IOC Report
http://josecarlosrevoredo.com/

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 49
ASCII text, with very long lines (398), with no line terminators
downloaded
Chrome Cache Entry: 50
ASCII text, with very long lines (398), with no line terminators
dropped
Chrome Cache Entry: 51
ASCII text, with very long lines (1932)
downloaded
Chrome Cache Entry: 52
gzip compressed data, max speed, from Unix, truncated
dropped
Chrome Cache Entry: 53
ASCII text, with very long lines (1932)
downloaded
Chrome Cache Entry: 54
PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 55
PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 56
gzip compressed data, max speed, from Unix, truncated
downloaded
Chrome Cache Entry: 57
JSON data
downloaded
Chrome Cache Entry: 58
gzip compressed data, max speed, from Unix, truncated
dropped
Chrome Cache Entry: 59
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 60
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 61
gzip compressed data, max speed, from Unix, original size modulo 2^32 15758
downloaded
Chrome Cache Entry: 62
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 63
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 64
HTML document, ASCII text, with very long lines (14099)
downloaded
Chrome Cache Entry: 65
ASCII text, with very long lines (1932)
dropped
Chrome Cache Entry: 66
ASCII text, with very long lines (1932)
dropped
Chrome Cache Entry: 67
gzip compressed data, max speed, from Unix, truncated
downloaded
Chrome Cache Entry: 68
gzip compressed data, max speed, from Unix, original size modulo 2^32 13914
downloaded
There are 11 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=1952,i,3103678846888593772,11420615675697811035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://josecarlosrevoredo.com/"

URLs

Name
IP
Malicious
http://josecarlosrevoredo.com/
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
142.250.186.68
http://josecarlosrevoredo.com/track.php?domain=josecarlosrevoredo.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyOTcyMzQ1MS4xNTg6NWNhZGExMWVmMjVjNmRmNWE1ODY2NTY2MmRhODIyZDg4ZmM2NTEzN2JjZjM3MGI2MzU1YzAxNTc4MTg0YTc1OTo2NzE5N2MzYjI2OTA5
52.18.59.124
http://josecarlosrevoredo.com/privacy.html
https://syndicatedsearch.goog
unknown
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=2
172.217.18.110
http://josecarlosrevoredo.com/ls.php?t=67197c3b&token=7e73f5f3413db55900d4ec5ccbef1893e626adf4
52.18.59.124
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
142.250.181.225
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
142.250.181.225
http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
18.66.121.190
http://josecarlosrevoredo.com/favicon.ico
52.18.59.124
http://josecarlosrevoredo.com/
http://josecarlosrevoredo.com/track.php?domain=josecarlosrevoredo.com&toggle=browserjs&uid=MTcyOTcyMzQ1MS4xNTg6NWNhZGExMWVmMjVjNmRmNWE1ODY2NTY2MmRhODIyZDg4ZmM2NTEzN2JjZjM3MGI2MzU1YzAxNTc4MTg0YTc1OTo2NzE5N2MzYjI2OTA5
52.18.59.124
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
unknown
There are 3 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
josecarlosrevoredo.com
52.18.59.124
bg.microsoft.map.fastly.net
199.232.210.172
syndicatedsearch.goog
142.250.185.174
s-part-0036.t-0009.t-msedge.net
13.107.246.64
s-part-0017.t-0009.t-msedge.net
13.107.246.45
www.google.com
142.250.185.68
googlehosted.l.googleusercontent.com
142.250.181.225
d38psrni17bvxu.cloudfront.net
18.66.121.190
fp2e7a.wpc.phicdn.net
192.229.221.95
afs.googleusercontent.com
unknown

IPs

IP
Domain
Country
Malicious
142.250.186.68
unknown
United States
142.250.185.68
www.google.com
United States
192.168.2.4
unknown
unknown
192.168.2.6
unknown
unknown
192.168.2.5
unknown
unknown
142.250.181.225
googlehosted.l.googleusercontent.com
United States
239.255.255.250
unknown
Reserved
18.66.121.190
d38psrni17bvxu.cloudfront.net
United States
52.18.59.124
josecarlosrevoredo.com
United States
18.66.121.135
unknown
United States
142.250.186.110
unknown
United States
172.217.16.196
unknown
United States
172.217.18.110
unknown
United States
142.250.185.65
unknown
United States
There are 4 hidden IPs, click here to show them.

DOM / HTML

URL
Malicious
http://josecarlosrevoredo.com/
http://josecarlosrevoredo.com/
http://josecarlosrevoredo.com/
http://josecarlosrevoredo.com/privacy.html