URLhaus Database

You are currently viewing the URLhaus database entry for https://vitoturizm.com.tr/ao/ao.js which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2568896
URL: https://vitoturizm.com.tr/ao/ao.js
URL Status:Offline
Host: vitoturizm.com.tr
Date added:2023-03-13 17:51:12 UTC
Last online:2026-08-19 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2026-08-18 19:52:17 UTC to abuse{at}trdns[dot]com)
Takedown time:3 years, 5 months, 24 days, 5 hours, 18 minutes Bad (down since 2026-08-19 01:56:27 UTC)
Tags:BB19 geofenced js Qakbot link qbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-08-18ao.jsjs 5ac2a1223be08bf0fc6b7994ce63ffe6697f93bbd485dfd0c196e32b9c8d1189n/a 
2025-05-15ao.jsjs 96385f9f8c83d3ceb3d05f183974c02e9966bf0a5d5238c29cd7551e3a6810f8n/a 
2023-03-24n/aunknown 389a55361fa21cbf80c566f664e95f09348c88e578a75e6bfd4a052c0188490bn/a 
2023-03-14j6410410e72aff9.91791038.jsjs a21360405be6e56f6de6942effde618800ef379301737b09e69ead448168f6cdn/a 
2023-03-14j640f3d42067346.73507503.jsjs 2e659faf42925e99d52d28b3b775ac46da574194f096ca182da8b21e8c8ca7a4n/a 
2023-03-14j640f3d81f21330.36326677.jsjs 26a7d55de600fb0cbbed1219d7cb795b226a9d32991d85008f21e35b6b9d05c7n/a 
2023-03-14j640f3d54806ae6.90524922.jsjs e1651ec6c728e37d0781144c04fc57309477db021b8ab0b282a24de2f2afaa69n/a 
2023-03-14j640f3d34e5f647.48339648.jsjs b6a4b9a520627f95b2ebbcda65a466cd4033a33c76b3a15074b3ba9fa5e2e219n/a 
2023-03-14j640f3da1ecf6a6.63918498.jsjs 48548506443dd12287586b5825a2082bf23a34093d62ff5cc48b8ba6695970d0n/a 
2023-03-14j640f3db394be74.58991065.jsjs d67e3650d8efc6e0b582a1b3f1815106a7671d9688c67eea011074b296fe3d16n/a 
2023-03-14j640f3d9db28ca2.54610508.jsjs b2ba271e6e730f99298ef861caa35bd4a0c6ce4620380f9f8fa8d86fc66b786dn/a 
2023-03-13j640f3d8f5edb25.32197903.jsjs eb9f19b4ab56b35bcadf4d09cf192d03db52f98f21bed621f21074da1d2c5b4en/a 
2023-03-13j640f3d5c7db585.52696603.jsjs 691487bf9f45e035073cd1b97a846479a5cf429de83a9ab4c3481ece90cd4309n/a 
2023-03-13j640f3d3e9f7000.33516914.jsjs 9974cbdc09fb6cf5ced212931ac6122b1e99c4d118eccf995012aecf7b8b7149n/a