URLhaus Database

You are currently viewing the URLhaus database entry for https://3roodq8.com/del/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2633609
URL: https://3roodq8.com/del/?1
URL Status:Offline
Host: 3roodq8.com
Date added:2023-05-16 11:25:34 UTC
Last online:2023-05-18 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-16 11:27:28 UTC to abuse{at}amazonaws[dot]com)
Takedown time:2 days, 10 hours, 5 minutes Poor (down since 2023-05-18 21:33:01 UTC)
Tags:BB28 geofenced js Qakbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Yriaxuca.jsjs 76443e093ed6d6e3961cb5f9bbd546bab2d05f6bc2536c5744dc86f7a769bea8Virustotal results 30.51% 
2023-05-18Pdkuey.jsjs 6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59dVirustotal results 28.81% 
2023-05-18Kblpt.jsjs d76b1300fd995ec8def343df0450c11a58a217803fee3749db4afacebc64182en/a 
2023-05-18Skcm.jsjs d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37aVirustotal results 23.73% 
2023-05-18Hicu.jsjs 7a1083b3edcdb5d47bf9938417f339c556c4737e9886bb9cd51ce8eceb3dc5dcVirustotal results 30.51% Quakbot
2023-05-18Gzfmqvpg.jsjs 1d2471f7acbab8882ea6f628275c501f0f81e0aeab5ee16537702bd849e8ba6bn/a Quakbot
2023-05-18Vmyjucdp.jsjs a581d1bc0926e4888a7d919a2ec529d51e03862bf784ac4cd4333e3df168d239n/a Quakbot
2023-05-18Tekdxifp.jsjs 3b3714312b9a47880e50308268338b4ce72011e082b2bb4bd94f2fbe7f738e56Virustotal results 15.38% Quakbot
2023-05-18Tolsr.jsjs 9162c26ac66cb673664c91b6a22e788a008db7c2bd2b4a9b7788a47fe85f33eeVirustotal results 28.57% Quakbot
2023-05-18Wfieihb.jsjs 9b45c4614db7627fee14ec88aef1faf7e97115a9755ad170998bf331df8c2b0dVirustotal results 27.12% Quakbot
2023-05-17Gqoo.jsjs c73f356c704556ac74d752c91963fe6a1c7273b77027b218016b83f03ca878eaVirustotal results 27.59% 
2023-05-17Dviorgy.jsjs a8a8153cceaada2e2ff92961844812b0aed9cd17ebb6700ebca64bc3627c960bVirustotal results 28.81% Quakbot
2023-05-17Ylrobfq.jsjs 09d00cc1758af4e79c7a38e65ba9555ccb18dcc1f628a22c1d9bd5a337b03d88n/a Quakbot
2023-05-17Bwwqziri.jsjs b11fc0e56235f908dd870eceed98215c815c131e83913eff33f70f528e369dd4Virustotal results 30.36% Quakbot
2023-05-17Kdxnzh.jsjs 73abfbef5c169e5239c78d4c04f3d18f7f72490c2ca0cbbb33d92cac9675dd16Virustotal results 27.12%Quakbot
2023-05-17Vwwdht.jsjs e6473de8eb0f10d14a04ffbd68eec65c5efe6755a2bca86fa2fce1a0f317a9c3n/a Quakbot
2023-05-17Mgepnte.jsjs c98276273a209f91c3e1637785f0f3e59d5724b05ee395f9f32ae11ee5e8679cn/a Quakbot
2023-05-17Rwjcqq.jsjs da52502a0a72ee5634a924ce0dd633b48b89ec1737536575c353c86732ac00afn/a Quakbot
2023-05-17Jzkyk.jsjs 769a701e644d91a6088b308e193f844361b07cbcab621877011700787cec29cbn/a 
2023-05-17Djgfz.jsjs 348f8e80b7a667db38c2d7e5697a9c781b960d36caf792747d3097e45a8a2169n/a Quakbot
2023-05-17Dtaqoudr.jsjs 23838135a89b48ceb2df9a3312803e005c043e8644b1c03482cb31538af133c8n/a 
2023-05-17Toizr.jsjs 481468ec7453e61b32fef9933f8126ef809ee592073b4f9387027a29373bfc58n/a Quakbot
2023-05-17Lfpqn.jsjs fb60e43420d3da3c586f64185a89a7644f6bc1d2c926bfa6427e868e15930731n/a Quakbot
2023-05-17Hoidzjr.jsjs d3151df8c14aab28117f0ecf1e011e18dd88877f53b2e236ee877284f69eb36cn/a Quakbot
2023-05-17Ydqx.jsjs 141417392f92d029a1663e7e6c5b4541514226654b2b31ca7e3377cb1093aab7n/a Quakbot
2023-05-16Hkvtfya.jsjs f10028af2e955224f63e88e355938d5d3040b515a76a8c6c4763d8c7f4faa899n/a 
2023-05-16Oxxy.jsjs d6ef61a024e0448846f315a8e58ddf7abf9eef9f2db7f03c347f22c2548dc8ben/a Quakbot
2023-05-16Cmoat.jsjs 1bf45fdbeac365a620efb2a0e41ef00ee6b7382add8ae144b1ae372f5265246cn/a Quakbot
2023-05-16Mlorh.jsjs 6d96b7b72c8d35e0d83ed91812edb3aeab7b539f21d816ac5129617db8b2ea49n/a Quakbot
2023-05-16Yabhyk.jsjs 66f419b7b5ec0e0b5fa7aec5569e2359ca9c68fac839da490c98ef8f7a8b748fn/a Quakbot
2023-05-16Pmxej.jsjs d1049f7a32a6e230358a0a5eff03e3f04206b125d69037f3d61e2a19fc905a4bn/a Quakbot
2023-05-16Zlfmqoy.jsjs 6f942cd0f343bf23c83b4472f7b899296c3b1b5fd020d481d56b8a8c7d837975n/a Quakbot
2023-05-16Rlnyji.jsjs d1331abf3726356c9af3f0beff19450f8d0f69346f3bab752a29b9f9e4d38a66n/a