URLhaus Database

You are currently viewing the URLhaus database entry for https://zonaah.co.uk/lmo/lmo.js which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2568892
URL: https://zonaah.co.uk/lmo/lmo.js
URL Status:Offline
Host: zonaah.co.uk
Date added:2023-03-13 17:51:10 UTC
Last online:2026-08-16 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-03-13 19:00:16 UTC to abuse{at}inmotionhosting[dot]com,abuse{at}ramnode[dot]com)
Takedown time:3 years, 5 months, 21 days, 6 hours, 55 minutes Bad (down since 2026-08-16 01:55:45 UTC)
Tags:BB19 geofenced js Qakbot link qbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-08-15lmo.jsjs f2aa4e9f141c3b756d7872dff2da0244ad68924584443c12526fc223e38659d6n/a 
2026-08-15lmo.jsjs 8ce2d8cc32fcf713015b4ff09be770bf36a3e42c60d5acb4be5e7dc234f880a4n/a 
2023-05-06n/aunknown 3b288837418b8ef6d3d0b72df2eb4f4d308e693ffa4afd35440e110a71b66555n/a 
2023-03-14j64102c62bdf092.60000800.jsjs 06753385d4ef9cb0892325a08af30669a8607a98e529c84ee10c09250c5a2a20n/a 
2023-03-14j640f3dd2c2c920.99587698.jsjs c55704caa24fd27443a8278a439b2ca784300c5a4ff879aa00ca7248f51ed4ban/a 
2023-03-14j640f3d828fc899.99795542.jsjs c7362516a9ba64736f561964c6d3e8ca8ab2bf61fc21ee0028a77c07b7e90b65n/a 
2023-03-14j640f3d71204d17.94132209.jsjs 97d36055cbfa5e8268d2a09b6424a0f5a013f6663263d81363fc5712755a206dn/a 
2023-03-14j640f3dcf16c344.76986300.jsjs 83aa4db7ada57e02173bac279f2bd084b943a6a2c3e291abc289c88340283149n/a 
2023-03-13j640f3dd62797e6.85409328.jsjs 063c515324b460dd78e8fb258b49af7f7d799522a6b067b4cf53ae99f5b4cf36n/a 
2023-03-13j640f3db6e5b619.01960494.jsjs e48c0ea560039f49e76639ebece98f51920e0cf8167671096da75ddba0e025e6n/a 
2023-03-13j640f3d99e61371.10672657.jsjs a0c32f5e6115adbdcc8200b5b393eec3ac58eb5babd4a37e56705901b83abc00n/a 
2023-03-13j640f3dd7e592a7.96219856.jsjs 00ad58ef7105b224786c59a17ade586f29691b31260dc5116de8d2107f9da8b4n/a