IOC Report
http://onetag-sys.com/usync/?gdpr=0&gdpr_consent=0&us_privacy=0&redir=https://ps.0cf.io/?onetag=$%7BUSER_TOKEN%7D84&uid=

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 42
HTML document, ASCII text
downloaded
Chrome Cache Entry: 43
HTML document, ASCII text
downloaded

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1912 --field-trial-handle=2484,i,15531785429463948178,16661828252351481044,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://onetag-sys.com/usync/?gdpr=0&gdpr_consent=0&us_privacy=0&redir=https://ps.0cf.io/?onetag=$%7BUSER_TOKEN%7D84&uid="

URLs

Name
IP
Malicious
http://onetag-sys.com/usync/?gdpr=0&gdpr_consent=0&us_privacy=0&redir=https://ps.0cf.io/?onetag=$%7BUSER_TOKEN%7D84&uid=
https://onetag-sys.com/usync/?gdpr=0&gdpr_consent=0&us_privacy=0&redir=https://ps.0cf.io/?onetag=$%7BUSER_TOKEN%7D84&uid=
http://www.onetag.com/
unknown
https://onetag-sys.com/favicon.ico
51.75.86.98
http://www.onetag.com/privacy/
unknown
https://onetag-cdn.com/media/1810ab0f-23f9-4cc9-bcf6-3436c65530ed.png
unknown
http://onetag-sys.com/usync/?gdpr=0&gdpr_consent=0&us_privacy=0&redir=https://ps.0cf.io/?onetag=$%7BUSER_TOKEN%7D84&uid=
51.89.9.253

Domains

Name
IP
Malicious
onetag-sys.com
51.89.9.253
www.google.com
172.217.18.4
fp2e7a.wpc.phicdn.net
192.229.221.95

IPs

IP
Domain
Country
Malicious
51.89.9.253
onetag-sys.com
France
239.255.255.250
unknown
Reserved
172.217.18.4
www.google.com
United States
51.75.86.98
unknown
France
142.250.185.100
unknown
United States
192.168.2.6
unknown
unknown

DOM / HTML

URL
Malicious
https://onetag-sys.com/usync/?gdpr=0&gdpr_consent=0&us_privacy=0&redir=https://ps.0cf.io/?onetag=$%7BUSER_TOKEN%7D84&uid=