IOC Report
https://my-homepagero.sa.com/exml/

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 100
HTML document, ASCII text, with very long lines (1238)
dropped
Chrome Cache Entry: 101
HTML document, ASCII text, with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 63
ASCII text, with very long lines (47671)
dropped
Chrome Cache Entry: 64
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
downloaded
Chrome Cache Entry: 65
ASCII text, with very long lines (47671)
downloaded
Chrome Cache Entry: 66
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
downloaded
Chrome Cache Entry: 67
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
downloaded
Chrome Cache Entry: 68
Unicode text, UTF-8 text, with very long lines (65342)
downloaded
Chrome Cache Entry: 69
Web Open Font Format (Version 2), TrueType, length 116672, version 773.256
downloaded
Chrome Cache Entry: 70
HTML document, ASCII text, with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 71
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
dropped
Chrome Cache Entry: 72
Web Open Font Format (Version 2), TrueType, length 156532, version 773.256
downloaded
Chrome Cache Entry: 73
HTML document, ASCII text, with very long lines (1238)
downloaded
Chrome Cache Entry: 74
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
dropped
Chrome Cache Entry: 75
PNG image data, 4 x 15, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 76
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
downloaded
Chrome Cache Entry: 77
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
downloaded
Chrome Cache Entry: 78
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
dropped
Chrome Cache Entry: 79
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
dropped
Chrome Cache Entry: 80
Web Open Font Format (Version 2), TrueType, length 156532, version 773.256
downloaded
Chrome Cache Entry: 81
Unicode text, UTF-8 text, with very long lines (65342)
downloaded
Chrome Cache Entry: 82
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
dropped
Chrome Cache Entry: 83
ASCII text, with very long lines (47992), with no line terminators
downloaded
Chrome Cache Entry: 84
ASCII text, with very long lines (47992), with no line terminators
dropped
Chrome Cache Entry: 85
Web Open Font Format (Version 2), TrueType, length 116672, version 773.256
downloaded
Chrome Cache Entry: 86
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
downloaded
Chrome Cache Entry: 87
PNG image data, 4 x 15, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 88
ASCII text, with very long lines (52276)
downloaded
Chrome Cache Entry: 89
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 90
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
downloaded
Chrome Cache Entry: 91
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 92
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
downloaded
Chrome Cache Entry: 93
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
dropped
Chrome Cache Entry: 94
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 95
HTML document, ASCII text, with CRLF line terminators
dropped
Chrome Cache Entry: 96
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
downloaded
Chrome Cache Entry: 97
HTML document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 98
JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3
dropped
Chrome Cache Entry: 99
ASCII text, with very long lines (52276)
downloaded
There are 30 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1984,i,1848213736152348531,11193892482524913915,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://my-homepagero.sa.com/exml/"

URLs

Name
IP
Malicious
https://my-homepagero.sa.com/exml/
malicious
https://my-homepagero.sa.com/exml/
malicious
https://instagram.com/f-encoreds.ru
unknown
https://challenges.cloudflare.com/turnstile/v0/b/22755d9a86c9/api.js
104.18.94.41
https://cdn.jsdelivr.net/npm/bootstrap
unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8db8b5b9cd092825&lang=auto
104.18.94.41
https://x.com/f-encoreds.ru
unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)
unknown
https://challenges.cloudflare.com/turnstile/v0/api.js
104.18.94.41
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/vfmg5/0x4AAAAAAAuwlN1UJdrVj1VF/auto/fbE/normal/auto/
104.18.94.41
https://f-encoreds.ru/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
188.114.97.3
https://f-encoreds.ru/favicon.ico
188.114.97.3
https://getbootstrap.com/)
unknown
https://f-encoreds.ru//#inventory
https://f-encoreds.ru//
188.114.96.3
https://fontawesome.com/license/free
unknown
https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css
151.101.65.229
https://fontawesome.com
unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
104.18.94.41
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/webfonts/fa-brands-400.woff2
104.17.24.14
https://my-homepagero.sa.com/favicon.ico
188.114.97.3
https://a.nel.cloudflare.com/report/v4?s=xA3EtNwFGnWF2sWHdVnstqEQMy3AndJg%2BCVD7e0BMhMonG0s27K%2B90TLJwOIne4IWnS%2FBSSElS%2Fuehi79noVfHMCVYt8BIPsD%2FG8naGw3oQ5MLZj%2BCxvpgsnX2Iy%2BFjg
35.190.80.1
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8db8b5b9cd092825/1730430818910/zVi64cmYn9OI2FP
104.18.94.41
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/webfonts/fa-solid-900.woff2
104.17.24.14
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1763374620:1730427246:lakYVM1Qlwjrcye6roVxxYDcKf2PgFdRtOkIxG_Wg0I/8db8b5b9cd092825/u60L5yXJcAj1FE0ZVcXg1B_ykSpnrJzCuO6ygzLtCog-1730430816-1.1.1.1-HEsttXQKb6TBH3GP9jRaIjx73zMOK4Vkj8f9Netrha5FZnW8H2WP6q6cHOKkO9T2
104.18.94.41
https://f-encoreds.ru//#contact
unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css
104.17.24.14
https://f-encoreds.ru//#services
unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8db8b5b9cd092825/1730430818913/4e8bdf40a5ee1eeb50dada0d873de876206913305e0d18b0b566e43a37dff113/z7mfcuKn0H_sX67
104.18.94.41
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
104.17.24.14
https://linkedin.com/in/f-encoreds.ru
unknown
There are 20 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
jsdelivr.map.fastly.net
151.101.65.229
a.nel.cloudflare.com
35.190.80.1
f-encoreds.ru
188.114.96.3
cdnjs.cloudflare.com
104.17.24.14
challenges.cloudflare.com
104.18.94.41
s-part-0017.t-0009.t-msedge.net
13.107.246.45
www.google.com
142.250.184.196
my-homepagero.sa.com
188.114.97.3
fp2e7a.wpc.phicdn.net
192.229.221.95
cdn.jsdelivr.net
unknown

IPs

IP
Domain
Country
Malicious
142.250.184.196
www.google.com
United States
104.17.24.14
cdnjs.cloudflare.com
United States
104.18.94.41
challenges.cloudflare.com
United States
151.101.65.229
jsdelivr.map.fastly.net
United States
192.168.2.4
unknown
unknown
239.255.255.250
unknown
Reserved
188.114.97.3
my-homepagero.sa.com
European Union
188.114.96.3
f-encoreds.ru
European Union
35.190.80.1
a.nel.cloudflare.com
United States

DOM / HTML

URL
Malicious
https://my-homepagero.sa.com/exml/
malicious
https://my-homepagero.sa.com/exml/
https://my-homepagero.sa.com/exml/
https://my-homepagero.sa.com/exml/
https://my-homepagero.sa.com/exml/
https://f-encoreds.ru//#inventory