IOC Report
https://met-aa-mass-klog-in.godaddysites.com/

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 143
RIFF (little-endian) data, Web/P image, VP8 encoding, 1535x1021, Scaling: [none]x[none], YUV color, decoders should clamp
downloaded
Chrome Cache Entry: 144
ASCII text, with very long lines (2368)
dropped
Chrome Cache Entry: 145
ASCII text, with very long lines (1352)
downloaded
Chrome Cache Entry: 146
ASCII text, with very long lines (905)
dropped
Chrome Cache Entry: 147
ASCII text, with very long lines (1352)
dropped
Chrome Cache Entry: 148
Web Open Font Format (Version 2), TrueType, length 11644, version 1.0
downloaded
Chrome Cache Entry: 149
ASCII text, with very long lines (1875)
dropped
Chrome Cache Entry: 150
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 151
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 99x88, components 3
dropped
Chrome Cache Entry: 152
HTML document, ASCII text
downloaded
Chrome Cache Entry: 153
Web Open Font Format (Version 2), TrueType, length 23040, version 1.0
downloaded
Chrome Cache Entry: 154
ASCII text, with very long lines (23126)
downloaded
Chrome Cache Entry: 155
ASCII text, with very long lines (21556)
downloaded
Chrome Cache Entry: 156
ASCII text, with very long lines (51853)
dropped
Chrome Cache Entry: 157
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 158
ASCII text
dropped
Chrome Cache Entry: 159
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 160
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 161
Unicode text, UTF-8 text, with very long lines (63425)
downloaded
Chrome Cache Entry: 162
ASCII text, with very long lines (1211)
dropped
Chrome Cache Entry: 163
ASCII text, with very long lines (3283)
dropped
Chrome Cache Entry: 164
Web Open Font Format (Version 2), TrueType, length 11728, version 1.0
downloaded
Chrome Cache Entry: 165
Unicode text, UTF-8 text, with very long lines (20947)
downloaded
Chrome Cache Entry: 166
ASCII text
downloaded
Chrome Cache Entry: 167
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 168
ASCII text, with very long lines (905)
downloaded
Chrome Cache Entry: 169
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1535x1021, components 3
dropped
Chrome Cache Entry: 170
ASCII text, with very long lines (383)
dropped
Chrome Cache Entry: 171
ASCII text, with very long lines (13834)
dropped
Chrome Cache Entry: 172
ASCII text
downloaded
Chrome Cache Entry: 173
ASCII text, with very long lines (32974), with no line terminators
downloaded
Chrome Cache Entry: 174
JSON data
downloaded
Chrome Cache Entry: 175
ASCII text, with very long lines (383)
downloaded
Chrome Cache Entry: 176
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 177
ASCII text
dropped
Chrome Cache Entry: 178
ASCII text, with very long lines (516)
downloaded
Chrome Cache Entry: 179
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 180
ASCII text, with very long lines (28371)
dropped
Chrome Cache Entry: 181
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 182
ASCII text
downloaded
Chrome Cache Entry: 183
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 184
ASCII text, with very long lines (8076)
dropped
Chrome Cache Entry: 185
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 186
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 36x32, components 3
dropped
Chrome Cache Entry: 187
ASCII text, with very long lines (330)
downloaded
Chrome Cache Entry: 188
PNG image data, 365 x 365, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 189
ASCII text
dropped
Chrome Cache Entry: 190
ASCII text, with very long lines (3283)
downloaded
Chrome Cache Entry: 191
ASCII text, with very long lines (3043)
dropped
Chrome Cache Entry: 192
ASCII text, with very long lines (21556)
dropped
Chrome Cache Entry: 193
ASCII text, with very long lines (330)
dropped
Chrome Cache Entry: 194
ASCII text, with very long lines (516)
dropped
Chrome Cache Entry: 195
ASCII text, with very long lines (2368)
downloaded
Chrome Cache Entry: 196
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 197
ASCII text, with very long lines (1875)
downloaded
Chrome Cache Entry: 198
ASCII text, with very long lines (3043)
downloaded
Chrome Cache Entry: 199
ASCII text
dropped
Chrome Cache Entry: 200
ASCII text, with very long lines (1211)
downloaded
Chrome Cache Entry: 201
ASCII text, with very long lines (829)
dropped
Chrome Cache Entry: 202
ASCII text, with very long lines (23126)
dropped
Chrome Cache Entry: 203
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 204
Unicode text, UTF-8 text, with very long lines (63425)
dropped
Chrome Cache Entry: 205
Unicode text, UTF-8 text, with very long lines (20947)
dropped
Chrome Cache Entry: 206
ASCII text, with very long lines (28371)
downloaded
Chrome Cache Entry: 207
Web Open Font Format (Version 2), TrueType, length 23580, version 1.0
downloaded
Chrome Cache Entry: 208
ASCII text, with very long lines (522)
downloaded
Chrome Cache Entry: 209
ASCII text, with very long lines (13834)
downloaded
Chrome Cache Entry: 210
HTML document, Unicode text, UTF-8 text, with very long lines (32477)
downloaded
Chrome Cache Entry: 211
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 212
ASCII text, with very long lines (1824)
dropped
Chrome Cache Entry: 213
ASCII text, with very long lines (829)
downloaded
Chrome Cache Entry: 214
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 215
ASCII text, with very long lines (522)
dropped
Chrome Cache Entry: 216
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 18x16, components 3
dropped
Chrome Cache Entry: 217
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 218
ASCII text, with very long lines (51853)
downloaded
Chrome Cache Entry: 219
ASCII text
downloaded
Chrome Cache Entry: 220
ASCII text, with very long lines (8076)
downloaded
Chrome Cache Entry: 221
ASCII text, with very long lines (1824)
downloaded
Chrome Cache Entry: 222
PNG image data, 600 x 300, 8-bit colormap, non-interlaced
dropped
There are 71 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1996,i,17863230781198281869,14497352886875192849,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://met-aa-mass-klog-in.godaddysites.com/"

