IOC Report
http://penukran-poin-dana.aktsx.cfd/

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 100
PNG image data, 480 x 118, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 101
ASCII text, with very long lines (3879), with no line terminators
downloaded
Chrome Cache Entry: 102
ASCII text, with very long lines (551)
downloaded
Chrome Cache Entry: 103
ASCII text, with very long lines (340), with no line terminators
dropped
Chrome Cache Entry: 104
ASCII text, with very long lines (340), with no line terminators
downloaded
Chrome Cache Entry: 105
PNG image data, 300 x 300, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 106
PNG image data, 80 x 45, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 107
ASCII text, with very long lines (32038)
dropped
Chrome Cache Entry: 108
ASCII text, with very long lines (65451)
dropped
Chrome Cache Entry: 109
GIF image data, version 89a, 600 x 117
dropped
Chrome Cache Entry: 110
PNG image data, 382 x 112, 8-bit/color RGBA, interlaced
downloaded
Chrome Cache Entry: 111
ASCII text, with very long lines (1255)
downloaded
Chrome Cache Entry: 112
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 113
ASCII text, with very long lines (551)
dropped
Chrome Cache Entry: 114
PNG image data, 300 x 300, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 115
Unicode text, UTF-8 text, with very long lines (311)
dropped
Chrome Cache Entry: 116
ASCII text, with very long lines (8320)
dropped
Chrome Cache Entry: 117
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 118
PNG image data, 382 x 112, 8-bit/color RGBA, interlaced
dropped
Chrome Cache Entry: 119
PNG image data, 200 x 200, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 120
PNG image data, 382 x 112, 8-bit/color RGBA, interlaced
dropped
Chrome Cache Entry: 121
GIF image data, version 89a, 600 x 117
downloaded
Chrome Cache Entry: 122
PNG image data, 300 x 300, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 123
GIF image data, version 89a, 599 x 944
dropped
Chrome Cache Entry: 124
PNG image data, 200 x 200, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 125
PNG image data, 360 x 200, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 126
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 127
ASCII text, with very long lines (32038)
downloaded
Chrome Cache Entry: 128
PNG image data, 382 x 112, 8-bit/color RGBA, interlaced
downloaded
Chrome Cache Entry: 129
GIF image data, version 89a, 599 x 944
downloaded
Chrome Cache Entry: 130
PNG image data, 480 x 118, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 131
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 132
ASCII text, with very long lines (666), with no line terminators
downloaded
Chrome Cache Entry: 133
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 134
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 599x237, components 3
downloaded
Chrome Cache Entry: 72
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 73
ASCII text, with very long lines (4141), with no line terminators
downloaded
Chrome Cache Entry: 74
GIF image data, version 89a, 600 x 947
dropped
Chrome Cache Entry: 75
PNG image data, 200 x 200, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 76
PNG image data, 80 x 45, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 77
GIF image data, version 89a, 600 x 947
downloaded
Chrome Cache Entry: 78
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 599x237, components 3
dropped
Chrome Cache Entry: 79
PNG image data, 200 x 200, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 80
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 81
PNG image data, 300 x 300, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 82
ASCII text, with very long lines (1094), with no line terminators
dropped
Chrome Cache Entry: 83
ASCII text, with very long lines (4141), with no line terminators
dropped
Chrome Cache Entry: 84
Unicode text, UTF-8 text, with very long lines (311)
downloaded
Chrome Cache Entry: 85
HTML document, Unicode text, UTF-8 text, with very long lines (1116)
downloaded
Chrome Cache Entry: 86
PNG image data, 200 x 200, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 87
PNG image data, 300 x 300, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 88
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 89
PNG image data, 360 x 200, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 90
ASCII text, with very long lines (65451)
downloaded
Chrome Cache Entry: 91
GIF image data, version 89a, 599 x 944
dropped
Chrome Cache Entry: 92
PNG image data, 300 x 300, 8-bit gray+alpha, non-interlaced
dropped
Chrome Cache Entry: 93
ASCII text, with very long lines (1094), with no line terminators
downloaded
Chrome Cache Entry: 94
GIF image data, version 89a, 599 x 944
downloaded
Chrome Cache Entry: 95
ASCII text, with very long lines (1561), with no line terminators
downloaded
Chrome Cache Entry: 96
PNG image data, 200 x 200, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 97
MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel
downloaded
Chrome Cache Entry: 98
ASCII text, with very long lines (8320)
downloaded
Chrome Cache Entry: 99
ASCII text, with very long lines (790), with no line terminators
downloaded
There are 54 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2224,i,8753130838461143343,2683393986688760850,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://penukran-poin-dana.aktsx.cfd/"

