02-19-2023, 11:48 AM
Izgleda da je bio kompromitovan tracking.ddor.superkartica.rs. IP: 18.198.163.56, zemlja Nemačka, provajder Amazon AWS.
VirusTotal: https://www.virustotal.com/gui/url/88a6d.../detection (Fortinet: Phishing, Webroot: Malicious).
Ova IP se pojavljuje i na nekim drugim mestima ali nisam uspeo da otkrijem šta tačno desilo:
- https://www.joesandbox.com/analysis/410002/0/html
- https://otx.alienvault.com/indicator/domain/copel.com
Isti slučaj je i sa tracking.marketing.superkartica.rs: https://www.virustotal.com/gui/url/270d0...?nocache=1.
![[Image: attachment.php?aid=615]](https://bezbedanbalkan.net/attachment.php?aid=615)
VirusTotal: https://www.virustotal.com/gui/url/88a6d.../detection (Fortinet: Phishing, Webroot: Malicious).
Ova IP se pojavljuje i na nekim drugim mestima ali nisam uspeo da otkrijem šta tačno desilo:
- https://www.joesandbox.com/analysis/410002/0/html
- https://otx.alienvault.com/indicator/domain/copel.com
Isti slučaj je i sa tracking.marketing.superkartica.rs: https://www.virustotal.com/gui/url/270d0...?nocache=1.
“If you think you are too small to make a difference, try sleeping with a mosquito.” - Dalai Lama XIV