hxxps://busz[.]io/clientsafe.jsURL
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 20 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Fingerprint Heists: How your browser fingerprint can be stolen and used by fraudsters“…eat actor control, in the above case is hosted on hxxps://busz.io/j9z3GfPd?pr=1&sub_id_2={victim_domain}, which redirects to hxxps://busz[.]io/clientsafe.js;”
Indicators reported together
named in the same reports- hxxps://busz[.]io/j9z3GfPd?pr=1&sub_id_2=in 1 report
- busz[.]ioin 1 report
- hxxps://customfingerprints.bablosoft[.]com/savein 1 report
- customfingerprints.bablosoft[.]comin 1 report
- browserleaks[.]comin 1 report
- hxxps://busz[.]io/j9z3GfPd?pr=1in 1 report
- hxxps://screamedjungle[.]com/mjzNTg?pr=1in 1 report
- screamedjungle[.]comin 1 report
- hxxps://screamedjungle[.]com/clientsafe.jsin 1 report
- dcc1122bcf60d91a…f4647b2daecain 1 report
Copy these 10 indicators · defanged
Also named with it: CVE-2024-34102, CVE-2024-20720
Thanks — we review every report.