text/html; charset=iso-8859-1
content-encoding: br
vary: Accept-Encoding
X-Firefox-Spdy: h2

app14.buzz.app13.buzz/webview/media/nfc.png

186.2.171.40

200 OK

608 kB

URL GET HTTP/2
app14.buzz.app13.buzz/webview/media/nfc.png
IP
186.2.171.40:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://app14.buzz.app13.buzz/webview/
Certificate
IssuerLet's Encrypt
Subjectapp14.buzz.app13.buzz
Fingerprint9A:8C:F0:A5:AC:16:6B:DF:E7:4D:2E:EC:C9:DF:5E:17:2A:E7:D9:A6
ValidityTue, 16 Apr 2024 17:19:22 GMT - Mon, 15 Jul 2024 17:19:21 GMT

File type
PNG image data, 2612 x 2400, 8-bit colormap, non-interlaced
Size
608 kB (608415 bytes)
Hash
f392111b73a4892ff31a779839a0911d
abaf20a09d8b95d075dec838a0dc88319e80a501
d6c9e8ad0db0155278850f60fcc7adff6b036b6f102fac9362b37aa7d8719f70

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Bank Mellat

HTTP Headers

GET /webview/media/nfc.png HTTP/1.1
Host: app14.buzz.app13.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app14.buzz.app13.buzz/webview/
Cookie: __ddg1_=LpDxZ6lzWG6xNBn3afIo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 17 Apr 2024 00:02:23 GMT
last-modified: Wed, 02 Aug 2023 17:13:32 GMT
accept-ranges: bytes
content-length: 608415
content-type: image/png
age: 13078
ddg-cache-status: HIT,MISS
X-Firefox-Spdy: h2

app14.buzz.app13.buzz/webview/

186.2.171.40

200 OK

33 kB

URL User Request GET HTTP/2
app14.buzz.app13.buzz/webview/
IP
186.2.171.40:443
ASN
#59692 IQWeb FZ-LLC

Certificate
IssuerLet's Encrypt
Subjectapp14.buzz.app13.buzz
Fingerprint9A:8C:F0:A5:AC:16:6B:DF:E7:4D:2E:EC:C9:DF:5E:17:2A:E7:D9:A6
ValidityTue, 16 Apr 2024 17:19:22 GMT - Mon, 15 Jul 2024 17:19:21 GMT

File type

Size
33 kB (33219 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Bank Mellat

HTTP Headers

GET /webview/ HTTP/1.1
Host: app14.buzz.app13.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __ddg1_=LpDxZ6lzWG6xNBn3afIo
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 17 Apr 2024 03:40:21 GMT
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
X-Firefox-Spdy: h2

app14.buzz.app13.buzz/favicon.ico

186.2.171.40

404 Not Found

315 B

URL GET HTTP/2
app14.buzz.app13.buzz/favicon.ico
IP
186.2.171.40:443
ASN
#59692 IQWeb FZ-LLC

Requested by
https://app14.buzz.app13.buzz/webview/
Certificate
IssuerLet's Encrypt
Subjectapp14.buzz.app13.buzz
Fingerprint9A:8C:F0:A5:AC:16:6B:DF:E7:4D:2E:EC:C9:DF:5E:17:2A:E7:D9:A6
ValidityTue, 16 Apr 2024 17:19:22 GMT - Mon, 15 Jul 2024 17:19:21 GMT

File type
HTML document, ASCII text, with very long lines (326), with no line terminators
Size
315 B (315 bytes)
Hash
97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Bank Mellat

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: app14.buzz.app13.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app14.buzz.app13.buzz/webview/
Cookie: __ddg1_=LpDxZ6lzWG6xNBn3afIo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 17 Apr 2024 03:40:22 GMT
content-type: text/html; charset=iso-8859-1
content-encoding: br
vary: Accept-Encoding
age: 2
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (13)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate