IOC Report
https://rdgateway.hopethathelps.com/

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 46
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 47
HTML document, ASCII text, with very long lines (7733)
downloaded
Chrome Cache Entry: 48
ASCII text, with very long lines (1932)
downloaded
Chrome Cache Entry: 49
PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 50
PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 51
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 52
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 53
ASCII text, with very long lines (388), with no line terminators
downloaded
Chrome Cache Entry: 54
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 55
ASCII text, with very long lines (388), with no line terminators
dropped
Chrome Cache Entry: 56
ASCII text, with very long lines (1932)
downloaded
Chrome Cache Entry: 57
HTML document, ASCII text, with very long lines (14081)
downloaded
Chrome Cache Entry: 58
ASCII text, with very long lines (1932)
dropped
Chrome Cache Entry: 59
ASCII text, with very long lines (1932)
dropped
Chrome Cache Entry: 60
JSON data
downloaded
There are 6 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 --field-trial-handle=1980,i,8740578938344535938,8469441282259948654,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://rdgateway.hopethathelps.com/"

URLs

Name
IP
Malicious
https://rdgateway.hopethathelps.com/
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
142.250.186.68
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=gelayshls18n&aqid=vCEcZ43IE9qnjuwPmYWf8Ak&psid=7840396037&pbt=bv&adbx=375&adby=93&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=688160506&csala=17%7C0%7C2346%7C1933%7C1138&lle=0&ifv=1&hpt=1
216.58.206.46
https://syndicatedsearch.goog
unknown
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=2
142.250.181.238
https://rdgateway.hopethathelps.com/track.php?domain=hopethathelps.com&caf=1&toggle=answercheck&answer=yes&uid=MTcyOTg5Njg4OC4zOTQ3OjZhNGRmZjViZmQyNjBiODYxMDU1NzZhZTQzNmQ1ZGQ3ZGEzZWUyMDNmNWExMTJmMjBhZmVhMmNiNzBjZTM1YjE6NjcxYzIxYjg2MDVlYw%3D%3D
185.53.178.54
http://InquiryGrid.com/sk-domsale.php?dom=hopethathelps.com&eds=YnJva2VyYWdlQHNrZW56by5jb20%3D&_isk_
unknown
http://c.parkingcrew.net/scripts/sale_form.js
unknown
https://rdgateway.hopethathelps.com/track.php?domain=hopethathelps.com&toggle=browserjs&uid=MTcyOTg5Njg4OC4zOTQ3OjZhNGRmZjViZmQyNjBiODYxMDU1NzZhZTQzNmQ1ZGQ3ZGEzZWUyMDNmNWExMTJmMjBhZmVhMmNiNzBjZTM1YjE6NjcxYzIxYjg2MDVlYw%3D%3D
185.53.178.54
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
142.250.186.65
https://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
18.66.121.190
https://rdgateway.hopethathelps.com/
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
142.250.186.65
https://rdgateway.hopethathelps.com/ls.php?t=671c21b8&token=b0e9c90fd5889fd5b9d3744ef4afd7a7aa6d93c2
185.53.178.54
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=tx41mj2fcfkw&aqid=vCEcZ43IE9qnjuwPmYWf8Ak&psid=7840396037&pbt=bs&adbx=375&adby=93&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=688160506&csala=17%7C0%7C2346%7C1933%7C1138&lle=0&ifv=1&hpt=1
216.58.206.46
https://rdgateway.hopethathelps.com/favicon.ico
185.53.178.54
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
unknown
There are 6 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
bg.microsoft.map.fastly.net
199.232.214.172
rdgateway.hopethathelps.com
185.53.178.54
syndicatedsearch.goog
216.58.206.46
www.google.com
142.250.186.68
googlehosted.l.googleusercontent.com
142.250.186.65
d38psrni17bvxu.cloudfront.net
18.66.121.190
fp2e7a.wpc.phicdn.net
192.229.221.95
windowsupdatebg.s.llnwi.net
178.79.208.1
afs.googleusercontent.com
unknown

IPs

IP
Domain
Country
Malicious
142.250.186.68
www.google.com
United States
142.250.185.228
unknown
United States
142.250.185.206
unknown
United States
192.168.2.8
unknown
unknown
192.168.2.9
unknown
unknown
192.168.2.6
unknown
unknown
216.58.206.46
syndicatedsearch.goog
United States
142.250.181.238
unknown
United States
192.168.2.10
unknown
unknown
239.255.255.250
unknown
Reserved
185.53.178.54
rdgateway.hopethathelps.com
Germany
18.66.121.190
d38psrni17bvxu.cloudfront.net
United States
18.66.121.135
unknown
United States
172.217.16.196
unknown
United States
142.250.186.65
googlehosted.l.googleusercontent.com
United States
There are 5 hidden IPs, click here to show them.

DOM / HTML

URL
Malicious
https://rdgateway.hopethathelps.com/
https://rdgateway.hopethathelps.com/
https://rdgateway.hopethathelps.com/
https://rdgateway.hopethathelps.com/
https://rdgateway.hopethathelps.com/