IOC Report
https://verfolgung-lieferung.com/

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 47
ASCII text, with very long lines (4130)
downloaded
Chrome Cache Entry: 48
HTML document, ASCII text
downloaded
Chrome Cache Entry: 49
ASCII text, with no line terminators
downloaded

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1988,i,13561813307444518598,8550125657946740424,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:///
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1472 --field-trial-handle=2020,i,16182902776104794911,17808291068387575927,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://verfolgung-lieferung.com/"

URLs

Name
IP
Malicious
https://verfolgung-lieferung.com/
malicious
https://verfolgung-lieferung.com/
malicious
https://www.google.com/async/ddljson?async=ntp:2
142.250.65.228
https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgSaEMC5GInisLEGIjDY8BWI55qtsBfvKYypNUoXk8e-qXWPOoRAvpm18kdAuv6EmFr9hTrtPKKjXKnRJEsyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
142.250.65.228
https://www.google.com/async/newtab_promos
142.250.65.228
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
142.250.65.228
https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
142.250.65.228
https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgSaEMC5GInisLEGIjCb1PQsCK3wlh_RoUIhVyB1L2RNm_8BX9qUEfwNPmaedyhLy3ZK06RM5jQudE7GFMUyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
142.250.65.228
https://verfolgung-lieferung.com/favicon.ico
45.139.104.76
https://www.google.com/sorry/index?continue=https://www.google.com/async/ddljson%3Fasync%3Dntp:2&q=EgSaEMC5GInisLEGIjDVycyTl-7jqrr_EzO5RoA8C0X8ZVAJvc1SPaKTFtJqhYVYmtRpN38AQf9MHQijsmkyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
142.250.65.228

Domains

Name
IP
Malicious
verfolgung-lieferung.com
45.139.104.76
www.google.com
142.250.65.228

IPs

IP
Domain
Country
Malicious
142.250.65.228
www.google.com
United States
239.255.255.250
unknown
Reserved
45.139.104.76
verfolgung-lieferung.com
Italy
192.168.2.4
unknown
unknown
192.168.2.5
unknown
unknown

DOM / HTML

URL
Malicious
https://verfolgung-lieferung.com/