IOC Report
https://eot.lps-china.com/f/a/pQ-JA2nitAQtMB92xwUcGg~~/AAAHUQA~/RgRpAabzP4QTAWh0dHBzOi8vYmVyZW5pY2UuZW9tYWlsOC5jb20vdW5zdWJzY3JpYmU_ZXA9MiZsPTVlNmE0MDU2LWVhZTMtMTFlZS1hNzNjLWM1NDU2ZDI0OGQ3OCZsYz0zMmVlMmQ3Yy0zMjA4LTExZWYtYTFiZS1lYjMwYzAwY2FlZDgmcD05NDM1NjNkYy05Mzc2LTExZWYtYTdkMi00NTk0MDQ5OWMzNTYmcHQ9

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 57
ASCII text
downloaded
Chrome Cache Entry: 58
ASCII text, with very long lines (18298)
dropped
Chrome Cache Entry: 59
PNG image data, 32 x 32, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 60
ASCII text, with very long lines (18298)
downloaded
Chrome Cache Entry: 61
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 62
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
downloaded
Chrome Cache Entry: 63
ASCII text, with very long lines (1436), with no line terminators
dropped
Chrome Cache Entry: 64
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 65
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 66
Web Open Font Format (Version 2), TrueType, length 23580, version 1.0
downloaded
Chrome Cache Entry: 67
Unicode text, UTF-8 text, with very long lines (3166), with no line terminators
dropped
Chrome Cache Entry: 68
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 69
ASCII text, with very long lines (701)
dropped
Chrome Cache Entry: 70
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 71
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 72
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 73
ASCII text, with very long lines (701)
downloaded
Chrome Cache Entry: 74
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 75
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 76
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 77
Unicode text, UTF-8 text, with very long lines (3166), with no line terminators
downloaded
Chrome Cache Entry: 78
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 79
PNG image data, 32 x 32, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 80
ASCII text, with very long lines (1436), with no line terminators
downloaded
Chrome Cache Entry: 81
Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
downloaded
Chrome Cache Entry: 82
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 83
JSON data
downloaded
Chrome Cache Entry: 84
HTML document, ASCII text, with very long lines (496)
downloaded
Chrome Cache Entry: 85
HTML document, ASCII text
downloaded
Chrome Cache Entry: 86
ASCII text, with very long lines (701)
downloaded
Chrome Cache Entry: 87
Unicode text, UTF-8 text, with very long lines (65235)
downloaded
Chrome Cache Entry: 88
PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
dropped
There are 23 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2432 --field-trial-handle=2368,i,10921593986549241130,2629318265558792514,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eot.lps-china.com/f/a/pQ-JA2nitAQtMB92xwUcGg~~/AAAHUQA~/RgRpAabzP4QTAWh0dHBzOi8vYmVyZW5pY2UuZW9tYWlsOC5jb20vdW5zdWJzY3JpYmU_ZXA9MiZsPTVlNmE0MDU2LWVhZTMtMTFlZS1hNzNjLWM1NDU2ZDI0OGQ3OCZsYz0zMmVlMmQ3Yy0zMjA4LTExZWYtYTFiZS1lYjMwYzAwY2FlZDgmcD05NDM1NjNkYy05Mzc2LTExZWYtYTdkMi00NTk0MDQ5OWMzNTYmcHQ9Y2FtcGFpZ24mcHY9NCZzcGE9MTczMDA5MzQ0NCZ0PTE3MzAwOTM1NTUmcz1mNWE2NDYwZWE1NTFlYzYxZDFiNjJhZTBhNTI2NGFhNjdmYWMxN2I1MzRkNWI4MzdhNTA0MDAwM2ZhNmZmMGUwVwVzcGNldUIKZw7zIR9n2KUgilIeZ2VtbWEubG9yZW56b0BkdWJhaWhvbGRpbmcuY29tWAQAAAL5"

