URLhaus Database

You are currently viewing the URLhaus database entry for https://lumacrea.com/me/me.js which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2573732
URL: https://lumacrea.com/me/me.js
URL Status:flame Online (spreading malware for 3 years, 5 months, 3 days, 8 hours, 27 minutes)
Host: lumacrea.com
Date added:2023-03-16 16:20:22 UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2026-07-30 13:40:30 UTC to abuse{at}cloudflare[dot]com)
Tags:BB19 geofenced js Pikabot Qakbot link qbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-30me.jsjs 9da7a8b227db171ca94c3497e82ba5c6398223e1f332a519ec0fb7a2d5e87fe4n/a 
2023-03-18j6411d872726463.60544231.jsjs ede8a4285d64d446a2907be5c4402ddcbadbdc9a0c9e8ab7df02d9d55bbb62f0n/a 
2023-03-18j6411d86f8c66b7.74679241.jsjs 05e7bb4d9e3a09b7f497182328e9442b1587e9e1a6a07afcd3c3e13b8896ccb2n/a 
2023-03-17j6411d85e353a04.69121564.jsjs e83d82d1b01e46340a093dadcc0e357e40b13e7c52588af553bf17650cd99472n/a 
2023-03-17j6411d850efc229.30834300.jsjs 6a39742237daac094a8a37126d484e8de3bfdf77d636bcbfb2e44894b45c4f3an/a 
2023-03-17j6411d843e014b8.98029501.jsjs e5f60cec6f725b56571298544772258f43bc507447ce59cc55ee538d762829adn/a 
2023-03-17j6411d818928f61.38716373.jsjs 847fef59302a360958f5bf7257f5cfd2f74fcf4b7ca9965b4ff6001a2d9e0c2fn/a 
2023-03-17j6411d80982aee4.47049142.jsjs f9cff911c5ff1b45331786cefe488497a10f79942e24066ab1ed4b58c949c56cn/a 
2023-03-17j6411d7e0bfc2b6.80455883.jsjs 0c46e562b8b2bf081d200b33683ea66d54352d2ff1a86d1c8cbcfad9dbe74ec1n/a 
2023-03-17j6411d7fe962d31.75581386.jsjs 1e2a6ea040eba30c417b2fdb3d5abef6911c180e1600529c7c381929d56a945en/a 
2023-03-17j6411d7f0b34731.03716493.jsjs 8df5fca1b7c157716a8523e1ebf866c7c5a048d0ab05b93d9c02f81dbef8ef63n/a 
2023-03-17j6411d8866a0104.24084888.jsjs e35159f8a1a525da2e8d54b889f2aa48e8e48b5ca2d62048f01d28a1460c51a0n/a 
2023-03-17j6411d830687566.52719513.jsjs 170a0b6289963e00a2258f85129ae2b8a7c87451aae497b68f3062ea0f162b7dn/a 
2023-03-17j6411d8b5b38c24.84074564.jsjs 2ff34e9ab2d5cab4d7c0b1b657d0f933c182817637af2232992ff65c18cf1c5bn/a 
2023-03-17j6411d895b1c311.60972985.jsjs cf6006310b73f006187f9a0f6cbb943511dd67a5a3ee74db21871e644526b6dfn/a 
2023-03-17j6411d8708b33f4.03365731.jsjs d5e89f363b56818578097b8dce632942bce20cbe40ddd6490c0252fac45abe78n/a 
2023-03-17j6411d84e36ee79.00702085.jsjs 57c9d002559949b321d6c55d11eaa74351c49fec0f836aadae8de360811c3a76n/a 
2023-03-17j6411d8344fcf34.63087564.jsjs 41a774f51c8998bf17d59c4d2acf8c5f59374cb3034a5354e7b3580d4dd8432dn/a 
2023-03-17j6411d82f192af4.33873871.jsjs 0cdf402ddc03e5f8a5fea0d7c110f065ec9fa7effcefc7bc8ac816176dd53dfcn/a 
2023-03-17j6411d82a43ff28.89500948.jsjs 069e4d9b94dd169ff471208c4bdbeefd42ef3b48911d646e9cb9f0cdfc562342n/a 
2023-03-16j6411d7fdb4b805.76637860.jsjs 6763c949ad5dc73763ee1c1711660a71b3a9288b9fb0dce7f7676ba411ac91e4n/a 
2023-03-16j6411d8b074d775.60127956.jsjs 48924e30916d3522ce516f9cebd8d303fbd74e8597d3c317e1364208053dd866n/a 
2023-03-16j6411d7f9dbc7d5.52556283.jsjs 32f7fb9354c5d748924cf01c354d74dc3ef0ab5b85d287da25ade57eb93925fdn/a 
2023-03-16j6411d8956bc603.46150547.jsjs fd6cf1e4db85a7c51be0ed7dafe6075758a760313ad4379a8d16ab180bc9b02bn/a