URLhaus Database

You are currently viewing the URLhaus database entry for https://clickfail.org/rbdq/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2634487
URL: https://clickfail.org/rbdq/?1
URL Status:Offline
Host: clickfail.org
Date added:2023-05-16 19:09:12 UTC
Last online:2023-05-18 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-16 19:10:32 UTC to abuse{at}hostgator[dot]com)
Takedown time:2 days, 2 hours, 18 minutes Poor (down since 2023-05-18 21:28:43 UTC)
Tags:BB28 geofenced js Qakbot link qbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Mswzoanz.jsjs 6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59dVirustotal results 27.12% 
2023-05-18Mjhbkxqd.jsjs d76b1300fd995ec8def343df0450c11a58a217803fee3749db4afacebc64182eVirustotal results 22.03% 
2023-05-18Gfirr.jsjs 51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4Virustotal results 22.03%
2023-05-18Bupmqcow.jsjs 1cea0c4b1af9170b9ed2927f3b100d202bebd1b8e69ba1527336aaa6b2c0bffcVirustotal results 13.56%
2023-05-18Myacayob.jsjs c74a4b12e65ccf0e4c75e5c961e310dc5ce96730c6b1ed0260484418e29b4cf4n/a 
2023-05-18Mlwmyp.jsjs 0c002b88627f5df1e7415950b066ddc51bf3e0f4f3ef5a2b01a266b2c4282ee1n/a 
2023-05-18Gmaggej.jsjs 5e30b39e34b262f145f195328ba0967ae018af26240225770cb9bbac24dc377cn/a Quakbot
2023-05-18Qjznu.jsjs 3bb38fa6f98d4d9251f3db4a5374a212389305ea2079c93ed01408cb473d434dVirustotal results 15.25% Quakbot
2023-05-18Uhci.jsjs abae955795961dc369ba3d41196f2f4238001efcff8a2dc429ababf4821ca7f5Virustotal results 22.41%
2023-05-18Hblvsf.jsjs 6fc84f16bba8f14130cc061d7ab41c424fdccd71398b2bd8c1f4300ffffe8912n/a Quakbot
2023-05-18Ebtlgww.jsjs d7ee80c4c9f9a041e63b9e4a454dfa6c60dcb7fdd18ca658f2f92fc97f61d766Virustotal results 22.81% Quakbot
2023-05-18Bdjvksz.jsjs e7b23f3002dffd67a5026b9ae031fe92c033bd7c37c6bb15323d3bb075275d89Virustotal results 33.33% 
2023-05-18Dyomsk.jsjs b3c3f0880fe1ebd5b9f5146a8164da0834ee29a37e5a1cd8e534efe15c786daen/a Quakbot
2023-05-17Knozcg.jsjs 3c4d813af231229cc2b961a17a923de449a9f8d67439dd976effea73360ff766n/a 
2023-05-17Kvtzqolr.jsjs c6a62ee43c36edd934b0aecf8cca18487dbc8612228decd3f37357b043e4e85dVirustotal results 24.14% Quakbot
2023-05-17Glbfnpgz.jsjs 3e31ea9bfd38c94deda13767d5f82b55906ac8a767e595d59f2fbc92588d23e3Virustotal results 32.76% Quakbot
2023-05-17Evqcu.jsjs 4aa5d2a8e1f14eda407f7f6020bae48610ad7ecca61519bca8d513c840e454dfVirustotal results 24.56% Quakbot
2023-05-17Zdxyxb.jsjs e33a486361f2b596983444fdfcab380bffa678c31788687e1d8fb8e9aed9f6b0Virustotal results 32.20% Quakbot
2023-05-17Oyecus.jsjs 90fa0f56e8df4147606c0590d9bf8794253f48339dcf3295c0bd6d7b2dd0664an/a Quakbot
2023-05-17Bbvnkq.jsjs a0220d487566d1243b11c30ea5d37349418d84e8f6eb6013e0792aa4b11236c6n/a Quakbot
2023-05-17Apqffrpl.jsjs 4c0db3e7560bb7a3beb35013bbe268282bb0211546657cb9a3ee43616e87ba9an/a 
2023-05-17Orqjwwb.jsjs 42960b0f9bd91a43d21647fdad462a8b75f56e32f1070f4fa7c8bb73abfe9bb6n/a Quakbot
2023-05-17Ldwqls.jsjs 5b8cf02d7a0a01df531cc7759a7c6ec371fa44a1763b99c9471ca2dd1818b359n/a Quakbot
2023-05-17Unszqrjl.jsjs fb208b89c602dccfd29fff35b1e67489fd58675ac83be0d946ede52132a4666fn/a Quakbot
2023-05-17Slwd.jsjs 2418e91adb390c5ad79bd208c057b66701df046801c5ed1194805a51ad5503dbn/a Quakbot
2023-05-17Shyt.jsjs fa5b76dd52491d7e274a6e548d27550e3af1d3c60ad330a2b58a09fb0dbf4065n/a Quakbot
2023-05-16Zhidqsr.jsjs f712935a2651d81c9fa1be36cbe78de4a72e1c3b12c7a01da9cb3269011885ddn/a Quakbot
2023-05-16Yqgmfk.jsjs cdf0f123b6c32065cc4868babf5d7fe93674806c5e072661e2b6aee2a4c141f9n/a Quakbot
2023-05-16Nbedpnov.jsjs 44590c0f0491ff0e583183d325f573518ff8468772cbda7208ff75e19f48fba4n/a Quakbot
2023-05-16Snmq.jsjs f8ee2e26ec03e8673f84dc49b7537cb5a8eb4051044332ee6144ff68194ebbe2n/a Quakbot