URLs

Name
IP
Malicious
https://eot.lps-china.com/f/a/pQ-JA2nitAQtMB92xwUcGg~~/AAAHUQA~/RgRpAabzP4QTAWh0dHBzOi8vYmVyZW5pY2UuZW9tYWlsOC5jb20vdW5zdWJzY3JpYmU_ZXA9MiZsPTVlNmE0MDU2LWVhZTMtMTFlZS1hNzNjLWM1NDU2ZDI0OGQ3OCZsYz0zMmVlMmQ3Yy0zMjA4LTExZWYtYTFiZS1lYjMwYzAwY2FlZDgmcD05NDM1NjNkYy05Mzc2LTExZWYtYTdkMi00NTk0MDQ5OWMzNTYmcHQ9Y2FtcGFpZ24mcHY9NCZzcGE9MTczMDA5MzQ0NCZ0PTE3MzAwOTM1NTUmcz1mNWE2NDYwZWE1NTFlYzYxZDFiNjJhZTBhNTI2NGFhNjdmYWMxN2I1MzRkNWI4MzdhNTA0MDAwM2ZhNmZmMGUwVwVzcGNldUIKZw7zIR9n2KUgilIeZ2VtbWEubG9yZW56b0BkdWJhaWhvbGRpbmcuY29tWAQAAAL5
malicious
https://berenice.eomail8.com/complaint
malicious
https://berenice.eomail8.com/unsubscribe?ep=2&l=5e6a4056-eae3-11ee-a73c-c5456d248d78&lc=32ee2d7c-3208-11ef-a1be-eb30c00caed8&p=943563dc-9376-11ef-a7d2-45940499c356&pt=campaign&pv=4&spa=1730093444&t=1730093555&s=f5a6460ea551ec61d1b62ae0a5264aa67fac17b534d5b837a5040003fa6ff0e0
172.67.132.160
https://developers.google.com/recaptcha/docs/faq#localhost_support
unknown
https://www.gstatic.c..?/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__.
unknown
https://mxtoolbox.com/public/content/emailheaders/
unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)
unknown
https://www.google.com/recaptcha/api2/reload?k=6LdBe0QUAAAAAO9rW3qnB-SV3r-6djjWZubi2_tV
142.250.185.164
https://support.google.com/recaptcha#6262736
unknown
https://www.google.com/js/bg/p-7RyvuJU9m0QQmVDJx8SL9t4pWXVpOJSp0296ydJmo.js
142.250.185.164
https://cloud.google.com/recaptcha-enterprise/billing-information
unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=-ZG7BC9TxCVEbzIO2m429usb
142.250.185.164
https://berenice.eomail8.com/favicon-32x32.png
172.67.132.160
https://getbootstrap.com/)
unknown
https://berenice.eomail8.com/site.webmanifest
172.67.132.160
https://berenice.eomail8.com/build/css/app.e6b4ae83.css
172.67.132.160
https://berenice.eomail8.com/build/js/complaint.e6b4ae83.js
172.67.132.160
https://support.google.com/recaptcha/?hl=en#6223828
unknown
https://cloud.google.com/contact
unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
unknown
https://play.google.com/log?format=json&hasfast=true
unknown
https://www.google.com/recaptcha/api/fallback?k=6LdBe0QUAAAAAO9rW3qnB-SV3r-6djjWZubi2_tV
unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
unknown
https://eot.lps-china.com/f/a/pQ-JA2nitAQtMB92xwUcGg~~/AAAHUQA~/RgRpAabzP4QTAWh0dHBzOi8vYmVyZW5pY2UuZW9tYWlsOC5jb20vdW5zdWJzY3JpYmU_ZXA9MiZsPTVlNmE0MDU2LWVhZTMtMTFlZS1hNzNjLWM1NDU2ZDI0OGQ3OCZsYz0zMmVlMmQ3Yy0zMjA4LTExZWYtYTFiZS1lYjMwYzAwY2FlZDgmcD05NDM1NjNkYy05Mzc2LTExZWYtYTdkMi00NTk0MDQ5OWMzNTYmcHQ9Y2FtcGFpZ24mcHY9NCZzcGE9MTczMDA5MzQ0NCZ0PTE3MzAwOTM1NTUmcz1mNWE2NDYwZWE1NTFlYzYxZDFiNjJhZTBhNTI2NGFhNjdmYWMxN2I1MzRkNWI4MzdhNTA0MDAwM2ZhNmZmMGUwVwVzcGNldUIKZw7zIR9n2KUgilIeZ2VtbWEubG9yZW56b0BkdWJhaWhvbGRpbmcuY29tWAQAAAL5
54.171.65.116
https://support.google.com/recaptcha/#6175971
unknown
https://berenice.eomail8.com/unsubscribed
https://www.google.com/recaptcha/api2/bframe?hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&k=6LdBe0QUAAAAAO9rW3qnB-SV3r-6djjWZubi2_tV
142.250.185.164
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdBe0QUAAAAAO9rW3qnB-SV3r-6djjWZubi2_tV&co=aHR0cHM6Ly9iZXJlbmljZS5lb21haWw4LmNvbTo0NDM.&hl=en&type=image&v=-ZG7BC9TxCVEbzIO2m429usb&theme=light&size=invisible&badge=bottomright&cb=kfthd3sm89pd
142.250.185.164
https://www.google.com/recaptcha/api2/
unknown
https://support.google.com/recaptcha
unknown
There are 19 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
berenice.eomail8.com
172.67.132.160
malicious
eot.lps-china.com
unknown
malicious
emailocto-espsecuretrackingproxy-beb33fa4a237ae52.elb.eu-west-1.amazonaws.com
54.171.65.116
s-part-0017.t-0009.t-msedge.net
13.107.246.45
www.google.com
142.250.186.100

IPs

IP
Domain
Country
Malicious
172.67.132.160
berenice.eomail8.com
United States
malicious
192.168.2.4
unknown
unknown
239.255.255.250
unknown
Reserved
142.250.185.164
unknown
United States
54.171.65.116
emailocto-espsecuretrackingproxy-beb33fa4a237ae52.elb.eu-west-1.amazonaws.com
United States
142.250.186.132
unknown
United States
142.250.186.100
www.google.com
United States

DOM / HTML

URL
Malicious
https://berenice.eomail8.com/complaint
malicious
https://berenice.eomail8.com/complaint
malicious
https://berenice.eomail8.com/unsubscribed
https://berenice.eomail8.com/complaint
https://berenice.eomail8.com/complaint
https://berenice.eomail8.com/complaint
https://berenice.eomail8.com/complaint