URLhaus Database

You are currently viewing the URLhaus database entry for https://antleds.com/eu/eu.js which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2573709
URL: https://antleds.com/eu/eu.js
URL Status:flame Online (spreading malware for 3 years, 5 months, 9 days, 4 hours, 41 minutes)
Host: antleds.com
Date added:2023-03-16 16:20:14 UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2026-08-05 03:59:17 UTC to abuse{at}amazonaws[dot]com)
Tags:BB19 geofenced js Pikabot Qakbot link qbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-08-05eu.jsjs 6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023n/a 
2026-03-06eu.jsjs 1809e2dc5f6e61e4aa2764220b4a611fc89ed71483a47bfa3280d4fef81dacb9n/a 
2026-03-06eu.jsjs 063d873135bd8f341b072732846df689e464e081dee3ebc94d95d69cbb3a8ba8n/a 
2026-03-06eu.jsjs b9f27f5d0cb1fe3157079168212f0833fb3b4cae04c4e2fa4f4acee8b87d5264n/a 
2026-03-05eu.jsjs 66a04ac6e0bfcc9cd210786d2fd4abdaa12e1032144d474b1625229e12e60884n/a 
2026-03-05eu.jsjs 439fd374a9d7b6ec9a6aba723a4f2b02e83f1a6bfce2b8236bfdc48dce88bc09n/a 
2023-03-17j6411d82d04fb82.15865956.jsjs 3e0317b9be73ed6c2ed2bbc176f41e7f7bcdf4dfdbdb3620eeb4d309144fca6cn/a 
2023-03-17j6411d8cc4a4aa5.60407606.jsjs 0a055b941b0e6ac853e3ebeff8d7d362f6d31126361c5bf0397269da6ed4265dn/a 
2023-03-17j6411d8919a2cf4.44421235.jsjs c9cb1e6d5b924c33e3af0b66aecdffb7c2721ff029c1b4f6d7514ce9c4f006d6n/a 
2023-03-17j6411d831409e58.92250613.jsjs e1d5a533e53c3d5987e3efdc8de7c8a9073a0ad6e88ae70d37b789a2bfeb5492n/a 
2023-03-17j6411d8b70b6785.34892464.jsjs 4d11748f84391924d5b7afa6a4df8d922250c7a15eaaf3b04f5f9e6cfc18b46dn/a 
2023-03-17j6411d89589a3d1.27925302.jsjs 0b5e7aab111e3080d9e421770ba899627815acf8d0502cd053d45049ec293b57n/a 
2023-03-17j6411d8583bd595.88750531.jsjs 246d2dd0df1e6fbfb5a218cca92c38d0b28e4223549f8b57849b1aca9a1b63cbn/a 
2023-03-17j6411d85289fbf3.96902914.jsjs be5e6b7a43b83acdaf4169a32cd1206afb1b918fa34f1ed324d678eb238a5b77n/a 
2023-03-17j6411d83a9fa996.49844523.jsjs f8add5587a9e8d65dc18035a6ac0ac708537669a4256df3d9767d3bb7aeb638en/a 
2023-03-17j6411d831d1a5b4.12921185.jsjs c0de2bf1230b3e6ef1fc9f3a3a4981584bb3799d375ba8d808d7edad9bc14f28n/a 
2023-03-16j6411d821b3e405.82800739.jsjs 51f0bd67563459cf3e71807a36bce13d5a3887b6d166f93372195b33fc2fa998n/a 
2023-03-16j6411d815a65828.45240308.jsjs bdf54de01e8f68dc39a20d34c6c119e76e5bfc7285b889bc827778f3a4a67de7n/a 
2023-03-16j6411d80678b6b3.36408002.jsjs 2b6a00d0c77660b97ae8dae1821071e9765015b912245fc744f813cd80002dd2n/a 
2023-03-16j6411d7cfe09911.78383104.jsjs 317e4bd398d53c223458c6a54ce1f30b4fbb45bbcf9bdd6a4bdb4da66d22a18dn/a 
2023-03-16j6411d887c48390.35824377.jsjs cd5104698887e6d79fd65341d698d95a11723dd561fbf73d2eba6be582ee52a9n/a 
2023-03-16j6411d7f387d7d7.35990994.jsjs 2046fe0d43ab8adb8176c1aefbceff6c4982750089fc828a4432f2c993b95818n/a 
2023-03-16j6411d892c1dc14.41810536.jsjs 94c40d9c97a8447608fca0bfd0ccbd13eaf2d4b347f7333cfa6ad9d80815977bn/a