IOC Report
https://uphol-dlog.godaddysites.com/

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 164
ASCII text, with very long lines (442)
downloaded
Chrome Cache Entry: 165
ASCII text, with very long lines (2368)
dropped
Chrome Cache Entry: 166
ASCII text, with very long lines (5510)
downloaded
Chrome Cache Entry: 167
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1535x988, components 3
dropped
Chrome Cache Entry: 168
ASCII text, with very long lines (1352)
downloaded
Chrome Cache Entry: 169
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 170
ASCII text, with very long lines (905)
dropped
Chrome Cache Entry: 171
Web Open Font Format (Version 2), TrueType, length 23676, version 1.0
downloaded
Chrome Cache Entry: 172
ASCII text, with very long lines (651)
downloaded
Chrome Cache Entry: 173
ASCII text, with very long lines (1352)
dropped
Chrome Cache Entry: 174
ASCII text, with very long lines (1875)
dropped
Chrome Cache Entry: 175
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 176
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 177
HTML document, ASCII text
downloaded
Chrome Cache Entry: 178
ASCII text, with very long lines (23126)
downloaded
Chrome Cache Entry: 179
ASCII text, with very long lines (21556)
downloaded
Chrome Cache Entry: 180
Web Open Font Format (Version 2), TrueType, length 24364, version 1.0
downloaded
Chrome Cache Entry: 181
RIFF (little-endian) data, Web/P image, VP8 encoding, 1240x620, Scaling: [none]x[none], YUV color, decoders should clamp
downloaded
Chrome Cache Entry: 182
ASCII text, with very long lines (17294)
dropped
Chrome Cache Entry: 183
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 192x192, components 3
dropped
Chrome Cache Entry: 184
ASCII text, with very long lines (5510)
downloaded
Chrome Cache Entry: 185
ASCII text, with very long lines (1211)
dropped
Chrome Cache Entry: 186
ASCII text, with very long lines (3283)
dropped
Chrome Cache Entry: 187
ASCII text, with very long lines (13449)
dropped
Chrome Cache Entry: 188
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 32x32, components 3
dropped
Chrome Cache Entry: 189
ASCII text, with very long lines (51876)
dropped
Chrome Cache Entry: 190
Unicode text, UTF-8 text, with very long lines (20947)
downloaded
Chrome Cache Entry: 191
ASCII text
downloaded
Chrome Cache Entry: 192
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 193
ASCII text, with very long lines (905)
downloaded
Chrome Cache Entry: 194
ASCII text, with very long lines (383)
dropped
Chrome Cache Entry: 195
ASCII text, with very long lines (13834)
dropped
Chrome Cache Entry: 196
ASCII text
downloaded
Chrome Cache Entry: 197
ASCII text, with very long lines (483)
downloaded
Chrome Cache Entry: 198
ASCII text, with very long lines (483)
dropped
Chrome Cache Entry: 199
ASCII text, with very long lines (13449)
downloaded
Chrome Cache Entry: 200
ASCII text, with very long lines (383)
downloaded
Chrome Cache Entry: 201
ASCII text, with very long lines (5510)
dropped
Chrome Cache Entry: 202
ASCII text
dropped
Chrome Cache Entry: 203
ASCII text, with very long lines (516)
downloaded
Chrome Cache Entry: 204
HTML document, Unicode text, UTF-8 text, with very long lines (32875)
downloaded
Chrome Cache Entry: 205
ASCII text
downloaded
Chrome Cache Entry: 206
JSON data
downloaded
Chrome Cache Entry: 207
ASCII text, with very long lines (367)
dropped
Chrome Cache Entry: 208
ASCII text, with very long lines (51876)
downloaded
Chrome Cache Entry: 209
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1240x620, components 3
dropped
Chrome Cache Entry: 210
RIFF (little-endian) data, Web/P image, VP8 encoding, 600x300, Scaling: [none]x[none], YUV color, decoders should clamp
downloaded
Chrome Cache Entry: 211
ASCII text, with very long lines (651)
dropped
Chrome Cache Entry: 212
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 213
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 214
ASCII text, with very long lines (17294)
downloaded
Chrome Cache Entry: 215
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 216
ASCII text, with very long lines (51876)
