URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	gpshelpline.com
Domain registrar:	GoDaddy
Domain registration date:	2020-07-03 13:45:36 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-02-01 18:24:22 UTC
Total malware sites :	6
Online malware sites :	0 (0%)
Offline Malware sites :	6 (100%)
A record(s) observed :	24

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-05-17 13:06:36	https://gpshelpline.com/erah/?1	Offline	BB28 geofenced js Qakbot Quakbot USA	Cryptolaemus1
2023-05-11 16:31:19	https://gpshelpline.com/pe/	Offline	BB27 geofenced js Qakbot Quakbot USA	Cryptolaemus1
2023-05-10 15:37:16	https://gpshelpline.com/toc/	Offline	BB27 geofenced js Qakbot Quakbot USA	Cryptolaemus1
2023-05-05 14:13:12	https://gpshelpline.com/rmco/	Offline	BB26 geofenced js Qakbot Quakbot USA zip	Cryptolaemus1
2023-02-01 22:59:05	https://gpshelpline.com/TIIT.php	Offline	BB12 one Qakbot qbot Quakbot TR zip	Cryptolaemus1
2023-02-01 18:24:25	https://gpshelpline.com/TIIT.php?DEQMIU=5	Offline	BB12 Qakbot qbot TR	pr0xylife

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-05-19 18:48:07	76443e093ed6d6e3961cb5f9bbd546bab2d05f6bc2536c5744dc86f7a769bea8	js
2023-05-19 17:19:39	1cea0c4b1af9170b9ed2927f3b100d202bebd1b8e69ba1527336aaa6b2c0bffc	js
2023-05-19 07:48:15	51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4	js
2023-05-19 07:09:01	bbcdb87a842c5157acea98f0cedd358f764e2613b6a635e4f9f5946de8c07780	js
2023-05-19 06:31:21	1a2e818afb29521c8658d2a0643158af97370d69c32c0bd85cb900bd3e85b0ee	js
2023-05-19 02:12:56	d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37a	js
2023-05-18 23:21:15	d3c6e06204212c1aeeef29809460056535cba3beca8cf163b7c8719671ef0c9f	js
2023-05-18 20:41:37	6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59d	js
2023-05-18 18:48:47	d76b1300fd995ec8def343df0450c11a58a217803fee3749db4afacebc64182e	js
2023-05-18 16:44:01	c74cf0cb7927a8438a84c9cedbdbab3e4815550813336043f39674a67b6a021a	js
2023-05-18 14:18:48	4a3df2bd7ab7f504154d39c26bcf71d76731cfc506a9de0de59f5b6c2a71a191	js
2023-05-18 12:43:16	47838303934003e958511bf93e4b40816c144d7ddb6c99ad7cdda7145ee5dcf8	js		Quakbot
2023-05-18 11:42:25	05dab37be019900d575f8a51485f2baecb4fe212712970c486fb711a173c6290	js		Quakbot
2023-05-18 08:52:51	f14437be247480b6af38f3ccdd4ba46e6e55eb7b3d706b8df711f63558b8703f	js
2023-05-18 08:04:25	c426bcba8c0bf1790fa05cb78d763ad67bedd1b1bc3eec6b4902700e097a1a0f	js		Quakbot
2023-05-18 05:40:54	269dec903e55df2babe1cb8bb498ac7fe56d2a079cdf89c2d5c354b7a8fa1250	js		Quakbot
2023-05-18 03:53:56	80ab380263a5873a2a0e5bf0f6970a2c5a2f1bb6ced244bb881a685269c5d92c	js		Quakbot
