URLhaus Database

You are currently viewing the URLhaus database entry for https://perugolfsports.com/atip/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2633672
URL: https://perugolfsports.com/atip/?1
URL Status:Offline
Host: perugolfsports.com
Date added:2023-05-16 11:25:49 UTC
Last online:2023-05-18 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-16 11:27:48 UTC to equipo{at}brutalsys[dot]com)
Takedown time:2 days, 11 hours, 24 minutes Poor (down since 2023-05-18 22:52:30 UTC)
Tags:BB28 geofenced js Qakbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Tplmqat.jsjs d76b1300fd995ec8def343df0450c11a58a217803fee3749db4afacebc64182eVirustotal results 22.03% 
2023-05-18Bzsxyf.jsjs 6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59dVirustotal results 28.81% 
2023-05-18Asspdig.jsjs 76443e093ed6d6e3961cb5f9bbd546bab2d05f6bc2536c5744dc86f7a769bea8Virustotal results 30.51% 
2023-05-18Wumkjl.jsjs 51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4n/a
2023-05-18Xxkcye.jsjs d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37an/a 
2023-05-18Shjdax.jsjs a5f0035e2f6ab21d643775a304ea994d963bc0ad712a5ae1a9ebb1a5298f7adbn/a 
2023-05-18Cicc.jsjs c1064ed6356f294c6981938454ee3a3712e5e63930c1554a3c1602eacbd6554dVirustotal results 25.42% 
2023-05-18Mznzfj.jsjs 0b26bdb33f82264e6ee139e028f16f756cf3c276a5c8fdc923aa5d5e2e385872Virustotal results 24.14% Quakbot
2023-05-18Iojaw.jsjs 3ff223428a9d2b7b897fd823e4add6ae4cc119c86e47eb073bdbf5a578a17226Virustotal results 20.69% Quakbot
2023-05-18Kbfunqn.jsjs 72495f905e654ea365738e7e3ac93200be27ad81df4327197c8d1a1427209a25n/a Quakbot
2023-05-18Zhjcghi.jsjs c28a0689fa744ad9aa6b9113d992a9fc9d303cf30f2b622975fb5e9a82ac02e6Virustotal results 27.12% Quakbot
2023-05-18Jucn.jsjs 0efda647b9e6537d80702573e14dad4cae7edd5bb92d94eea0f136b93fdc03b7n/a Quakbot
2023-05-17Hpaopui.jsjs c56bdfe438e6261fa00e5e48e3e9896927886b959c2947db67582b4cf0f08e74Virustotal results 22.03% Quakbot
2023-05-17Dcypr.jsjs 2ea57f7ed2c3148b87f87bed297e9f780f369a71667342ed01a88fc779a24eefVirustotal results 33.33% 
2023-05-17Ksbcdebq.jsjs 83743f2158c1cfe6f65635d6a1c2aeec71545802940ab5e083fa9d3a98d650aan/a Quakbot
2023-05-17Phmm.jsjs 6e988a313f3e3723e109adec17cbf1513010e50c972114a245ebf3ed743e84bdVirustotal results 24.14% Quakbot
2023-05-17Didjgau.jsjs a2fee1f921c59d61590ed86bdd9e19a12b68d9722d228d0e5bef678bd31d461bVirustotal results 30.36% Quakbot
2023-05-17Tqiyqwvw.jsjs f9a03e213a2bf36d23d4a6877af8261834b3049ed458410c5e8b4c6da00e2383Virustotal results 27.12% Quakbot
2023-05-17Gtnl.jsjs 62497d1af3f04d7da40a34f39d4cb3b28e855a47c2507372bfa759e66adfa3f6n/a Quakbot
2023-05-17Aqkzvdn.jsjs eac6096d9525ff200431210339d6a028b68233173ae11df47f57222dc631697dn/a Quakbot
2023-05-17Keokwhlb.jsjs 1bfe187615579ac19d269ed0c3b888050c406b35011dc7af6cc4e907d6e98399n/a 
2023-05-17Fwznu.jsjs 398916af01586232d69e43159c02cfb999e91d62e5bb6f2ea8d18c51f90cb79dn/a Quakbot
2023-05-17Cqjko.jsjs 3601dec90a08bb6d84b4228d3fd1fa624da0c95993c089217e70ed6914e236c1n/a Quakbot
2023-05-17Dqmkpkpv.jsjs a112ecfc9f338ebd8d5c2cac9816c46fa414a63e673f614ebf39bfc382b5f8d5n/a Quakbot
2023-05-17Cnjrjd.jsjs 54789ac50ed384a4f9be3dbab6a5c9620928c087c9f530a74a1f46b3f62a7645n/a Quakbot
2023-05-17Jkwdhjr.jsjs 323cd1ac1834f807878de503d1a52a606a3723824cdaa36a7a52bdb6eb9fca31n/a Quakbot
2023-05-16Pvwdh.jsjs 471b8e44e2ea710372d45d5bfd4d2f1186f58d75b32ab53cca105de6dc322503n/a Quakbot
2023-05-16Wmvyuu.jsjs 3368508389d1282e565fb222626471afc897c3469da96f5c38279ffcd94d9d58n/a Quakbot
2023-05-16Fricw.jsjs c15ee3e38ac4fad7d135c9eed45e78a5d55c47aa4163369b0c686517c9b4e47en/a Quakbot
2023-05-16Jdsp.jsjs e0139ac9bf85615331d0834db7e90f9cd394fa5192b5ee2c3ef16a35b2339f80n/a 
2023-05-16Ybrwog.jsjs d0fa3020ad8a76060e96a996a24846f94f41ed1df9878db183c4ee265eb68460n/a Quakbot
2023-05-16Bruybet.jsjs 3d3f5049004f4f580465c4ac0b502392a3985a0749384bc3d352ee275d27e488n/a 
2023-05-16Euyop.jsjs 9e88c33de178c2832a51a9c55a901e3e027b32c359e44a07687499d9e5e38e6fn/a Quakbot
2023-05-16Opphdgf.jsjs 7dd26dc6edbe61bcd4857d1aa6fbac6360355ed56c5457a3cded23075b446817n/a Quakbot
2023-05-16Qgbf.jsjs d2441ff4dbdecca2c6923a4d9e8eb024153db9a416c2a3225011763cbf521c78n/a Quakbot