URLhaus Database

You are currently viewing the URLhaus database entry for https://bodybuildingsupplementzone.com/rao/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2634007
URL: https://bodybuildingsupplementzone.com/rao/?1
URL Status:Offline
Host: bodybuildingsupplementzone.com
Date added:2023-05-16 13:14:54 UTC
Last online:2023-05-18 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-16 13:18:01 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:2 days, 8 hours, 48 minutes Poor (down since 2023-05-18 22:06:13 UTC)
Tags:BB28 geofenced js Qakbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Uqeuek.jsjs d3c6e06204212c1aeeef29809460056535cba3beca8cf163b7c8719671ef0c9fVirustotal results 22.03% 
2023-05-18Mnovzqj.jsjs 6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59dVirustotal results 28.81% 
2023-05-18Dhwshgxo.jsjs 1cea0c4b1af9170b9ed2927f3b100d202bebd1b8e69ba1527336aaa6b2c0bffcVirustotal results 13.56%
2023-05-18Trspfqg.jsjs fce79a71c8fe5a18f29a06a38b43d867e73de67caca9962e6f4fc82069685bb8n/a 
2023-05-18Ucanumv.jsjs 819c3375d47e95f26e1466039e2ff5a096837d0761bed7564c2366b094c8895bn/a 
2023-05-18Devphfu.jsjs 10f759e97a48df574fc941e1fdddf412b2e5a598d13829c47c202527d7d36ee6n/a 
2023-05-18Fmcwzo.jsjs 1382bbc235ac7b5a2dd52d131a5789c7736d4f2a5d674e59c647d3aa92091188Virustotal results 31.03% Quakbot
2023-05-18Xxlc.jsjs fcd00b353c980d48983a4a2533eb482d632935a343b2034ea119d3a4a74f3841Virustotal results 27.12% Quakbot
2023-05-18Opjn.jsjs 34d43862c3788ec764c7fb735ddcfc1f1712a66632a3bf7e8b83cadc98a6faacn/a Quakbot
2023-05-18Voes.jsjs 8110c40ddb65d964d81ab30f4c4f9bdce11b8956b986d647f4b81c4c0652f5a3Virustotal results 31.58% Quakbot
2023-05-18Gyktcp.jsjs 9fc93269f064d50db15333e3dbcf15dccb35094dc51bedfc465ba99ce6a37953n/a Quakbot
2023-05-18Wlnmvof.jsjs cb46274d330ebea266c559fd5e391bd171816f40b8a0d960dbacf22c23a94ea3Virustotal results 30.51% Quakbot
2023-05-17Hfcuj.jsjs 872a8726044bc6afb068028c44ba1376f7a3a6835147e080a9c5b7de41d634afVirustotal results 25.86% Quakbot
2023-05-17Pfxilmj.jsjs 91bf97c2e5d25bf79ff22ef99cccd3bdb7aab412d34521e172610b16562203d8n/a Quakbot
2023-05-17Xeco.jsjs b4a90889250c70642150c7b822ece35979290cb3664a5f778ccb8195b4c440ecVirustotal results 25.42% Quakbot
2023-05-17Fagsyk.jsjs 307a3ef8bc1930af1d46fc60bac9820950e278feee14f7a931ac745613568698Virustotal results 19.23% Quakbot
2023-05-17Pptddws.jsjs 397ed6d5f113de3b5a638878e1ab22bb58f5fb493aaef92441db571bcb4c81b5n/a 
2023-05-17Qwpkid.jsjs dc7a9209bb0458b585fb71acb0ae6a651d790217507b141df605e7290800960cn/a 
2023-05-17Yqqkkoah.jsjs ad9d5d545cd208607067a384f752e68873813a4863a25840901805e6778a5f43n/a 
2023-05-17Adomkhn.jsjs 5114d73796b6c9caeb8af7a84f5f1eaea2801e53e831b40f2c09abc4d7878679n/a 
2023-05-17Zjypev.jsjs e8821da8ac1b7062ef2a56c23bf2d925cf8798d432efa7ae0cb72151d82503b2n/a Quakbot
2023-05-17Qfccn.jsjs 757ced56607f0cdc639f8bf436af94c205f08ba548806840b857999b42fac924n/a Quakbot
2023-05-17Anankcze.jsjs a62f6bdb697eb3a4380fba14dba002cde11b6c8efb089373459635cdfd7fbe4cn/a Quakbot
2023-05-17Ekzmcp.jsjs 41f7808100c422fb719aab953e4bab0a2258d8eb7cb140080e3a7089e7378496n/a Quakbot
2023-05-17Pedec.jsjs 123b08101c86dec73d387fb03678f6a66c3b76dbe45f28089fcf895ba2e307aan/a Quakbot
2023-05-17Kzdd.jsjs 827a0d20231157a9e4ec0573cafb1d7f2fd6934b3a837f898cfdcebf1a1a85b8n/a 
2023-05-17Lqyeygi.jsjs 195d92f091cddb55281122a4eedfeef217b97ad8e6072a6991101d2bba901adfn/a Quakbot
2023-05-16Upigd.jsjs bbdedd496da84fa6c45d7dda745cd82c181744bd589b432b7b89340a4d1905e3n/a Quakbot
2023-05-16Offtz.jsjs 71ad0870b38f3655e07b20d8f5793d229fdd6c0cab426be122a6f5e5ba25d4d7n/a Quakbot
2023-05-16Pdbxeb.jsjs 1f652c6cf431304aac765dcc003328dbca29350d5ea111ab9f4123aba681e5a7n/a Quakbot
2023-05-16Bjww.jsjs 0727a73ba32071ed4f34cd05f9365ea055eed26afc6651ddc416005b33e17cf3n/a Quakbot
2023-05-16Lxcty.jsjs d8df5cbea8f69e597595a0fe9ce3ff4ec41bb5681b4fc359dd766d9a2be03b29n/a Quakbot
2023-05-16Qarxilv.jsjs 0021784fa66f6ead1d440492556533a0d950fcb89328692038cf0e2f3131976dn/a Quakbot
2023-05-16Brrrve.jsjs 7d7e900e88192650be7f4a618336b947cb2aac94b12fe1849a712f87945f138en/a Quakbot