URLhaus Database

You are currently viewing the URLhaus database entry for https://rnltechnologies.com/ote/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2629205
URL: https://rnltechnologies.com/ote/
URL Status:Offline
Host: rnltechnologies.com
Date added:2023-05-10 17:15:18 UTC
Last online:2023-05-13 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU100113449 created on 2023-05-10 17:16:20 UTC)
Takedown time:2 days, 12 hours, 17 minutes Poor (down since 2023-05-13 05:34:19 UTC)
Tags:BB27 geofenced js Qakbot link qbot link Quakbot link TR USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-12Irltd.jsjs 5a1f31c8ef316a792f35dac88965eff05b9f6dc4093f2563e67df7417e32337an/a Quakbot
2023-05-12Gilraopx.jsjs 3d580e9c1e50dd96a3bea43ba8d82b905e7b1d046131cbe28cc7af1b2bc551c7n/a Quakbot
2023-05-11Wyueabu.jsjs 8c2fb9fce8fbd95df9cfdf2a7a680554d497def022a3bfc28d82846ecda7f054n/a Quakbot
2023-05-11Dfxyvqsm.jsjs 493d9dbe3f44ee3fcab499950439a6390ae3848b43f8c46a8a5f34828a1eddabn/a Quakbot
2023-05-10Xoziy.jsjs d3d668988341d3b5fb5fc64a41b038c2d3cc9e7495441ecaff709ae62c2249f0n/a Quakbot
2023-05-10Yoxt.jsjs 3b1c84e102e2dadbec79b9887235ee57873503201775ce768900440a610fe94en/a