OSINT Reference:
1st URL ” https://makharza.ps/lehnpainting “
16/91 security vendors flagged this URL as malicious
https://www.virustotal.com/gui/url/415931704e9a49a2c7d293223f8065f28ca05790985e05c6baf7b575190f5969
https://makharza.ps/lehnpainting/ 4yr old
Google Safe Browsing: Malicious for makharza.ps
https://urlscan.io/result/019e98aa-e22e-7267-9ce4-886da0d84dce/
2nd URL “http://185.220.101.47/update/doc.php”
14/91 security vendors flagged this URL as malicious
https://www.virustotal.com/gui/url/1a8c4a2414bd8bb338833489132600ce74daf8c77eda57937fb035af36c2fdd8
No Classification
https://urlscan.io/result/019e9b3e-b3d7-72aa-86f4-cd29feec66c6/#summary
This IP was reported 6,561 times. Confidence of Abuse is 100%:
https://www.abuseipdb.com/check/185.220.101.47
3rd URL ” http://itrepeats.com/Project-point/ “
1/91 security vendor flagged this URL as malicious
https://www.virustotal.com/gui/url/184ec60ddac576e2a6ba5d86ae0f269879e2e0e1d68bfa2c25b151ab963c0ed1?nocache=1
No classification
https://urlscan.io/result/019e9b4a-02b7-7079-9f11-81d97ae45eb2/
https://www.whois.com/whois/itrepeats.com
4th URL ” https://beca-azul.com/requirements-precon/ “
URL: https://beca-azul.com/requirements-precon/ 3yr old
https://urlscan.io/result/019e9b5a-b121-7359-bf59-41fcf1ee50a7/
2/91 security vendors flagged this URL as malicious
https://www.virustotal.com/gui/url/dde685697ce44d50da4b51a21c698e928f8890c5097b09d061fc9de760507f21
https://www.whois.com/whois/beca-azul.com
5th URL ” https://getredd.org/ “
https://urlscan.io/result/019e9b6c-7419-75fc-8a5e-12737ff45aba/
No security vendors flagged this URL as malicious
https://www.virustotal.com/gui/url/442ea5bf7c1198f41118120f573cd709baaa77139c5585d1d4ed32abbc265f1c
6th URL ” https://manytek-verify.secure-login.xyz/qr?id=MT2026 “
6/91 security vendors flagged this URL as malicious
https://www.virustotal.com/gui/url/bdea8d478c3dd5fa385f48753005c2550ee9b12db9100f3dde122d882c85440d
Domain ” manytek.org “
manytek.org: 0/91 No security vendors flagged this domain as malicious
https://www.virustotal.com/gui/domain/manytek.org
https://www.whois.com/whois/manytek.org
https://urlscan.io/result/019e9b0b-fefa-74ed-80ac-a89c1a9e49cc/