IOC Report
https://www.google.co.nz/url?q=nL206935ZEtyvV206935l&sa=t&url=amp/%69%70%66%6F%78%2E%63%6F%2E%75%6B%2F%70%61%67%65%73%2F%74%68%61%6E%6B%73%2E%68%74%6D%6C#cnlhbi5zcGVuY2VyQHVzLnlhemFraS5jb20=

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 100
Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
downloaded
Chrome Cache Entry: 101
PNG image data, 108 x 24, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 102
ASCII text, with very long lines (47531)
downloaded
Chrome Cache Entry: 103
ASCII text, with very long lines (65447)
downloaded
Chrome Cache Entry: 104
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
dropped
Chrome Cache Entry: 105
JSON data
dropped
Chrome Cache Entry: 106
JSON data
downloaded
Chrome Cache Entry: 107
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 108
HTML document, ASCII text
downloaded
Chrome Cache Entry: 109
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 110
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 111
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 112
ASCII text, with very long lines (15267), with no line terminators
dropped
Chrome Cache Entry: 68
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 69
PNG image data, 65 x 56, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 70
ASCII text, with very long lines (15267), with no line terminators
downloaded
Chrome Cache Entry: 71
ASCII text, with very long lines (65447)
dropped
Chrome Cache Entry: 72
PNG image data, 65 x 56, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 73
ASCII text, with very long lines (50758)
dropped
Chrome Cache Entry: 74
ASCII text, with very long lines (3379)
downloaded
Chrome Cache Entry: 75
ASCII text, with very long lines (32065)
dropped
Chrome Cache Entry: 76
PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 77
PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 78
ASCII text, with very long lines (50758)
downloaded
Chrome Cache Entry: 79
ASCII text, with very long lines (32065)
downloaded
Chrome Cache Entry: 80
ASCII text, with very long lines (5967), with no line terminators
dropped
Chrome Cache Entry: 81
Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
dropped
Chrome Cache Entry: 82
ASCII text, with very long lines (47531)
dropped
Chrome Cache Entry: 83
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 84
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 85
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 86
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 87
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
downloaded
Chrome Cache Entry: 88
ASCII text, with very long lines (5967), with no line terminators
downloaded
Chrome Cache Entry: 89
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 90
PNG image data, 108 x 24, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 91
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 92
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 93
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 94
ASCII text, with very long lines (31803)
downloaded
Chrome Cache Entry: 95
ASCII text, with very long lines (31803)
dropped
Chrome Cache Entry: 96
ASCII text, with very long lines (15005)
downloaded
Chrome Cache Entry: 97
ASCII text, with very long lines (15005)
dropped
Chrome Cache Entry: 98
JSON data
dropped
Chrome Cache Entry: 99
ASCII text, with no line terminators
downloaded
There are 36 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1980,i,8674670957000623843,12392277085511161252,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.co.nz/url?q=nL206935ZEtyvV206935l&sa=t&url=amp/%69%70%66%6F%78%2E%63%6F%2E%75%6B%2F%70%61%67%65%73%2F%74%68%61%6E%6B%73%2E%68%74%6D%6C#cnlhbi5zcGVuY2VyQHVzLnlhemFraS5jb20="