downloaded
Chrome Cache Entry: 217
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 218
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 219
ASCII text, with very long lines (330)
downloaded
Chrome Cache Entry: 220
ASCII text
dropped
Chrome Cache Entry: 221
ASCII text, with very long lines (3283)
downloaded
Chrome Cache Entry: 222
ASCII text, with very long lines (3043)
dropped
Chrome Cache Entry: 223
ASCII text, with very long lines (21556)
dropped
Chrome Cache Entry: 224
ASCII text, with very long lines (367)
downloaded
Chrome Cache Entry: 225
ASCII text, with very long lines (330)
dropped
Chrome Cache Entry: 226
ASCII text, with very long lines (516)
dropped
Chrome Cache Entry: 227
ASCII text, with very long lines (2368)
downloaded
Chrome Cache Entry: 228
Web Open Font Format (Version 2), TrueType, length 25548, version 1.0
downloaded
Chrome Cache Entry: 229
RIFF (little-endian) data, Web/P image, VP8 encoding, 600x300, Scaling: [none]x[none], YUV color, decoders should clamp
downloaded
Chrome Cache Entry: 230
ASCII text, with very long lines (1875)
downloaded
Chrome Cache Entry: 231
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 600x300, components 3
dropped
Chrome Cache Entry: 232
ASCII text, with very long lines (3043)
downloaded
Chrome Cache Entry: 233
HTML document, Unicode text, UTF-8 text, with very long lines (27000)
downloaded
Chrome Cache Entry: 234
ASCII text, with very long lines (32964), with no line terminators
downloaded
Chrome Cache Entry: 235
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 236
ASCII text
dropped
Chrome Cache Entry: 237
HTML document, Unicode text, UTF-8 text, with very long lines (25553)
downloaded
Chrome Cache Entry: 238
GIF image data, version 89a, 1 x 1
dropped
Chrome Cache Entry: 239
RIFF (little-endian) data, Web/P image, VP8 encoding, 600x300, Scaling: [none]x[none], YUV color, decoders should clamp
downloaded
Chrome Cache Entry: 240
ASCII text, with very long lines (1211)
downloaded
Chrome Cache Entry: 241
ASCII text, with very long lines (829)
dropped
Chrome Cache Entry: 242
ASCII text, with very long lines (23126)
dropped
Chrome Cache Entry: 243
ASCII text, with very long lines (442)
dropped
Chrome Cache Entry: 244
Unicode text, UTF-8 text, with very long lines (20947)
dropped
Chrome Cache Entry: 245
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 246
ASCII text, with very long lines (522)
downloaded
Chrome Cache Entry: 247
ASCII text, with very long lines (13834)
downloaded
Chrome Cache Entry: 248
Unicode text, UTF-8 text, with very long lines (63425)
dropped
Chrome Cache Entry: 249
Web Open Font Format (Version 2), TrueType, length 23992, version 1.0
downloaded
Chrome Cache Entry: 250
ASCII text, with very long lines (5510)
downloaded
Chrome Cache Entry: 251
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 252
RIFF (little-endian) data, Web/P image, VP8 encoding, 1535x988, Scaling: [none]x[none], YUV color, decoders should clamp
downloaded
Chrome Cache Entry: 253
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 254
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 255
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 600x300, components 3
dropped
Chrome Cache Entry: 256
ASCII text, with very long lines (1824)
dropped
Chrome Cache Entry: 257
ASCII text, with very long lines (829)
downloaded
Chrome Cache Entry: 258
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 259
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 260
ASCII text, with very long lines (522)
dropped
Chrome Cache Entry: 261
Unicode text, UTF-8 text, with very long lines (63425)
downloaded
Chrome Cache Entry: 262
ASCII text, with very long lines (51876)
downloaded
Chrome Cache Entry: 263
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 264
ASCII text, with very long lines (1824)
downloaded
Chrome Cache Entry: 265
GIF image data, version 89a, 1 x 1
downloaded
There are 93 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2352,i,10986415002564313405,17649482003313041287,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://uphol-dlog.godaddysites.com/"