URLs

Name
IP
Malicious
http://penukran-poin-dana.aktsx.cfd/
https://dev-danapemulihan.pantheonsite.io/asset/google.js
23.185.0.4
malicious
https://api.telegram.org/bot$
unknown
malicious
https://dev-danapemulihan.pantheonsite.io/asset/pin.css
23.185.0.4
https://unpkg.com/ionicons@7.1.0/dist/ionicons/ionicons.esm.js
104.17.249.203
http://penukran-poin-dana.aktsx.cfd/#carousel__slide1
http://penukran-poin-dana.aktsx.cfd/asset/img/load_bg.png
165.22.241.119
http://penukran-poin-dana.aktsx.cfd/#carousel__slide3
https://unpkg.com/ionicons@7.1.0/dist/ionicons/p-40ae2aa7.js
104.17.249.203
https://dev-danapemulihan.pantheonsite.io/asset/jquery.mask.min.js
23.185.0.4
http://penukran-poin-dana.aktsx.cfd/asset/img/hero.svg
165.22.241.119
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilUMIG_IMFVixTFpWb4xA5f1HJt25lbv-cc1baknB_YJeWO9FYU4SJOzdeMNkA1msFpUU-0MiI3B-llmFX122-XhqCq7-1HW4YUfaWX52rlNtfspDDvlFNj_A--xZIRknP3ycDkzm51noxYaFx_gfOck3U745QZSBwpCSesqOq1oEycuQamqaZlqoz/s16000/ezgif.com-crop%20(3).gif
172.217.18.1
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilUMIG_IMFVixTFpWb4xA5f1HJt25lbv-cc1baknB
unknown
https://www.dana.id
unknown
https://a.bsite.net/footer.js
unknown
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixR-U2gHP_VriGKaaVcf-_BbZmvWWoaRI8Wd26DYewNJayil_To6kgdWxmdq3TDJKQJ7lAAbD1de1uuuWTLQzCGdR8qT1S2mTehsdR02AFN573iPkN-0IrliCuRAy0xJfSH9AlfJWV7odqpRC_bxJLM2EkLf-84_ePEjEfE8SOtiKfEjcLQ7nDBjDc/s16000/ezgif.com-crop%20(4).gif
172.217.18.1
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEid9dARAQbMu1UTEgpOfyH6pn4eI3_XArbELp_8lfZtysRgex-gqs0Czc9ch_O7U2lrucgBVSqGQEL33BwV3Ri4D3evjzJHJ6LBFa_K-pIPbdO6QQ3iHlTkLiqo_w2z2NbXTw83lNcWHG7T9q2n6m7N3SZ-qfZpTdsioS3dm-YIfJh4zU16QEODOLKn/s16000/AddText_06-06-08.17.04.jpg
172.217.18.1
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixR-U2gHP_VriGKaaVcf-_BbZmvWWoaRI8Wd26DYe
unknown
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWg2Gu-OJgBB04_6jT0WUgRXWLn5YbRSrznAuun2U
unknown
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbD-mmuMUDwaeFMEz6NefivuQqHyrFXvXxqVxMhYRhR5wsfUhiWkPNkpxLKkagRNpJ2obIiZH_D9EK6tnHIJUFMVBOclZI98zrU7VPszAR5n-_GeSWNCNgnfH1MRWuL-ahhPjxsejyDa5yyWAaOMWXWT4jS4EngtdLLlXjaPakQoFIOsjyS6tfnEBHDlw/s16000/output-onlinegiftools.gif
172.217.18.1
https://www.dana.id/favicon.ico
163.181.92.228
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjj8Fs3JMUwF85O07XgsV-e1rmQjTwS91jcu-zh3Lr_fEgVfhY823rmnMewtU59iGvsFjcBm-12OLSj81f57ZEksJeU2GaG7UU3zuwDsOsfTO4dAJ693JJyILcXjdHEzirw-pPBCeV1CfTqSroNgoMTGIfy-Y-HC8GAJDmo68GYd1-x2gGu0UsincrU/s16000/ezgif.com-crop%20(5).gif
172.217.18.1
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjj8Fs3JMUwF85O07XgsV-e1rmQjTwS91jcu-zh3Lr
unknown
https://dev-danapemulihan.pantheonsite.io/asset/container.css
23.185.0.4
http://penukran-poin-dana.aktsx.cfd/asset/img/kom.png
165.22.241.119
https://dev-danapemulihan.pantheonsite.io/asset/img/load_spin.png
23.185.0.4
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhl9xJVYWF_a9vAhgW5QQgozvZVADTaJgIX64iO7a5
unknown
http://penukran-poin-dana.aktsx.cfd/asset/img/load_spin.png
165.22.241.119
https://unpkg.com/ionicons@7.1.0/dist/ionicons/p-1c0b2c47.entry.js
104.17.249.203
http://penukran-poin-dana.aktsx.cfd/asset/img/dana_text.png
165.22.241.119
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbD-mmuMUDwaeFMEz6NefivuQqHyrFXvXxqVxMhYR
unknown
https://dev-danapemulihan.pantheonsite.io/asset/otp.css
23.185.0.4
