Indicators of Compromise

routing-COUTFQvQ.js

slug-DU9SDaxz.js

manifest-e4e2d80a.js

metadata-xIoUEp3L.js

warning-CKXTYl2p.js

transition-graphic-01UYO5uE.js

6QvO1GDz.js

logins.json

http://vimeo.com/api/v2/video/804838895.json

ncnskjhrbefwifjhww.tk

http://wjecpujpanmwm.tk/updater.php?from=USB1

wjecpujpanmwm.tk

NODE.JS

119.171.208.22

118.106.203.228

https://d22f0f.icefactory.cl/0BhByDS11fvD64dug7WDsA7cs1ERnT22tZnP9xHflLe6aj9A0K55Ge1m85jkOLLt/?rotated=1

OpenPhish: https://d22f0f.icefactory.cl/0BhByDS11fvD64dug7WDsA7cs1ERnT22tZnP9xHflLe6aj9A0K55Ge1m85jkOLLt/?rotat...

http://bomevn-adhj.vercel.app/

OpenPhish: http://bomevn-adhj.vercel.app/

http://acessodhj.netlify.app/

OpenPhish: http://acessodhj.netlify.app/

180.28.112.157

https://vh18413.vh.net.pl/TD/TD-ZE5KIzX0UW4&oauth_key_signature=eyJraWQOiJrUFVqdlNhT25GWUVDakpjMmV1MXJvNGxnb2VFeXJJb2tCbU1X3BiZXN/app.php

OpenPhish: https://vh18413.vh.net.pl/TD/TD-ZE5KIzX0UW4&oauth_key_signature=eyJraWQOiJrUFVqdlNhT25GWUVDakpjMmV1M...

https://vh18413.vh.net.pl/TD/TD-ZE5KIzX0UW4&oauth_key_signature=eyJraWQOiJrUFVqdlNhT25GWUVDakpjMmV1MXJvNGxnb2VFeXJJb2tCbU1X3BiZXN/loading.php

OpenPhish: https://vh18413.vh.net.pl/TD/TD-ZE5KIzX0UW4&oauth_key_signature=eyJraWQOiJrUFVqdlNhT25GWUVDakpjMmV1M...

46.185.163.235

http://www.www-connect.secure.werllsfargo.com.jmvlogistics.in/

OpenPhish: http://www.www-connect.secure.werllsfargo.com.jmvlogistics.in/

http://www.www-connect.secure.werllsfargo.com.jmvlogistics.in/sing_on

OpenPhish: http://www.www-connect.secure.werllsfargo.com.jmvlogistics.in/sing_on

https://lawoccjd0cbhonysmyi12vtlnbn8jtmjdsf45-h12v.vercel.app/

OpenPhish: https://lawoccjd0cbhonysmyi12vtlnbn8jtmjdsf45-h12v.vercel.app/

https://ipfs.io/ipfs/bafkreicufizka7xbbl32bvntiyjz4l6k6j666jqwo2qtabg44nel7s34ju?eta=[[-Email-]]

OpenPhish: https://ipfs.io/ipfs/bafkreicufizka7xbbl32bvntiyjz4l6k6j666jqwo2qtabg44nel7s34ju?eta=[[-Email-]]

http://ffp.rjg.temporary.site/

OpenPhish: http://ffp.rjg.temporary.site/

https://s.teams-tc.com/p/fjbd-cbch/ttyqlyik/

OpenPhish: https://s.teams-tc.com/p/fjbd-cbch/ttyqlyik/

https://melioniserv.justns.ru/dkb_/login.php

OpenPhish: https://melioniserv.justns.ru/dkb_/login.php

http://ertomaincertewhj89.wasmer.app/

OpenPhish: http://ertomaincertewhj89.wasmer.app/

https://www.ffp.rjg.temporary.site/

OpenPhish: https://www.ffp.rjg.temporary.site/

https://programaflexja.s3.us-east-005.backblazeb2.com/aumento.html

OpenPhish: https://programaflexja.s3.us-east-005.backblazeb2.com/aumento.html

https://verify77183.web.id/payment/banks/Canada/desjardins?hash=88863237

OpenPhish: https://verify77183.web.id/payment/banks/Canada/desjardins?hash=88863237

https://revisaodedisponibilidadeja.s3.us-east-005.backblazeb2.com/aumento.html

OpenPhish: https://revisaodedisponibilidadeja.s3.us-east-005.backblazeb2.com/aumento.html

https://aneesurrehmandm.github.io/Netflix-Clone-Project/

OpenPhish: https://aneesurrehmandm.github.io/Netflix-Clone-Project/

https://tzr-jern.maxwell15.workers.dev/

OpenPhish: https://tzr-jern.maxwell15.workers.dev/

https://divyasri-raju.github.io/Spotify-clone/

OpenPhish: https://divyasri-raju.github.io/Spotify-clone/

http://tk.ercajchain.com/

OpenPhish: http://tk.ercajchain.com/

153.192.135.106

110.233.163.180

222.6.218.108

119.245.83.165

124.32.174.38

http://storage.googleapis.com/jhjh0jh0jh01jh01jh01jh0jh1hj1jhhjjhjhjhhjjhj/Bellingham.html

TweetFeed: http://storage.googleapis.com/jhjh0jh0jh01jh01jh01jh0jh1hj1jhhjjhjhjhhjjhj/Bellingham.html

176.241.71.127

193.218.118.188

193.218.118.173

115.65.93.179

y7sb1j03.theslimsplits.com

ThreatFox: ClearFake

jackbelmontbarbers.com

ThreatFox: ClearFake