URLs

Name
IP
Malicious
https://www.google.co.nz/url?q=nL206935ZEtyvV206935l&sa=t&url=amp/%69%70%66%6F%78%2E%63%6F%2E%75%6B%2F%70%61%67%65%73%2F%74%68%61%6E%6B%73%2E%68%74%6D%6C#cnlhbi5zcGVuY2VyQHVzLnlhemFraS5jb20=
malicious
https://ipfox.co.uk/pages/thanks.html#cnlhbi5zcGVuY2VyQHVzLnlhemFraS5jb20=
malicious
https://ipfox.co.uk/open-to-Preview-Opening-3694576
malicious
https://us.iloadingdoc.com/974c780874a24074ba271f864bb78ca167188337d5a68sec&uid=f253efe302d32ab264a76e0ce65be76967188337d5a6b
malicious
https://us.iloadingdoc.com/js2_/6718833843b6c-157b07bc5a31a88d126497a92aec5523
172.67.73.210
malicious
https://ipfox.co.uk/pages/errorss.js
107.178.102.96
https://cdnjs.cloudflare.com/ajax/libs/UAParser.js/0.7.31/ua-parser.min.js
104.17.24.14
https://code.jquery.com/jquery-3.6.0.min.js
151.101.130.137
https://api.telegram.org/bot7107686937:AAGoqXlr31lmLR7qgVo_FFgSjoOSDhGFxSU/sendMessage
149.154.167.220
https://www.youtube.com
unknown
https://us.iloadingdoc.com/&cnlhbi5zcGVuY2VyQHVzLnlhemFraS5jb20=
https://www.google.co.nz/amp/ipfox.co.uk/pages/thanks.html
142.250.186.67
https://github.com/twbs/bootstrap/graphs/contributors)
unknown
https://us.iloadingdoc.com/elRrZW5CSTRjaHlTdHFxrobotelRrZW5CSTRjaHlTdHFx
172.67.73.210
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/n9udl/0x4AAAAAAAxGgjgQ8CLarT4p/auto/fbE/normal/auto/
104.18.95.41
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8d6f2b1ba8780c0f&lang=auto
104.18.95.41
https://api.ipify.org/?format=json
104.26.12.205
https://us.iloadingdoc.com/endpointk0pqlf7p8x?email=ryan.spencer@us.yazaki.com&data=logo
172.67.73.210
https://us.iloadingdoc.com/left_/hTNk5OmknShMXmu
172.67.73.210
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1503782831:1729657625:NphMDVZNlkTLI6VDgN83LzR8DWoSqncMp2EpxeMvGv8/8d6f2b1ba8780c0f/rnn4y5PY71IOgCxxFWWb8eC32Db_ZOA37cuv935EjLo-1729659678-1.1.1.1-_hqH8g3itTgbdiE4w_J8GpkAyyUHGgQob..URaJvgXExdCuKoe1bMC_O7_GZkg3l
104.18.95.41
https://us.iloadingdoc.com/js___/6718833843b53-157b07bc5a31a88d126497a92aec5523
172.67.73.210
https://us.iloadingdoc.com/cdn-cgi/challenge-platform/h/g/rc/8d6f2b1ba8780c0f
172.67.73.210
https://challenges.cloudflare.com/turnstile/v0/g/f2bbd6738e15/api.js
104.18.95.41
https://us.iloadingdoc.com/fav/UeKfp6PNZqEBqGH
172.67.73.210
https://us.iloadingdoc.com/dash94e9655c904be201d35324646d3d650b
172.67.73.210
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8d6f2b1ba8780c0f/1729659680153/d1c37c99cf828c6180f06f01597ccfdcf8c9986e5e47d0b3f6125ead119bfb30/8ZzDMnORDZ1J8Jl
104.18.95.41
https://us.iloadingdoc.com/endpointk0pqlf7p8x?email=ryan.spencer@us.yazaki.com&data=background
172.67.73.210
https://us.iloadingdoc.com/css_/rGUJa4STRrEEHeK
172.67.73.210
https://us.iloadingdoc.com/logo_/4aBwhKHUc0cgZ7T
172.67.73.210
https://us.iloadingdoc.com/2back/6718833e4b018
172.67.73.210
https://getbootstrap.com/)
unknown
https://us.iloadingdoc.com/captcha/style.css
172.67.73.210
https://us.iloadingdoc.com/captcha/logo.svg
172.67.73.210
https://us.iloadingdoc.com/__static/cb28372960bc552c5223b1c894ec2be86718833843b87
172.67.73.210
https://fingerprint.com)
unknown
https://www.google.co.nz/url?q=nL206935ZEtyvV206935l&sa=t&url=amp/%69%70%66%6F%78%2E%63%6F%2E%75%6B%2F%70%61%67%65%73%2F%74%68%61%6E%6B%73%2E%68%74%6D%6C
142.250.186.67
http://www.opensource.org/licenses/mit-license.php)