URLs

Name
IP
Malicious
https://uphol-dlog.godaddysites.com/
malicious
https://uphol-dlog.godaddysites.com/
malicious
https://uphol-dlog.godaddysites.com/services
malicious
https://uphol-dlog.godaddysites.com/manifest.webmanifest
13.248.243.5
malicious
https://uphol-dlog.godaddysites.com/contact-us
malicious
https://uphol-dlog.godaddysites.com/sw.js
13.248.243.5
malicious
https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVepFq4dHc.woff2)
unknown
https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q3bHNiZg.woff2)
unknown
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applica
unknown
https://img1.wsimg.com/gfonts/s/karla/v31/qkB9XvYC6trAT55ZBi1ueQVIjQTD-JrIH2G7nytkHRyQ8p4wUjm6bnEr.w
unknown
https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQrbh3o1vLImiwAVvYawgcf2eVWEX-tS1Zf.woff2)
unknown
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-in_corp_applications_base
https://policies.google.com/terms
unknown
https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVep1q4dHc.woff2)
unknown
https://img1.wsimg.com/isteam/stock/3257
unknown
https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVepVq4dHc.woff2)
unknown
https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQrbh3o1vLImiwAVvYawgcf2eVWEX-tRlZfX80.woff2)
unknown
https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQrbh3o1vLImiwAVvYawgcf2eVWEX-tT1ZfX80.woff2)
unknown
https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q0bHNiZg.woff2)
unknown
https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVeqlq4.woff2)
unknown
https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc
unknown
https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q1bHNiZg.woff2)
unknown
https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q6bHM.woff2)
unknown
https://img1.wsimg.com/gfonts/s/karla/v31/qkB9XvYC6trAT55ZBi1ueQVIjQTD-JrIH2G7nytkHRyQ8p4wUje6bg.wof
unknown
https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQrbh3o1vLImiwAVvYawgcf2eVWEX-tRVZfX80.woff2)
unknown
https://policies.google.com/privacy
unknown
https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQubh3o1vLImiwAVvYawgcf2eVerlq4dHc.woff2)
unknown
http://scripts.sil.org/OFL
unknown
http://jedwatson.github.io/classnames
unknown
https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQrbh3o1vLImiwAVvYawgcf2eVWEX-tRFZfX80.woff2)
unknown
https://img1.wsimg.com/gfonts/s/oldstandardtt/v20/MwQsbh3o1vLImiwAVvYawgcf2eVer2q-bHNiZg.woff2)
unknown
There are 20 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
uphol-dlog.godaddysites.com
13.248.243.5
www.google.com
172.217.18.100
isteam.wsimg.com
3.121.64.201
fp2e7a.wpc.phicdn.net
192.229.221.95
img1.wsimg.com
unknown
csp.secureserver.net
unknown
events.api.secureserver.net
unknown
www.godaddy.com
unknown

IPs

IP
Domain
Country
Malicious
3.121.64.201
isteam.wsimg.com
United States
13.248.243.5
uphol-dlog.godaddysites.com
United States
192.168.2.4
unknown
unknown
192.168.2.6
unknown
unknown
239.255.255.250
unknown
Reserved
172.217.18.100
www.google.com
United States

DOM / HTML

URL
Malicious
https://uphol-dlog.godaddysites.com/
https://uphol-dlog.godaddysites.com/
https://uphol-dlog.godaddysites.com/services
https://uphol-dlog.godaddysites.com/contact-us
https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-in_corp_applications_base