https://dev-danapemulihan.pantheonsite.io/asset/img/load_bg.png
23.185.0.4
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiftOkTXOPr5az8LHt3m-DZNiM0T98GalJ0P3bBLQK
unknown
https://code.jquery.com/jquery-3.5.1.min.js
151.101.194.137
https://dev-danapemulihan.pantheonsite.io/asset/main.css
23.185.0.4
https://dev-danapemulihan.pantheonsite.io/asset/img/dana_logo.png
23.185.0.4
http://penukran-poin-dana.aktsx.cfd/
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhl9xJVYWF_a9vAhgW5QQgozvZVADTaJgIX64iO7a5sQuMpSoPBK3zfKjvT6xc9fZPfxZz39mjk1H_oZOOOtYvO1l7DkWNqiD5LJyGYdwDNyHuyqLk_Ix6eFs3aLCG2yUXVwtsnj0BXTA40WZmecyLyCIm_ff0xNkkOvkuKBOl6yfS-QjI_EJrIyGtU/s1600/load_spin.png
172.217.18.1
https://unpkg.com/ionicons@7.1.0/dist/ionicons/p-d15ec307.js
104.17.249.203
https://unpkg.com/ionicons@7.1.0/dist/ionicons/svg/chevron-back-outline.svg
104.17.249.203
https://dev-danapemulihan.pantheonsite.io/asset/img/indo.png
23.185.0.4
https://www.dana.id/
unknown
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEid9dARAQbMu1UTEgpOfyH6pn4eI3_XArbELp_8lfZ
unknown
http://penukran-poin-dana.aktsx.cfd/asset/img/bi.png
165.22.241.119
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8hbZEfutKvr9pkj0-mkJYWt-1SBtt3gw-HFOEZc0
unknown
https://unpkg.com/ionicons
unknown
https://dev-danapemulihan.pantheonsite.io/asset/loader.css
23.185.0.4
http://penukran-poin-dana.aktsx.cfd/asset/img/dana_logo.png
165.22.241.119
There are 38 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
fe4.edge.pantheon.io
23.185.0.4
bg.microsoft.map.fastly.net
199.232.210.172
penukran-poin-dana.aktsx.cfd
165.22.241.119
code.jquery.com
151.101.194.137
www.google.com
142.250.184.196
www.dana.id.w.cdngslb.com
163.181.92.228
unpkg.com
104.17.249.203
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com
217.20.57.18
googlehosted.l.googleusercontent.com
172.217.18.1
fp2e7a.wpc.phicdn.net
192.229.221.95
dev-danapemulihan.pantheonsite.io
unknown
www.dana.id
unknown
blogger.googleusercontent.com
unknown
There are 3 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
142.250.184.196
www.google.com
United States
192.168.2.7
unknown
unknown
163.181.92.228
www.dana.id.w.cdngslb.com
United States
192.168.2.6
unknown
unknown
172.217.18.1
googlehosted.l.googleusercontent.com
United States
151.101.130.137
unknown
United States
142.250.185.193
unknown
United States
239.255.255.250
unknown
Reserved
104.17.247.203
unknown
United States
165.22.241.119
penukran-poin-dana.aktsx.cfd
United States
104.17.249.203
unpkg.com
United States
23.185.0.4
fe4.edge.pantheon.io
United States
151.101.194.137
code.jquery.com
United States
There are 3 hidden IPs, click here to show them.

DOM / HTML

URL
Malicious
http://penukran-poin-dana.aktsx.cfd/
http://penukran-poin-dana.aktsx.cfd/
http://penukran-poin-dana.aktsx.cfd/
http://penukran-poin-dana.aktsx.cfd/#carousel__slide1
http://penukran-poin-dana.aktsx.cfd/#carousel__slide3
http://penukran-poin-dana.aktsx.cfd/#carousel__slide1
http://penukran-poin-dana.aktsx.cfd/
http://penukran-poin-dana.aktsx.cfd/#carousel__slide3
http://penukran-poin-dana.aktsx.cfd/#carousel__slide1
http://penukran-poin-dana.aktsx.cfd/#carousel__slide3
http://penukran-poin-dana.aktsx.cfd/
http://penukran-poin-dana.aktsx.cfd/#carousel__slide1
http://penukran-poin-dana.aktsx.cfd/#carousel__slide3
http://penukran-poin-dana.aktsx.cfd/#carousel__slide1
http://penukran-poin-dana.aktsx.cfd/#carousel__slide3
There are 5 hidden doms, click here to show them.