URLhaus Database

You are currently viewing the URLhaus database entry for https://nic-sl.com/nq/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2633020
URL: https://nic-sl.com/nq/?1
URL Status:Offline
Host: nic-sl.com
Date added:2023-05-15 17:22:13 UTC
Last online:2023-05-17 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-15 17:23:48 UTC to abuse{at}bluehost[dot]com)
Takedown time:2 days, 4 hours, 56 minutes Poor (down since 2023-05-17 22:20:23 UTC)
Tags:BB28 geofenced js Qakbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-17Zgds.jsjs 340674eac99b309a0a10a07f5d961e87788e88c4cc2f218da6cd61ccb196deecVirustotal results 11.86% Quakbot
2023-05-17Fwsph.jsjs 213ee67765673cf53e5f361c49a1bfe40187ecfa07f72bd5a77d13e1f437edf4Virustotal results 27.12% Quakbot
2023-05-17Aovipkl.jsjs 36032c143a4485946e82aa6aab03ac420e5589d6c74224bd71b3b6bc62b6dfecVirustotal results 27.12% 
2023-05-17Fwuabzf.jsjs d072c0958caad1a6504236a0de9defd899adf9e6deedeb1cdeba1e72229b29d8Virustotal results 31.03% Quakbot
2023-05-17Jvlbztmp.jsjs 66a44d6ecc0bff8550c4f8fd93b40851e019bac6297339dd180d268ed9bba451n/a 
2023-05-17Vfhkgn.jsjs 2f457141989cd8db7267b3dd982bc3aca3c0d763161cfedf75384aaa9b27bfe3n/a Quakbot
2023-05-17Huvjfv.jsjs edaabd4926868c3ddb5572c62fa86916c9c1267cb62bee3d193d8d328e82324an/a Quakbot
2023-05-17Xmdtj.jsjs dc06f4b331935a0e7cf5055f50a9754e0c4018c626e4a62f166e74b686348471n/a Quakbot
2023-05-17Ttkp.jsjs eebc1174e915118cb92c61127977f8701c5ca4b9ceddb4f698d68056b04bae47n/a Quakbot
2023-05-17Wbrsp.jsjs 834254cc78b540e4e55d5928fb68789a3581a69f43b0c4af6b8b634af2165a2cn/a 
2023-05-17Ucpb.jsjs 9a3f7f2653226036600eafc5c1858a1a382376ceceb2f5aad38ddcad98224a29n/a Quakbot
2023-05-16Vgqhxeg.jsjs b9c136721e51c3d2663a7447ad8af5cce0ab61fde0720f9185bee91c50df0494n/a Quakbot
2023-05-16Powahqe.jsjs 006ab0d903657a8eaf01fd572291dedfc5f9f116d6cdf2be9dbe71401428b029n/a Quakbot
2023-05-16Xzywvizm.jsjs 2f5f82347b143c892585fcedd89b253516942e60f2eb24d7adf233cca8eebedfn/a Quakbot
2023-05-16Dwcozwhl.jsjs 3eab85d42a9101a8009c74893ff3b0c4e273273485bc27cc988449875e043794n/a Quakbot
2023-05-16Qqfy.jsjs 6b48ca864c82733930913608b629a0f2512dde62f6a096f3546649bb62b149ben/a Quakbot
2023-05-16Ftsbgz.jsjs be981a3bed4a07ca46851730cf2aab9b7bb7579fe9a0231d5b99d2f4e98ca732n/a Quakbot
2023-05-16Fsgx.jsjs f63f27f7f6bc633189f820d8a4aef178d1a6e8bc7dcbe26387938b0b22327109n/a Quakbot
2023-05-16Wefwuz.jsjs 677d0fd65a3d55eb0727a58bb0ca66e10c3290ce6f4b0daadc81083cc9572603n/a Quakbot
2023-05-16Gxvur.jsjs 471afa1848f6482847fc4ed569d0e55167eab242741131761ac5574837e4d859n/a Quakbot
2023-05-16Hjoxiol.jsjs c56568ad41e3d69abc783d7a4e4ec55f896e89d9c7f0431ac2232d6a96da963dn/a Quakbot
2023-05-16Cswbutg.jsjs cedbd7ab8b26a2eb46ae7a4f00e0bc24779025749cfbc16ba474fe7d7b5d8988n/a 
2023-05-16Uxbwzuov.jsjs 1a3c1ee3c1d53cb92c9c1ac7472620bb91a14b2787c9c68caa7e5283303cfa56n/a Quakbot
2023-05-16Nasosv.jsjs 0b1e7e18f4660fed07f436649d6e461146623668f69237bf25299f69c94187c3n/a Quakbot
2023-05-16Vjjouq.jsjs 36ab88c4609be3a965b94e359a2c2aa69ece57713795385be421c850768861a4n/a Quakbot
2023-05-16Dzrqxwh.jsjs db52e3329a592b30408eeb341dbd575b57d505f8aea6174be3c3f086e07bac36n/a Quakbot
2023-05-16Gqeojv.jsjs 46005e997d18d5abbed8f3e630b1c9ba5f58edc15f7ffad3c6703867414bbf5an/a Quakbot
2023-05-15Tdsv.jsjs 50e6bae52a1cf2fdb8bbc779c0de10e388c7ca1aea76a502fc534768b3449927n/a Quakbot
2023-05-15Afvmvtz.jsjs 6b52b04541d44ff5ac3014aa0194cc362d66892a316abdef6d5e259664487c77n/a Quakbot
2023-05-15Qvfhmf.jsjs 007818cb035939287af5ff34cb5292d422f292a4497998dcaa35e0eb0945cf9fn/a Quakbot
2023-05-15Msho.jsjs 823af1dfaaf87cfe1d357eb324b363553cd2a0236bb7e97c043a09bbe529c856n/a Quakbot