URLhaus Database

You are currently viewing the URLhaus database entry for https://dsquareelectronics.com/iu/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2629046
URL: https://dsquareelectronics.com/iu/
URL Status:Offline
Host: dsquareelectronics.com
Date added:2023-05-10 17:12:09 UTC
Last online:2023-05-13 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-10 17:13:00 UTC to abuse{at}godaddy[dot]com)
Takedown time:2 days, 12 hours, 39 minutes Poor (down since 2023-05-13 05:52:00 UTC)
Tags:BB27 geofenced js Qakbot link qbot link Quakbot link TR USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-12Wggrghvz.jsjs 4c810aebf9a7159d2bda4b14fba705629c1374fd8243db13ab70b4542e4ba23an/a Quakbot
2023-05-12Tkovb.jsjs 62248851639a0e452cdf15782cd9511becbdab55fae4b37b49232914ef62d874n/a Quakbot
2023-05-11Iifdhkix.jsjs 2978c50187e5e0724707f5f834a47044b0b26210cee0577d5ac64f8cebc0febfn/a Quakbot
2023-05-11Pwer.jsjs 565c696386aafb76dcb14fb41a4c278464865a6f63d481263235a6d46294ff9cn/a Quakbot
2023-05-10Oyycna.jsjs 87b01583bc29eb7c781b551fd315e0a9f433f2d6321306dbed194e35011f5643n/a Quakbot
2023-05-10Bsoimjcw.jsjs 8ab52a2a9ce7b572fb28c5313872a07459dcddbd7dd0d0fba7031ce6855828a8n/a