URLhaus Database

You are currently viewing the URLhaus database entry for https://sahityaclasses.com/is/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2629208
URL: https://sahityaclasses.com/is/
URL Status:Offline
Host: sahityaclasses.com
Date added:2023-05-10 17:15:18 UTC
Last online:2023-05-13 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-10 17:17:39 UTC to abuse{at}godaddy[dot]com)
Takedown time:2 days, 12 hours, 22 minutes Poor (down since 2023-05-13 05:40:01 UTC)
Tags:BB27 geofenced js Qakbot link qbot link Quakbot link TR USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-12Hrwcsdq.jsjs 2afa3df2d22607ec319b6cb51d360cab3ca1aa964afa8e2ca71cda6fc8b09e9en/a Quakbot
2023-05-12Bmhbbmx.jsjs 86668fa1a1346a5d330da6840446504c3482ef54de68b500d9284b7840715288n/a Quakbot
2023-05-11Bcketfw.jsjs 7212f2e3a902ae863e52c57625d7f1c5fe5e3fa33618a72d731a5dfef0f11c04n/a Quakbot
2023-05-11Bqnhzdr.jsjs c55df4b8f132dd5f9a9828289ed396c9307eb70a8573b6423778271f7a49d19en/a Quakbot
2023-05-10Hciy.jsjs 8a78e8eb8d534b56d7c5b7ff3aa58a6d697866dc5f6b2c9db8941b0a2a96bc25n/a Quakbot
2023-05-10Mwnztcc.jsjs 50193d90fab7a9e155bbc4f950e05af71593f7809bc09b0a46cc35c6be9cd778n/a Quakbot