URLhaus Database

You are currently viewing the URLhaus database entry for https://saltnsalt360.com/at/at.php which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2591724
URL: https://saltnsalt360.com/at/at.php
URL Status:Offline
Host: saltnsalt360.com
Date added:2023-03-30 18:50:39 UTC
Last online:2023-04-02 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-03-30 18:52:14 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:2 days, 13 hours, 3 minutes Poor (down since 2023-04-02 07:55:46 UTC)
Tags:BB21 geofenced js Qakbot link qbot link Quakbot link TR USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-04-01j64256daf6a0503.24760400.jsjs bee42599a6e6333380e08b0215f87bfbd451c8d6fd1eaaaabe7bda2b9e07c719n/a 
2023-04-01j64256e0f6025d7.50979919.jsjs ccd9a66cc85fa817397d736b553cc5686512ca2f794029438a79061e16bbc431n/a 
2023-03-31j64256d2ba38d13.03297124.jsjs e0beae49e5009421ce37f3696e0cd9ecb69a8b90766e102845369f36d170de7cn/a 
2023-03-31j64256d3b942051.77514215.jsjs 9a5a4dda43fd08bcad64a8afa8dc26ccf6c2b5c1454661c9d41a48424eca3b46n/a 
2023-03-30j64256d4bb4bc59.62903481.jsjs f699b424b9999e787c7ec769efe74166c7a389ccfdc9250dbb1e80c29c00c1e0n/a 
2023-03-30j64256d8f76c7a7.88862513.jsjs 91440fbd0c95f3e9c3c7fb5931f106df4a4bcd68aaf21be131d0ac896559c238n/a