2023-05-18 01:35:10	f32e1256022a37c93429f2df0c87540583119ca913c038a1bce835786a3891a9	js		Quakbot
2023-05-17 23:24:31	32191ec86c3fda99957a4e78362b4bad01545ffe830b5b5c5c32ed9c92fc58eb	js		Quakbot
2023-05-17 21:20:21	e097747aa43ca0c5787d98ebdab3ab67fda12444d287a4a0702a670f0b2494d3	js		Quakbot
2023-05-17 20:07:47	d5e6e30f18f2d0670de3202c27c125583667cb6be60aee992f59e72d23eed864	js		Quakbot
2023-05-17 18:35:18	3f81d638187365133a7541ec95cc8cdedd33693b4fd6331e5fddb2281147b873	js		Quakbot
2023-05-17 17:21:02	b3d737c721d3c5e7e58a28f076c7fc26e6ebaab2f08f52e645c645c0b8536210	js		Quakbot
2023-05-17 14:52:50	f4fb9e206467712813d87a31c0ea3285bf1a5ad9658839ca77ac0a61dcbf0693	js		Quakbot
2023-05-17 13:06:36	0b7fccf63d874ff825b5a3e790311b7dd0923c82b142520db78f43a8191e9216	js		Quakbot
2023-05-13 20:20:48	be3228d05db364a88082dac9007b5fe5b02be518df551288c911451773f7f9fa	js		Quakbot
2023-05-13 18:30:55	f5c8803a543be8334f9d0c505a846d4dc9cdc27465157c98010ea28a772fdd59	js		Quakbot
2023-05-13 17:44:10	fdab7280b8743e4a1e6583652c52090b779f8881862e0c9e8dbaaaa26aeb4760	js		Quakbot
2023-05-13 16:05:26	5adadf1565f009eb15593c49d00c35426e85144816dcc9d8d3c0864743665892	js		Quakbot
2023-05-13 12:33:34	fe750a4730ae80ed8c3c7aa00e27d13c27bcb465bb819f36305449bf646ce242	js		Quakbot
2023-05-13 12:22:01	7f0954243ec0efbcaf0a6ed52b043b5960dc357f0428cd6ca8acafe4c5dd0d19	js		Quakbot
2023-05-13 08:59:18	fdb283489de7dda39b04e4f86abb7f31c9648c337c42fbe4e0b5442bdf16783f	js		Quakbot
2023-05-13 08:45:20	ae7ce16eea44398ea9e719dbed8845e5e0a28ba6ff2b9726ea62c0c0a81ad3a3	js
2023-05-13 06:41:44	f845d71d695c9748c14d12deea01525f21290a7332e08e2a7759934ce3d8e854	js		Quakbot
2023-05-13 05:08:00	e01435e3beea4a49bfd32f8fc0de1625328ff8fe40f1f6faa83c76457bbce654	js		Quakbot
2023-05-13 04:40:04	8d487da8ad46817a1e0e6afae7ad3cad712cb0b0b0e769ad310caf1971d1bde7	js		Quakbot
2023-05-13 03:14:55	ef69c1415ea99efbe1fdc42a3eedff16e268529ce88e634efb15de340556e1a3	js
2023-05-13 00:10:12	1bd24a4eada97ab9256a271d414a8db20effd09561ac7417a87f29087f3fb0ba	js
2023-05-12 23:57:37	221f1787da0e835964a10c152dfab146abcf4aa7aad13d819cbd627f1f8432e5	js		Quakbot
2023-05-12 22:03:14	587bd96f82d47ae3fbb47faed0cd504badbebd4badd24d306030f9ca5c19d2de	js		Quakbot
2023-05-12 19:35:11	f45b1166eb0bd88dcfca6c6eddaf294a623bc7893c067c5973b6cc312a0f0c93	js		Quakbot
2023-05-12 19:16:22	f5678477fc9b4764e5ad2b86c43967aef05da51cd8540a8f47f3da1a8c0d6d4e	js		Quakbot
2023-05-12 17:48:34	7f5686a0ab03c0831a569d56be322fe5669489a2c8fe16aa0a632084b9515934	js		Quakbot
2023-05-12 17:27:32	35aa40f22a0f2acc73f4fd645996d16d48a1ff1b5b5daa08132580e4813d7995	js
2023-05-12 16:58:43	839167fcd0bfdf1fe5d9f7cdbf458cc65fb3af54d44f4a121daf864ed435b784	js		Quakbot
