IOC Report
ELECTRONIC RECEIPT_Xfab.html

loading gif

Files

File Path
Type
Category
Malicious
ELECTRONIC RECEIPT_Xfab.html
HTML document, ASCII text, with very long lines (324), with CRLF line terminators
initial sample
malicious
Chrome Cache Entry: 73
ASCII text, with very long lines (65447)
downloaded
Chrome Cache Entry: 74
HTML document, ASCII text
downloaded
Chrome Cache Entry: 75
PNG image data, 54 x 54, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 76
Unicode text, UTF-8 text, with very long lines (65306)
downloaded
Chrome Cache Entry: 77
PNG image data, 18 x 17, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 79
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 80
HTML document, ASCII text, with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 82
HTML document, ASCII text
downloaded
Chrome Cache Entry: 84
ASCII text, with very long lines (47992), with no line terminators
downloaded
Chrome Cache Entry: 86
ASCII text, with very long lines (42526)
downloaded
Chrome Cache Entry: 92
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 93
HTML document, ASCII text
downloaded
Chrome Cache Entry: 95
ASCII text, with very long lines (24050)
downloaded
There are 4 hidden files, click here to show them.

URLs

Name
IP
Malicious
file:///C:/Users/user/Desktop/ELECTRONIC%20RECEIPT_Xfab.html
malicious
https://tutors.picassoschools.ac.bw/404.php
malicious
https://cahgscade.ru.net/a0zoZP/index.html
malicious
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/da3ds/0x4AAAAAAAaukL4AS3nPApw3/auto/normal
https://cahgscade.ru.net/a0zoZP/index.html#YYmF1ZG9pbi5kZS1idXNzeUB4ZmFiLmNvbQ==

Domains

Name
IP
Malicious
cahgscade.ru.net
188.114.96.3
malicious
tutors.picassoschools.ac.bw
50.87.20.66
malicious
a.nel.cloudflare.com
35.190.80.1
code.jquery.com
151.101.2.137
cdnjs.cloudflare.com
104.17.24.14
challenges.cloudflare.com
104.17.2.184
www.google.com
142.250.181.228
href.li
192.0.78.27
cdn.jsdelivr.net
unknown

IPs

IP
Domain
Country
Malicious
50.87.20.66
tutors.picassoschools.ac.bw
United States
malicious
188.114.96.3
cahgscade.ru.net
European Union
malicious
104.17.24.14
cdnjs.cloudflare.com
United States
1.1.1.1
unknown
Australia
142.250.74.206
unknown
United States
104.18.187.31
unknown
United States
74.125.71.84
unknown
United States
192.168.2.16
unknown
unknown
172.217.18.3
unknown
United States
142.250.185.227
unknown
United States
142.250.185.106
unknown
United States
142.250.185.238
unknown
United States
192.0.78.27
href.li
United States
104.17.3.184
unknown
United States
151.101.2.137
code.jquery.com
United States
239.255.255.250
unknown
Reserved
142.250.181.228
www.google.com
United States
35.190.80.1
a.nel.cloudflare.com
United States
104.17.2.184
challenges.cloudflare.com
United States
There are 9 hidden IPs, click here to show them.