unknown
https://a.nel.cloudflare.com/report/v4?s=4H7g14Dy102rTPbtozyaU6Cx08DQz546tkUBrt0yogbFiaFZ5UwrdUAM2y4UAKWHPVdH0p7%2FLoyUMyOBJrdICwOFFV%2F6LulXykn7HBNfLNiVfWL%2FbyV2K5nspkpfexlj3lYPLA%3D%3D
35.190.80.1
https://us.iloadingdoc.com/favicon.ico
172.67.73.210
https://us.iloadingdoc.com/1logo/6718833da2027
172.67.73.210
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
104.18.95.41
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8d6f2b1ba8780c0f/1729659680153/3EAW_0nuHQZlW3S
104.18.95.41
https://github.com/twbs/bootstrap/blob/master/LICENSE)
unknown
https://us.iloadingdoc.com/b_/6718833843b6b-157b07bc5a31a88d126497a92aec5523
172.67.73.210
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
152.199.21.175
https://ipfox.co.uk/favicon.ico
107.178.102.96
http://ipfox.co.uk/pages/thanks.html
107.178.102.96
https://ipfox.co.uk/pages/thanks.html
107.178.102.96
https://openfpcdn.io/botd/v1
13.32.99.103
https://logo.clearbit.com/us.yazaki.com
13.32.27.14
There are 39 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
us.iloadingdoc.com
172.67.73.210
malicious
ipfox.co.uk
107.178.102.96
malicious
api.telegram.org
149.154.167.220
malicious
aadcdn.msftauth.net
unknown
malicious
logo.clearbit.com
unknown
malicious
a.nel.cloudflare.com
35.190.80.1
s-part-0023.t-0009.t-msedge.net
13.107.246.51
s-part-0017.t-0009.fb-t-msedge.net
13.107.253.45
fp2e7a.wpc.phicdn.net
192.229.221.95
openfpcdn.io
13.32.99.103
d26p066pn2w0s0.cloudfront.net
13.32.27.14
code.jquery.com
151.101.130.137
cdnjs.cloudflare.com
104.17.24.14
challenges.cloudflare.com
104.18.95.41
sni1gl.wpc.omegacdn.net
152.199.21.175
www.google.com
142.250.186.132
api.ipify.org
104.26.12.205
www.google.co.nz
142.250.186.67
There are 8 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
107.178.102.96
ipfox.co.uk
United States
malicious
149.154.167.220
api.telegram.org
United Kingdom
malicious
172.67.73.210
us.iloadingdoc.com
United States
malicious
142.250.186.67
www.google.co.nz
United States
104.18.94.41
unknown
United States
13.32.27.14
d26p066pn2w0s0.cloudfront.net
United States
192.168.2.4
unknown
unknown
151.101.130.137
code.jquery.com
United States
142.250.186.132
www.google.com
United States
35.190.80.1
a.nel.cloudflare.com
United States
104.26.13.205
unknown
United States
104.17.24.14
cdnjs.cloudflare.com
United States
104.26.12.205
api.ipify.org
United States
13.32.99.97
unknown
United States
104.18.95.41
challenges.cloudflare.com
United States
151.101.2.137
unknown
United States
13.32.99.103
openfpcdn.io
United States
239.255.255.250
unknown
Reserved
152.199.21.175
sni1gl.wpc.omegacdn.net
United States
104.26.12.8
unknown
United States
There are 10 hidden IPs, click here to show them.

DOM / HTML

URL
Malicious
https://ipfox.co.uk/open-to-Preview-Opening-3694576
malicious
https://us.iloadingdoc.com/974c780874a24074ba271f864bb78ca167188337d5a68sec&uid=f253efe302d32ab264a76e0ce65be76967188337d5a6b
malicious
https://ipfox.co.uk/pages/thanks.html#cnlhbi5zcGVuY2VyQHVzLnlhemFraS5jb20=
https://ipfox.co.uk/open-to-Preview-Opening-3694576
https://us.iloadingdoc.com/&cnlhbi5zcGVuY2VyQHVzLnlhemFraS5jb20=
https://us.iloadingdoc.com/&cnlhbi5zcGVuY2VyQHVzLnlhemFraS5jb20=
https://us.iloadingdoc.com/974c780874a24074ba271f864bb78ca167188337d5a68sec&uid=f253efe302d32ab264a76e0ce65be76967188337d5a6b