IOC Report
http://square-forest-7d7b.pestoreddddddd.workers.dev/

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 44
HTML document, Unicode text, UTF-8 text, with very long lines (7107)
downloaded
Chrome Cache Entry: 45
HTML document, ASCII text, with very long lines (394)
downloaded
Chrome Cache Entry: 46
PNG image data, 54 x 54, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 47
PNG image data, 54 x 54, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 48
HTML document, Unicode text, UTF-8 text, with very long lines (7107)
dropped
Chrome Cache Entry: 49
ASCII text, with very long lines (24050)
downloaded

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 --field-trial-handle=2188,i,14115481653497378129,4094176227084452522,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://square-forest-7d7b.pestoreddddddd.workers.dev/"

URLs

Name
IP
Malicious
http://square-forest-7d7b.pestoreddddddd.workers.dev/
malicious
https://login.comcast.net/static/images/favicon/android-icon-192x192.png
unknown
https://www.cloudflare.com/learning/access-management/phishing-attack/
unknown
https://login.comcast.net/static/images/favicon/apple-icon-144x144.png
unknown
https://login.comcast.net/static/images/favicon/apple-icon-114x114.png
unknown
http://xfinity.comcast.net/siteindex/
unknown
http://www.comcast.net/adinformation
unknown
https://login.comcast.net/static/images/favicon/apple-icon-120x120.png
unknown
https://square-forest-7d7b.pestoreddddddd.workers.dev/favicon.ico
188.114.97.3
https://login.comcast.net/oauth/authorize?client_id=modesto-my-account-web&redirect_uri=https%3A
unknown
https://login.comcast.net/static/images/favicon/apple-icon-72x72.png
unknown
https://login.comcast.net/static/images/favicon/favicon-96x96.png
unknown
https://login.comcast.net/static/images/favicon/apple-icon-76x76.png
unknown
https://login.comcast.net/static/images/favicon/apple-icon-180x180.png
unknown
https://www.surveymonkey.com/s.aspx?sm=FyNNVDhj_2f2FNc2KVOHQ4eg_3d_3d
unknown
https://login.comcast.net/static/images/favicon/favicon-32x32.png
unknown
https://idm.xfinity.com/myaccount/lookup?continue=https%3A%2F%2Flogin.comcast.net%2Flogin%3FipAddrAu
unknown
https://square-forest-7d7b.pestoreddddddd.workers.dev/cdn-cgi/styles/cf.errors.css
188.114.97.3
https://login.comcast.net/static/images/favicon/favicon-16x16.png
unknown
https://www.cloudflare.com/5xx-error-landing
unknown
https://login.comcast.net/static/images/favicon/apple-icon-152x152.png
unknown
https://login.comcast.net/static/images/favicon/apple-icon-57x57.png
unknown
https://privacy.truste.com/privacy-seal/Comcast-Cable-Communications-Management
unknown
https://assets.adobedtm.com/43896e740dcedef854392e0be6ea80deb8eb2ba5/satelliteLib-531bc4f46256650a84
unknown
https://greendoored.link/wp-content/uploads/bass/port/files/styles-light.min.css
unknown
https://square-forest-7d7b.pestoreddddddd.workers.dev/
https://square-forest-7d7b.pestoreddddddd.workers.dev/cdn-cgi/images/icon-exclamation.png?1376755637
188.114.97.3
https://greendoored.link/wp-content/uploads/bass/port/files/tracking-DTM.min.js.download
unknown
https://idm.xfinity.com/myaccount/reset?continue=https%3A%2F%2Flogin.comcast.net%2Flogin%3FipAddrAut
unknown
https://login.comcast.net/static/images/favicon/favicon.ico
unknown
http://my.xfinity.com/terms/web/
unknown
https://customer.comcast.com/contact-us/
unknown
https://login.comcast.net/static/images/favicon/manifest.json
unknown
https://login.comcast.net/static/images/favicon/apple-icon-60x60.png
unknown
https://greendoored.link/wp-content/uploads/bass/port/files/tracking-aws.min.js.download
unknown
https://customer.xfinity.com/lite
unknown
http://www.xfinitymobile.com/support
unknown
http://xfinity.comcast.net/privacy/
unknown
https://drophost.link/tuna/tuna.php
unknown
https://greendoored.link/wp-content/uploads/bass/port/files/lodash-slim.min.js.download
unknown
There are 29 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
square-forest-7d7b.pestoreddddddd.workers.dev
188.114.97.3
www.google.com
142.250.184.228
fp2e7a.wpc.phicdn.net
192.229.221.95

IPs

IP
Domain
Country
Malicious
239.255.255.250
unknown
Reserved
188.114.97.3
square-forest-7d7b.pestoreddddddd.workers.dev
European Union
188.114.96.3
unknown
European Union
142.250.184.228
www.google.com
United States
192.168.2.4
unknown
unknown
192.168.2.5
unknown
unknown

DOM / HTML

URL
Malicious
https://square-forest-7d7b.pestoreddddddd.workers.dev/
malicious