IP domain launching malware - also PHISHing website...

See: https://urlhaus.abuse.ch/url/276203/ recent detection *
previous abuse from that IP and domain: https://urlhaus.abuse.ch/host/namdeinvest.com/
VT: 30 engines detect *: https://www.virustotal.com/gui/file/97aa7849ee30e88e96f58edae0d535a179e2f2c712d01f6adc1f3223c4fc1cb9/detection
Flagged URL: https://aw-snap.info/file-viewer/?protocol=not-secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=NjMuMjUzLjE4Ny4zNS5iXi5nXV1nbHt1c3t9Xl1udHtudC5eXW0%3D~enc

polonus