URLhaus Database

You are currently viewing the URLhaus database entry for https://gpshelpline.com/pe/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2630107
URL: https://gpshelpline.com/pe/
URL Status:Offline
Host: gpshelpline.com
Date added:2023-05-11 16:31:19 UTC
Last online:2023-05-13 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-12 01:55:09 UTC to abuse{at}cloudflare[dot]com)
Takedown time:2 days, 5 hours, 58 minutes Poor (down since 2023-05-13 22:31:11 UTC)
Tags:BB27 geofenced js Qakbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-13Ynayfziz.jsjs be3228d05db364a88082dac9007b5fe5b02be518df551288c911451773f7f9fan/a Quakbot
2023-05-13Dqsain.jsjs f5c8803a543be8334f9d0c505a846d4dc9cdc27465157c98010ea28a772fdd59n/a Quakbot
2023-05-13Rwexhop.jsjs fdab7280b8743e4a1e6583652c52090b779f8881862e0c9e8dbaaaa26aeb4760n/a Quakbot
2023-05-13Rdyt.jsjs 5adadf1565f009eb15593c49d00c35426e85144816dcc9d8d3c0864743665892n/a Quakbot
2023-05-13Njnjy.jsjs fe750a4730ae80ed8c3c7aa00e27d13c27bcb465bb819f36305449bf646ce242n/a Quakbot
2023-05-13Zvqbnrxb.jsjs 7f0954243ec0efbcaf0a6ed52b043b5960dc357f0428cd6ca8acafe4c5dd0d19n/a Quakbot
2023-05-13Gghrgvy.jsjs fdb283489de7dda39b04e4f86abb7f31c9648c337c42fbe4e0b5442bdf16783fn/a Quakbot
2023-05-13Sdendk.jsjs ae7ce16eea44398ea9e719dbed8845e5e0a28ba6ff2b9726ea62c0c0a81ad3a3n/a 
2023-05-13Thepax.jsjs f845d71d695c9748c14d12deea01525f21290a7332e08e2a7759934ce3d8e854n/a Quakbot
2023-05-13Bvghq.jsjs e01435e3beea4a49bfd32f8fc0de1625328ff8fe40f1f6faa83c76457bbce654n/a Quakbot
2023-05-13Bzszuk.jsjs 8d487da8ad46817a1e0e6afae7ad3cad712cb0b0b0e769ad310caf1971d1bde7n/a Quakbot
2023-05-13Sfadxed.jsjs ef69c1415ea99efbe1fdc42a3eedff16e268529ce88e634efb15de340556e1a3n/a 
2023-05-13Zgmk.jsjs 1bd24a4eada97ab9256a271d414a8db20effd09561ac7417a87f29087f3fb0ban/a 
2023-05-12Jjvlh.jsjs 221f1787da0e835964a10c152dfab146abcf4aa7aad13d819cbd627f1f8432e5n/a Quakbot
2023-05-12Syzwpm.jsjs 587bd96f82d47ae3fbb47faed0cd504badbebd4badd24d306030f9ca5c19d2den/a Quakbot
2023-05-12Nrllz.jsjs f45b1166eb0bd88dcfca6c6eddaf294a623bc7893c067c5973b6cc312a0f0c93n/a Quakbot
2023-05-12Cbwox.jsjs 7f5686a0ab03c0831a569d56be322fe5669489a2c8fe16aa0a632084b9515934n/a Quakbot
2023-05-12Fcgagy.jsjs 839167fcd0bfdf1fe5d9f7cdbf458cc65fb3af54d44f4a121daf864ed435b784n/a Quakbot
2023-05-12Dkrxqiyc.jsjs 92fa3c8714b70952fe0b3071102211eac0729a1a75014dbb4299e829895d2c09n/a Quakbot
2023-05-12Rcbrkik.jsjs 8d3353431bbce2698acb720fb051557cffa0ca1c320b655149b148645f62ad62n/a 
2023-05-12Qcriw.jsjs 63acd7d0fed090ce30f0a597557f4f2219c0431026f4bf8ef73597967d388e91n/a Quakbot
2023-05-12Pwnczoog.jsjs 02360ba93237c4fe0c841a25f3cee7b42b54cb9ed2004a0dde42111439134f11n/a Quakbot
2023-05-12Mdqlihvh.jsjs 24b546d8bd363ef2bbb8a51bdc51379e05fdb77e291cd19bccc7768715eaab71n/a 
2023-05-12Vaiiwb.jsjs f5ba6685e4252f4517603f68b6cf0c920e8a9142736909c99954cb916ea9e19an/a Quakbot
2023-05-12Ehwj.jsjs 0d5ced4ee5ec50ec1cbbd4efbf3a7937437f79281b4c8ebc9d350899efabea96n/a 
2023-05-12Ngqhju.jsjs d02c2355eaf21ff70b46bf1a52cc6910010e9b08518e5c29e3a9d33667b72779n/a 
2023-05-12Goqlhuc.jsjs 03fa1c7fc8e2b658fe711bac3815b4ec87c693b761dd98137e900b90d530c59en/a Quakbot
2023-05-12Xiut.jsjs bffe751c875b3657ddb7a383b26c9979e1c528e2a3c1e43a443602f61b6d1f35n/a Quakbot
2023-05-11Njhqo.jsjs 747c93cf966c1f321c2056ab8fccce65a27862d2d74a48b020b4b5ae5a5d4fdfn/a 
2023-05-11Tocfr.jsjs 6165d221ebb822ba26db9cae05734f21ebf3498ccc974c493b088cbf78ce2d84n/a Quakbot
2023-05-11Ckwxxnq.jsjs 0e9a3fa0aaa1442cb47786b876ca37f25bb7ac9514cc1f9dab30ca671108d2b4n/a Quakbot
2023-05-11Wjosjbzc.jsjs 67b58ea27f5c9bedebbb4469bec4a79e7782926585d7da90b5d14e06e1440d3cn/a Quakbot