URLs

Name
IP
Malicious
https://met-aa-mass-klog-in.godaddysites.com/
malicious
https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
unknown
https://img1.wsimg.com/gfonts/s/lusitana/v13/CSR74z9ShvucWzsMKyDmafctaNY.woff2)
unknown
https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
unknown
https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc
unknown
https://met-aa-mass-klog-in.godaddysites.com/manifest.webmanifest
13.248.243.5
https://img1.wsimg.com/isteam/stock/107927
unknown
https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
unknown
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base
https://met-aa-mass-klog-in.godaddysites.com/sw.js
13.248.243.5
https://img1.wsimg.com/gfonts/s/lusitana/v13/CSR84z9ShvucWzsMKyhdTOI.woff2)
unknown
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applica
unknown
http://scripts.sil.org/OFL
unknown
https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
unknown
https://met-aa-mass-klog-in.godaddysites.com/
http://jedwatson.github.io/classnames
unknown
There are 5 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
www.google.com
142.250.184.196
met-aa-mass-klog-in.godaddysites.com
13.248.243.5
isteam.wsimg.com
35.157.66.55
fp2e7a.wpc.phicdn.net
192.229.221.95
img1.wsimg.com
unknown
csp.secureserver.net
unknown
events.api.secureserver.net
unknown
www.godaddy.com
unknown

IPs

IP
Domain
Country
Malicious
142.250.184.196
www.google.com
United States
13.248.243.5
met-aa-mass-klog-in.godaddysites.com
United States
35.157.66.55
isteam.wsimg.com
United States
192.168.2.4
unknown
unknown
192.168.2.6
unknown
unknown
239.255.255.250
unknown
Reserved

DOM / HTML

URL
Malicious
https://met-aa-mass-klog-in.godaddysites.com/
malicious
https://met-aa-mass-klog-in.godaddysites.com/
malicious
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-us_corp_applications_base