URLhaus Database

You are currently viewing the URLhaus database entry for https://fontswiki.com/ps/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2634312
URL: https://fontswiki.com/ps/?1
URL Status:Offline
Host: fontswiki.com
Date added:2023-05-16 13:42:36 UTC
Last online:2023-05-18 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-16 13:43:41 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:2 days, 7 hours, 18 minutes Poor (down since 2023-05-18 21:02:15 UTC)
Tags:BB28 geofenced js Qakbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Ghnmn.jsjs 76443e093ed6d6e3961cb5f9bbd546bab2d05f6bc2536c5744dc86f7a769bea8Virustotal results 30.51% 
2023-05-18Jojiwrm.jsjs 51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4Virustotal results 22.03%
2023-05-18Tsodmlvn.jsjs d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37aVirustotal results 24.56% 
2023-05-18Axxzsjvh.jsjs a51b98df105de3f259cb9e467532c2c6b90dc058363854ab3cb75fe44b1f1dden/a 
2023-05-18Ivooqlb.jsjs ce9600cb7b98a80d9b5d95e0c7313cc05680b28366735b96104aa3fdf9ac0115Virustotal results 10.17% 
2023-05-18Vuburjsp.jsjs 6bb7a104fe821f46f0853eb826d375aefd2c29fca71738cc3494e5cd9ad1c40dVirustotal results 30.00% Quakbot
2023-05-18Howwmx.jsjs 5cf5a460458dbbeb9dc56a1055cc11cf9105c55fae9b828a1884c3899001033eVirustotal results 22.64% 
2023-05-18Bgss.jsjs e2334bf18981148d6120cbe4ab94a09cd0bb833ae95e71955079aadd6cfc720dn/a Quakbot
2023-05-18Zrjyy.jsjs 03652beb5abeb2e27fe43d5ddbecd035cbcb347a4e522a06b97f53e9c8f2c3a3Virustotal results 30.51% Quakbot
2023-05-18Emjrex.jsjs cee11dd3e06833ff80c75ab19feaefb05e62b347d9ed97e9ecb8f4ac5a889f95n/a Quakbot
2023-05-18Pwyji.jsjs 8eec4b2ca78d1d8b62a875c3a6b16a0a9053aeaf65f1e6cca22000629ab71432Virustotal results 27.12% Quakbot
2023-05-17Thjm.jsjs 4df2da0e1a60159c49866a7e3899e305f80766c9bae6b676bf18955d4e2ee8ecVirustotal results 15.52% Quakbot
2023-05-17Czdmjb.jsjs 09f9e4d8ef85ba407416a7d168207db81c2000eabea300624e17d81f58bd0b18Virustotal results 31.03% Quakbot
2023-05-17Mfccr.jsjs 4763068a93fa58650c7a913bb253b59fb9f5f7da3d041d28302d9d1b4d301008Virustotal results 27.12% Quakbot
2023-05-17Vrhpid.jsjs 576d80e7bad2be3b3f4ddb0ccbe067bceabbc990bb96e11007cc74c2d6ad7bean/a Quakbot
2023-05-17Ggub.jsjs cbc57ebccb343515692b47782246ac3ce19ae8ae335ddc9895810261d11cb663n/a Quakbot
2023-05-17Kxoun.jsjs 865abbd345425ca06fe788a0af4970d985cf2d622cd0ee375cb43dd5567afe23n/a 
2023-05-17Twnuspu.jsjs bb62ccf9fa803df4844b790350de975a1f8ea136f9334e3563a5e8ecf4d9b601n/a 
2023-05-17Ejuwyx.jsjs 6d9d8fdda1cbe3a075db8842cb4ec48f3dcecfe75eee825c46e5acf0eb39fcd7n/a Quakbot
2023-05-17Epmv.jsjs 47668928613bee2b571d5526d524dfe663fb6987d90b9d23a9468b4e3f43eb7cn/a Quakbot
2023-05-17Sdkxjjnq.jsjs e190e377c88b2ac239e02aaafb90b63d4325fcd0fe9cee05ebda101d87796c52n/a Quakbot
2023-05-17Kmiuaib.jsjs f2a9705749343ba4f06bd8151a674ca08b8372a8e533594cc12de8fce67827a5n/a Quakbot
2023-05-17Khxmv.jsjs fcd04d59edba7d614fec1b3911f86b0d06e2f00a2b50fbb243f3c6ffaaf5b2e5n/a Quakbot
2023-05-17Xazy.jsjs 04538e28e9466f31e240be806e825f00f42e06e5bbeb3cc0df55c9dc34440e3cn/a Quakbot
2023-05-16Xdrkp.jsjs 7ddeb54c296a74b9d999fdb75344648abffc73ee5b8a0e49cf57305da2eee9b5n/a Quakbot
2023-05-16Wsyqjz.jsjs 4d8d0fc2ec7042d483f7495eca75d48d11b0c8f8529351d00e0ffa228384d838n/a Quakbot
2023-05-16Cozorul.jsjs ff28f0ac18be9501d2c3fe2096a0190bb5e0b7a28ab8ad22de85ba9b07b19b87n/a Quakbot
2023-05-16Qbdn.jsjs d76a0807f9b7afb2160b5481ba9577eed1745204c8214663ba33c4c30eb2e4d8n/a Quakbot
2023-05-16Bbqr.jsjs 2b7b77d0d6b86a3bdca589d5f5bae7d9248432ebea670db069e1d5a268db560cn/a Quakbot
2023-05-16Seppw.jsjs 3865300fd315baf78a9a39ae6bd29e09bf2501adb20a0361c94e39d98464a57en/a Quakbot
2023-05-16Thwfukq.jsjs 147cc7d1d674de8eafc016b7e7974371e7c8d8346a92ea3d1433c10c014d755en/a Quakbot
2023-05-16Hgipld.jsjs ba3697d2c89e65c8431931a378b34fa55b6c0746e098e4c88de847ca9e0b52fdn/a Quakbot