IOC Report
https://alinefrasca.sbs/pktcr/

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 100
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x326, components 3
downloaded
Chrome Cache Entry: 101
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x326, components 3
dropped
Chrome Cache Entry: 102
HTML document, ASCII text, with very long lines (1238)
downloaded
Chrome Cache Entry: 103
ASCII text, with very long lines (47671)
downloaded
Chrome Cache Entry: 104
Web Open Font Format (Version 2), TrueType, length 116672, version 773.256
downloaded
Chrome Cache Entry: 105
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x326, components 3
downloaded
Chrome Cache Entry: 106
PNG image data, 83 x 10, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 69
HTML document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 70
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x326, components 3
dropped
Chrome Cache Entry: 71
ASCII text, with very long lines (47992), with no line terminators
downloaded
Chrome Cache Entry: 72
HTML document, ASCII text, with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 73
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x326, components 3
downloaded
Chrome Cache Entry: 74
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x326, components 3
downloaded
Chrome Cache Entry: 75
ASCII text, with very long lines (47671)
dropped
Chrome Cache Entry: 76
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x326, components 3
dropped
Chrome Cache Entry: 77
ASCII text, with very long lines (52276)
downloaded
Chrome Cache Entry: 78
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x326, components 3
downloaded
Chrome Cache Entry: 79
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 80
ASCII text, with very long lines (52276)
downloaded
Chrome Cache Entry: 81
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x326, components 3
dropped
Chrome Cache Entry: 82
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x326, components 3
downloaded
Chrome Cache Entry: 83
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x326, components 3
downloaded
Chrome Cache Entry: 84
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x326, components 3
downloaded
Chrome Cache Entry: 85
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x326, components 3
dropped
Chrome Cache Entry: 86
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x326, components 3
dropped
Chrome Cache Entry: 87
Web Open Font Format (Version 2), TrueType, length 116672, version 773.256
downloaded
Chrome Cache Entry: 88
ASCII text, with very long lines (47992), with no line terminators
dropped
Chrome Cache Entry: 89
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x326, components 3
dropped
Chrome Cache Entry: 90
HTML document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 91
Unicode text, UTF-8 text, with very long lines (65342)
downloaded
Chrome Cache Entry: 92
PNG image data, 83 x 10, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 93
Unicode text, UTF-8 text, with very long lines (65342)
downloaded
Chrome Cache Entry: 94
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 95
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 96
HTML document, ASCII text, with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 97
Web Open Font Format (Version 2), TrueType, length 156532, version 773.256
downloaded
Chrome Cache Entry: 98
HTML document, ASCII text, with very long lines (1238)
dropped
Chrome Cache Entry: 99
Web Open Font Format (Version 2), TrueType, length 156532, version 773.256
downloaded
There are 29 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2368 --field-trial-handle=2296,i,4055844674821034473,7721358641859555857,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://alinefrasca.sbs/pktcr/"

URLs

Name
IP
Malicious
https://alinefrasca.sbs/pktcr/
malicious
https://alinefrasca.sbs/pktcr/
malicious
https://challenges.cloudflare.com/turnstile/v0/b/e1a56f38220d/api.js
104.18.94.41
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8d9998e48bc0e98b/1730104580520/7FQTXkX5ZkBqsD6
104.18.95.41
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/50l31/0x4AAAAAAAySkc1zVXc3ztAP/auto/fbE/normal/auto/
104.18.95.41
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/101271322:1730103188:6HRbbJs87_HiCSIrxrZZgbsUH28xnY_4sVI_cjvAKEk/8d9998e48bc0e98b/S8ymOwDctYV1XFZLWDWFqSNHTXkEi0WpttSETzX6a4Y-1730104576-1.1.1.1-_4T1_B3uixuUg0D4_NLdSkm6NbVh1yndlqULNzvY0xOHel8g6vvphEUB.BRwm5rE
104.18.95.41
https://cooklght.ru//#contact
unknown
https://cdn.jsdelivr.net/npm/bootstrap
unknown
https://cooklght.ru//#services
unknown
https://cooklght.ru/favicon.ico
104.21.91.145
https://github.com/twbs/bootstrap/blob/main/LICENSE)
unknown
https://challenges.cloudflare.com/turnstile/v0/api.js
104.18.94.41
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d9998e48bc0e98b&lang=auto
104.18.95.41
https://cooklght.ru//#inventory
https://getbootstrap.com/)
unknown
https://linkedin.com/in/cooklght.ru
unknown
https://fontawesome.com/license/free
unknown
https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css
151.101.193.229
https://fontawesome.com
unknown
https://a.nel.cloudflare.com/report/v4?s=wU86ZkLChHGwsGXE7iVMwUH4zwTrzKODgoeTBUCkRFC%2FN77LdGcTyfToJ3FFEFE08SIJJZd%2FULcl%2BAFOXmP3cxNffWx5xEW2eVvOkQofnLEj8cyoSShA5Bm799Ml%2BA%3D%3D
35.190.80.1
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
104.18.95.41
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/webfonts/fa-brands-400.woff2
104.17.25.14
https://alinefrasca.sbs/favicon.ico
188.114.97.3
https://x.com/cooklght.ru
unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/webfonts/fa-solid-900.woff2
104.17.25.14
https://a.nel.cloudflare.com/report/v4?s=tWDJGVbsRup9wEhI8G2C6JBLwORuljVlhy5aGB2I7LpDzpfC8LmIaVaoPSXEVkF9yuPp%2BpSMcGHQE3kqmLYXvbmfzz3oPnw13mj8%2BDJpZaq4QwWYQ7VahPAAB5lKL8bmzBU%3D
35.190.80.1
https://cooklght.ru//
104.21.91.145
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css
104.17.25.14
https://instagram.com/cooklght.ru
unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8d9998e48bc0e98b/1730104580522/2e00cf1394d42c89cdf811406f5e4269e35051a7617a342d077837e4d476bf20/0obqbK39GmXmtGT
104.18.95.41
https://cooklght.ru/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
104.21.91.145
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
104.17.25.14
There are 21 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
jsdelivr.map.fastly.net
151.101.193.229
a.nel.cloudflare.com
35.190.80.1
cooklght.ru
104.21.91.145
cdnjs.cloudflare.com
104.17.25.14
challenges.cloudflare.com
104.18.94.41
s-part-0017.t-0009.t-msedge.net
13.107.246.45
www.google.com
142.250.186.164
alinefrasca.sbs
188.114.97.3
fp2e7a.wpc.phicdn.net
192.229.221.95
cdn.jsdelivr.net
unknown

IPs

IP
Domain
Country
Malicious
104.17.24.14
unknown
United States
151.101.193.229
jsdelivr.map.fastly.net
United States
104.18.94.41
challenges.cloudflare.com
United States
192.168.2.16
unknown
unknown
104.18.95.41
unknown
United States
192.168.2.4
unknown
unknown
239.255.255.250
unknown
Reserved
188.114.97.3
alinefrasca.sbs
European Union
142.250.186.164
www.google.com
United States
35.190.80.1
a.nel.cloudflare.com
United States
104.17.25.14
cdnjs.cloudflare.com
United States
104.21.91.145
cooklght.ru
United States
There are 2 hidden IPs, click here to show them.

DOM / HTML

URL
Malicious
https://alinefrasca.sbs/pktcr/
malicious
https://alinefrasca.sbs/pktcr/
https://alinefrasca.sbs/pktcr/
https://alinefrasca.sbs/pktcr/
https://alinefrasca.sbs/pktcr/
https://cooklght.ru//#inventory