2023-05-12 16:45:09	92fa3c8714b70952fe0b3071102211eac0729a1a75014dbb4299e829895d2c09	js		Quakbot
2023-05-12 16:06:14	6fd42a87983d10bb1201eb2da9261ce49befe9b890a4a5b1d5102152deb3b432	js		Quakbot
2023-05-12 15:53:10	c498741e2421e9025d61b4bd6c86cf4e9952b4c85ca23e3e914733a44aa2a3f0	js		Quakbot
2023-05-12 14:09:11	6a59d8e18a9bc6f8855b870a730934006d30eaf519309dc277b0aaf5961841e1	js		Quakbot
2023-05-12 13:27:52	8d3353431bbce2698acb720fb051557cffa0ca1c320b655149b148645f62ad62	js
2023-05-12 13:12:55	121cf46558311f2a7250f46a81c945a4966656f5f15f22de6e202fbad4ba4562	js		Quakbot
2023-05-12 11:29:12	63acd7d0fed090ce30f0a597557f4f2219c0431026f4bf8ef73597967d388e91	js		Quakbot
2023-05-12 10:53:12	02360ba93237c4fe0c841a25f3cee7b42b54cb9ed2004a0dde42111439134f11	js		Quakbot
2023-05-12 09:30:25	1ff2459b25905f786ed26029323a99628ab0530830ab110acd864e0edaeced74	js		Quakbot
2023-05-12 09:15:30	c08bce4a0700a837c143cb3a575e99c29a246dd352559f62dd8fcef436d4fb2b	js		Quakbot
2023-05-12 07:43:18	24b546d8bd363ef2bbb8a51bdc51379e05fdb77e291cd19bccc7768715eaab71	js
2023-05-12 07:31:52	f9e7468c96d756723b3c98acb07a1ec1cf46b94f1491577405bb365b6384562a	js		Quakbot
2023-05-12 06:36:35	f5ba6685e4252f4517603f68b6cf0c920e8a9142736909c99954cb916ea9e19a	js		Quakbot
2023-05-12 05:34:28	0d5ced4ee5ec50ec1cbbd4efbf3a7937437f79281b4c8ebc9d350899efabea96	js
2023-05-12 04:56:21	230bd0c6a6e4edb505d683eb9f03d00d3709c29e1b377a71fcb640f7d0ac2c16	js		Quakbot
2023-05-12 04:45:01	bcc5b17caa39266b3e0cb38366a1b9268c6b2d46748cb8bf6fc2abd541ecdf37	js		Quakbot
2023-05-12 02:27:59	5410d2ad48f6e2f74caeeadd319d9952b071b991eb6aac27f88f419d9186f32a	js		Quakbot
2023-05-12 02:21:36	d02c2355eaf21ff70b46bf1a52cc6910010e9b08518e5c29e3a9d33667b72779	js
2023-05-12 01:54:46	ee1cd51aaa40a3176b2d4397b7b3554331956e8f66cc29dc920e07054d271e75	js		Quakbot
2023-05-12 01:52:50	03fa1c7fc8e2b658fe711bac3815b4ec87c693b761dd98137e900b90d530c59e	js		Quakbot
2023-05-12 00:34:12	bffe751c875b3657ddb7a383b26c9979e1c528e2a3c1e43a443602f61b6d1f35	js		Quakbot
2023-05-12 00:10:13	71e9c1762bb90deef9a3c6b35c4f89d4f2ecaaa0bb9096d642a0d751be6cd633	js		Quakbot
2023-05-11 21:56:45	8bf70679b9fa1fe8469045b90cc118ef4388f5f0eb918c0e65dca218892111a6	js		Quakbot
2023-05-11 21:20:14	747c93cf966c1f321c2056ab8fccce65a27862d2d74a48b020b4b5ae5a5d4fdf	js
2023-05-11 21:05:42	6165d221ebb822ba26db9cae05734f21ebf3498ccc974c493b088cbf78ce2d84	js		Quakbot
2023-05-11 19:27:11	ccebf258ddf8dc3b94cca55758f13d9b3b41fe9735c417be94f56c0f451fc1fa	js		Quakbot
2023-05-11 18:33:57	549b8a162e7d2346ae237d153d6b6c09b1c700dc61f07656487f01c0c64b6a53	js		Quakbot
2023-05-11 17:36:35	0e9a3fa0aaa1442cb47786b876ca37f25bb7ac9514cc1f9dab30ca671108d2b4	js		Quakbot
