Detected #KongTuke infection chain Compromised site --> caapman[.]me/ql8tbzbg.js (ClickFucker) --> caapman[.]me/api/v1/session (token) --> caapman[.]me/api/v1/verify (gateway) --> caapman[.]me/api/v1/status (clipboard) --> portalguard7797[.]com/b (cmd) --> portalguard7797[.]com/ue (cmd) 6389cfc4b6ac7726bed2b829bb320692528682276f292a1e39adfe373c15c94d b df2a191a0994bb1a7068b6653198b4fb2a57cabd572b9e1acffbc792dfed1a90 ue