URLs that redirect found in: -http://directionrise.site/valse-aangiftes-racisme/1: -http://luckylife2019.online/?u=4xfkaeg&o=8mrpkza&t=wp → -http://game6563.hardmonday59.agency/4754212283/?u=4xfkaeg&o=8mrpkza&t=wp&f=1
2: -http://www.knack.be/medias/13260/6789241.jpg → -https://www.knack.be/medias/13260/6789241.jpg
See that the redirect content was overlooked and that’s why missed here:
https://www.virustotal.com/gui/url/7155e3a4233034e6bf71685a59e4551e42dc1a73a9526db855747d84f9eb653b/detection
But then we discover that not all is so all green as we first thought it to be, look at IP relations:
https://www.virustotal.com/gui/ip-address/104.24.111.56/relations
polonus