IOC Report
https://myqrcode.mobi/qr/3c3aa5e1/view

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 59
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 60
ASCII text
dropped
Chrome Cache Entry: 61
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 62
Unicode text, UTF-8 text, with very long lines (49982), with NEL line terminators
downloaded
Chrome Cache Entry: 63
ASCII text, with very long lines (4366)
dropped
Chrome Cache Entry: 64
Web Open Font Format (Version 2), TrueType, length 35448, version 1.0
downloaded
Chrome Cache Entry: 65
ASCII text, with very long lines (16583)
downloaded
Chrome Cache Entry: 66
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 67
ASCII text, with very long lines (11073)
downloaded
Chrome Cache Entry: 68
ASCII text, with very long lines (2469), with no line terminators
dropped
Chrome Cache Entry: 69
ASCII text
downloaded
Chrome Cache Entry: 70
ASCII text, with very long lines (8008), with no line terminators
dropped
Chrome Cache Entry: 71
ASCII text, with very long lines (16583)
dropped
Chrome Cache Entry: 72
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 73
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 74
ASCII text, with very long lines (649)
downloaded
Chrome Cache Entry: 75
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 76
ASCII text, with very long lines (22319)
downloaded
Chrome Cache Entry: 77
ASCII text, with very long lines (8008), with no line terminators
downloaded
Chrome Cache Entry: 78
ASCII text, with very long lines (22319)
dropped
Chrome Cache Entry: 79
ASCII text, with very long lines (4366)
downloaded
Chrome Cache Entry: 80
Unicode text, UTF-8 text, with very long lines (49982), with NEL line terminators
dropped
Chrome Cache Entry: 81
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 82
ASCII text, with very long lines (2469), with no line terminators
downloaded
There are 15 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2556 --field-trial-handle=2524,i,5553506836258129109,7509686268691444302,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://myqrcode.mobi/qr/3c3aa5e1/view"

URLs

Name
IP
Malicious
https://myqrcode.mobi/qr/3c3aa5e1/view
malicious
https://myqrcode.mobi/_next/static/chunks/webpack-e189fffe8d015198.js
172.67.161.151
https://myqrcode.mobi/_next/static/3tY_0eiVjqFsDfdtXnjgl/_ssgManifest.js
172.67.161.151
https://myqrcode.mobi/_next/static/chunks/2962-98be0ca2599a6c34.js
172.67.161.151
https://a.nel.cloudflare.com/report/v4?s=3n%2BC4K%2FCFE6NAv6fXtshzaA%2FlZqDr2vauDk0TWIgR7%2FD3RLUcXbjVB6coZq2UdBjnNh9OEuXUZYr5cg2lMn0KCjFE6NidN17wHpco5ML3fTwixuhG4rUI1PJJ%2B9zKoCc
35.190.80.1
https://cdn-cookieyes.com/client_data/efcf1e87d2db4dbc05a100dd/script.js
104.22.58.91
https://myqrcode.mobi/qr/3c3aa5e1/view
https://myqrcode.mobi/favicon-32x32.png
172.67.161.151
https://github.com/zloirock/core-js
unknown
https://myqrcode.mobi/api/googlefonts
172.67.161.151
https://myqrcode.mobi
unknown
https://myqrcode.mobi/_next/static/css/6a6442a1fb2f4a5c.css
172.67.161.151
https://myqrcode.mobi/api/mobi-analytics
172.67.161.151
https://plausible.io/api/event
89.35.237.170
https://myqrcode.mobi/_next/static/3tY_0eiVjqFsDfdtXnjgl/_buildManifest.js
172.67.161.151
https://a.nel.cloudflare.com/report/v4?s=o36BfLg6jN91EGxVGJPRBoZx1bGdIaYfELz5vC4wyWmFxzvN7gOg9Bv1J93QXkJFKHK60ZiRZ45btpMNBHdEykZ8Mf%2FnbGPZwVmqv31e7LACys3QRtIyzlTVGHoRia3c
35.190.80.1
https://myqrcode.mobi/_next/static/chunks/framework-4ec25c719a5af25d.js
172.67.161.151
https://plausible.io/js/script.file-downloads.hash.outbound-links.js
89.35.237.170
https://github.com/zloirock/core-js/blob/v3.36.1/LICENSE
unknown
https://myqrcode.mobi/_next/static/chunks/main-349e5f1817b8d31c.js
172.67.161.151
https://myqrcode.mobi/_next/static/chunks/pages/_app-e93a84a923dedb22.js
172.67.161.151
https://myqrcode.mobi/_next/static/chunks/pages/qr/%5Bid%5D/%5Bmode%5D-7cffac3de498d4a5.js
172.67.161.151
There are 11 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
plausible.io
89.35.237.170
a.nel.cloudflare.com
35.190.80.1
cdnjs.cloudflare.com
104.17.25.14
myqrcode.mobi
172.67.161.151
www.google.com
172.217.21.36
cdn-cookieyes.com
104.22.58.91
unpkg.com
104.17.245.203
ax-0001.ax-msedge.net
150.171.27.10
stats.g.doubleclick.net
142.251.173.156

IPs

IP
Domain
Country
Malicious
104.22.58.91
cdn-cookieyes.com
United States
172.67.161.151
myqrcode.mobi
United States
192.168.2.4
unknown
unknown
239.255.255.250
unknown
Reserved
172.67.20.8
unknown
United States
172.217.21.36
www.google.com
United States
35.190.80.1
a.nel.cloudflare.com
United States
89.35.237.170
plausible.io
Romania

DOM / HTML

URL
Malicious
https://myqrcode.mobi/qr/3c3aa5e1/view