2023-05-11 16:56:53	5ce0fcdf2e27dd25b2c9f09127f3a6597ddc191bc10871afc2cde6698713042b	js		Quakbot
2023-05-11 16:31:19	67b58ea27f5c9bedebbb4469bec4a79e7782926585d7da90b5d14e06e1440d3c	js		Quakbot
2023-05-11 14:08:31	f555eb92f26d831f1043e14e90a4e2fa1a741b06a4d9b778d0300f3c0fafd516	js		Quakbot
2023-05-11 13:37:56	0082530f9fed39aed347699ab62074d3c5879cdb5cec4055187cfc04dda83a33	js		Quakbot
2023-05-11 11:04:47	c5cb829cfc43520b5a606b4bfd567c326c0bf1ddf0589ceca277546bdf52e4f6	js
2023-05-11 09:05:04	19e5c2def2d3967155704e5931f9f48020d4fd7867dd59fc648225484a6eb8bb	js		Quakbot
2023-05-11 08:37:52	fbd0c67402ea45ec830647be58f19ff63912348e140e856ae8f3859498a337ee	js
2023-05-11 07:59:54	fa9ab74e98d7bc3f34d51e5c39f16fce3895d0301b465c8db757d66fe5376d11	js		Quakbot
2023-05-11 05:20:11	312c0cbb39eff817df0f42c519696a153e467c1b9bb83f53bb30f9871207cf8b	js		Quakbot
2023-05-11 03:48:14	b363e29c31ec632e093c0846421ac08cabae704be7f71e4978de3a3d345407e8	js		Quakbot
2023-05-11 01:03:10	b9845e83d217d1db42f0ab1260cd1886ef8d1f7032c9f55cd98ca40cad2924f6	js
2023-05-11 00:09:51	7c0eff281bcd44c6b5baae8736d1b4c8ba4df8b501918154ef0bceced7e3695a	js		Quakbot
2023-05-10 21:52:04	7ba608642e7f98d19a3ec923230ef347045d6f8f294c28796ecb141d8a767a87	js		Quakbot
2023-05-10 20:25:13	b9be0f55bfdeaeba51f10f26b48355c432c792bc1996f73f26e2a486bd2edb2c	js		Quakbot
2023-05-10 18:29:08	4b488a839df6dd7210dc4c10c9d787b85367cfb8229a95694e3d1b1467d686e5	js		Quakbot
2023-05-10 17:23:10	aca22abacf40c930e9d82b17cc4744b6e44f281a4554b642e1da5a4720fc136f	js		Quakbot
2023-05-10 15:37:16	c720b32bacbf9a2f3605a50b084df686962d42d019a5d1606e72fcd1060fbd73	js		Quakbot
2023-05-07 17:56:12	d57e120e01cd45a813d0d8ff2f7511221800c27c49b0fa15f8e3a3bf6bd23e71	zip		Quakbot
2023-05-07 15:59:31	19c5701a28448549c38bb788030652759f99aa232e3848f68882fcf1f330bb45	zip		Quakbot
2023-05-07 15:49:30	6518f93ab580fe9ca638c026591c15e2ed6cd9c8a9987558ac74f4ba0c2401a7	zip		Quakbot
2023-05-07 13:16:06	c18329636c4e6e548863ca77441ff407a43cf0c9cf14cb5bcf6964fc7ef02a59	zip		Quakbot
2023-05-07 11:38:28	d68f13bc5ae4a2874879c8a37654b937893b85986a336eb87d55e14fd11d7ba7	zip		Quakbot
2023-05-07 11:12:47	8ac22a6c4e40b97c4a0d7e8081cceb1ddb6ee6cf5acb0f00b19607c4ef7654fa	zip		Quakbot
2023-05-07 10:11:56	822d3e2270b19658d07109e047cec13b732c2caf5ef22b49bcca1eba8da3f132	zip		Quakbot
2023-05-07 06:39:36	841e19efd16aa4e41a72f57a167031ab005dc8a8629dc2917f23f3c304041c22	zip		Quakbot
2023-05-07 03:30:49	867101ad83bddf6911db0cfa89cec06b9feea601ad74b822343f61175de7e87a	zip		Quakbot
2023-05-07 02:14:38	e358ae8cfef3715edf028d3ea5756267f9cd960ef0b30dab9ebfaa191a11f940	zip		Quakbot