IOC Report
http://melodic-agency-full.on-fleek.app/

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 59
PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 60
PNG image data, 120 x 120, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 61
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 62
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 63
HTML document, ASCII text, with very long lines (1991), with CRLF line terminators
downloaded
Chrome Cache Entry: 64
ASCII text
downloaded
Chrome Cache Entry: 65
PNG image data, 640 x 280, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 66
PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 67
JSON data
dropped
Chrome Cache Entry: 68
PNG image data, 120 x 120, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 69
PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 70
PNG image data, 100 x 101, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 71
PNG image data, 900 x 240, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 72
PNG image data, 900 x 240, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 73
JSON data
downloaded
Chrome Cache Entry: 74
PNG image data, 41 x 41, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 75
ASCII text
downloaded
Chrome Cache Entry: 76
ASCII text, with very long lines (65447)
dropped
Chrome Cache Entry: 77
ASCII text
downloaded
Chrome Cache Entry: 78
PNG image data, 41 x 41, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 79
PNG image data, 541 x 252, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 80
PNG image data, 100 x 101, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 81
PNG image data, 640 x 280, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 82
PNG image data, 640 x 280, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 83
PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 84
ASCII text, with very long lines (65447)
downloaded
Chrome Cache Entry: 85
PNG image data, 640 x 280, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 86
PNG image data, 541 x 252, 8-bit/color RGBA, non-interlaced
dropped
There are 19 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=2032,i,4131305535451324077,8055093464155782048,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://melodic-agency-full.on-fleek.app/"

URLs

Name
IP
Malicious
http://melodic-agency-full.on-fleek.app/
malicious
https://melodic-agency-full.on-fleek.app/img/no_avatar.png
104.26.13.141
malicious
https://melodic-agency-full.on-fleek.app/img/PrivacyCenter.png
104.26.13.141
malicious
https://melodic-agency-full.on-fleek.app/ico.ico
104.26.13.141
malicious
https://melodic-agency-full.on-fleek.app/img/dir.png
104.26.13.141
malicious
https://melodic-agency-full.on-fleek.app/img/meta-logo-grey.png
104.26.13.141
malicious
https://melodic-agency-full.on-fleek.app/img/2FA.png
104.26.13.141
malicious
https://melodic-agency-full.on-fleek.app/img/star.png
104.26.13.141
malicious
https://melodic-agency-full.on-fleek.app/img/phone.png
104.26.13.141
malicious
https://melodic-agency-full.on-fleek.app/
malicious
https://melodic-agency-full.on-fleek.app/img/fb_round_logo.png
104.26.13.141
malicious
https://melodic-agency-full.on-fleek.app/img/save_img.png
104.26.13.141
malicious
https://melodic-agency-full.on-fleek.app/styles/style.css
104.26.13.141
malicious
https://melodic-agency-full.on-fleek.app/img/block_2.png
104.26.13.141
malicious
https://melodic-agency-full.on-fleek.app/styles/bootstrap.min.css
104.26.13.141
malicious
https://melodic-agency-full.on-fleek.app/img/doc.png
104.26.13.141
malicious
https://api.emailjs.com/api/v1.0/email/send
unknown
https://api.db-ip.com/v2/free/self/
172.67.75.166
https://a.nel.cloudflare.com/report/v4?s=6brmOOMSEPwYip4nlEkta6HangljD2RZfYSxdeXV8gwkmtu8ru8bRgmCa%2F%2B1J%2FB9EBFBYcPJGkOm%2FlPvKqtonuEbh5exLzRX7AriTEuQK%2FOxoVSErBRSEH%2FmKiiTRiRRL0yV9Yv%2FKm0rpkjxIm7m1PuK
35.190.80.1
http://www.gimp.org/xmp/
unknown
https://a.nel.cloudflare.com/report/v4?s=hPX5F0%2B5%2FUrsbX5QHuc2%2B8pyOsdt57rkodRAQYg%2BI55SIiWbbJ2NnzelUL5T7NIw1eFAXgYsLPdMuI94YTpWy%2B3fstLILcjYZW5gEBpv5Qmk%2BgmNihd2HWnVq27bq6b22IWDQl%2Fkt%2B3Y%2B92p%2F4dE6aJF
35.190.80.1
https://popper.js.org)
unknown
There are 11 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
a.nel.cloudflare.com
35.190.80.1
melodic-agency-full.on-fleek.app
172.67.73.189
api.db-ip.com
172.67.75.166
s-part-0017.t-0009.t-msedge.net
13.107.246.45
www.google.com
142.250.185.100
fp2e7a.wpc.phicdn.net
192.229.221.95
windowsupdatebg.s.llnwi.net
87.248.205.0

IPs

IP
Domain
Country
Malicious
172.67.75.166
api.db-ip.com
United States
142.250.185.100
www.google.com
United States
192.168.2.4
unknown
unknown
192.168.2.5
unknown
unknown
239.255.255.250
unknown
Reserved
104.26.13.141
unknown
United States
35.190.80.1
a.nel.cloudflare.com
United States

DOM / HTML

URL
Malicious
https://melodic-agency-full.on-fleek.app/