Only eight engines to detect payload here?

[polonus]

See: https://urlhaus.abuse.ch/url/361002/
Re: https://www.virustotal.com/gui/file/c0f1a731510157a4601e458842c96ed5a236625f287e9dd77099f317dd514811/detection
Less on IP: https://www.virustotal.com/gui/ip-address/160.153.128.3/relations
Re: https://aw-snap.info/file-viewer/?protocol=secure&ref_sel=GSP2&ua_sel=ff&chk-cache=&fs=1&tgt=cHxuI3ttWyN7c3R7ay1nXXYuXl1t~enc
Failed to flag: https://sitecheck.sucuri.net/results/pandemidestek-gov.com
More clear results for this spam URL: https://fortiguard.com/search?q=pandemidestek-gov.com&engine=1  Category: Spam URLs
and these results: https://www.zonemaster.net/domain_check -> Test #1102826 - pandemidestek-gov.com  (no DNSSEC detected)

polonus