Report - maujadikaya01.buzz/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=26197496

Report Overview

Visited public
2024-12-24 06:52:18
Tags
URL
maujadikaya01.buzz/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=26197496
Finishing URL
about:neterror?e=nssFailure2&u=https%3A//lawan777empire.com/register%3Fwsidchk%3D26197496&c=UTF-8&d=%20
IP / ASN
103.21.221.4
#59253 LEASEWEB SINGAPORE PTE. LTD.
Title
Problem loading page

Detections

urlquery

0

Network Intrusion Detection

3

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
maujadikaya01.buzz	unknown	2024-08-02	2024-12-24	2024-12-24	531 B	1.2 kB	103.21.221.4
lawan777empire.com	unknown	unknown	No data	No data	414 B	796 B	185.148.104.116

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-12-24 06:51:54	medium	185.148.104.116	Client IP	ET INFO TLS Handshake Failure
2024-12-24 06:51:54	medium	185.148.104.116	Client IP	ET INFO TLS Handshake Failure
2024-12-24 06:51:54	medium	185.148.104.116	Client IP	ET INFO TLS Handshake Failure

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	about:neterror?e=nssFailure2&u=https%3A//lawan777empire.com/register%3Fwsidchk%3D26197496&c=UTF-8&d=%20	ScriptElement	0 B	0001-01-01	2025-05-08
Pretty URL about:neterror?e=nssFailure2&u=https%3A//lawan777empire.com/register%3Fwsidchk%3D26197496&c=UTF-8&d=%20 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-08 03:45 Times Seen4629215 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (2)

	URL	IP	Response	Size
	maujadikaya01.buzz/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=26197496	103.21.221.4	302 Found	771 B
URL User Request GET HTTP/2 maujadikaya01.buzz/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=26197496 IP 103.21.221.4:443 ASN #59253 Leaseweb Asia Pacific pte. ltd. Certificate IssuerLet's Encrypt Subject.maujadikaya01.buzz Fingerprint90:D6:35:D2:D8:94:12:98:06:C4:3F:F6:8D:17:26:DF:22:10:7C:83 ValidityTue, 03 Dec 2024 01:13:24 GMT - Mon, 03 Mar 2025 01:13:23 GMT File type HTML document, ASCII text, with CRLF, LF line terminators Size 771 B (771 bytes) Hash 1597c10f533a5853e70df48c1f50937c 18d401b292522117086c3dbdc1940444aa1cc4da b5ffafff1266d67b31cc80784d26d1f87b06773c1d50f490b84d10caabc15856 HTTP Headers GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=26197496 HTTP/1.1 Host: maujadikaya01.buzz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 302 Found content-type: text/html content-length: 771 date: Tue, 24 Dec 2024 06:51:54 GMT server: LiteSpeed cache-control: no-cache, no-store, must-revalidate, max-age=0 location: https://lawan777empire.com/register?wsidchk=26197496 alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" X-Firefox-Spdy: h2`

	lawan777empire.com/register?wsidchk=26197496	185.148.104.116	301 Moved Permanently	167 B
URL User Request GET HTTP/1.1 lawan777empire.com/register?wsidchk=26197496 IP 185.148.104.116:80 ASN #209242 Cloudflare London, LLC File type HTML document, ASCII text, with CRLF line terminators Size 167 B (167 bytes) Hash 0104c301c5e02bd6148b8703d19b3a73 7436e0b4b1f8c222c38069890b75fa2baf9ca620 446a6087825fa73eadb045e5a2e9e2adf7df241b571228187728191d961dda1f HTTP Headers `GET /register?wsidchk=26197496 HTTP/1.1 Host: lawan777empire.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 301 Moved Permanently Date: Tue, 24 Dec 2024 06:51:54 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Tue, 24 Dec 2024 07:51:54 GMT Location: https://lawan777empire.com/register?wsidchk=26197496 Set-Cookie: __cf_bm=hsHNXy8Im.jUCDaBlYq6173sfFG0mqV8UAnHSDpbOBQ-1735023114-1.0.1.1-_ZzNBr1.Dgvzq1teMb8DWWcDZEO8gNfSEo1Dfyt_1ibj1Nsb3sz1e5t82_tr.Vz_wHXrepBxoc8zn5lclkFRjw; path=/; expires=Tue, 24-Dec-24 07:21:54 GMT; domain=.lawan777empire.com; HttpOnly Vary: Accept-Encoding Server: cloudflare CF-RAY: 8f6eaa62e8339986-CPH alt-svc: h3=":443"; ma=86400