URLhaus Database

You are currently viewing the URLhaus database entry for https://heatherrichardsonline.com/tmam/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2634535
URL: https://heatherrichardsonline.com/tmam/?1
URL Status:Offline
Host: heatherrichardsonline.com
Date added:2023-05-16 19:10:24 UTC
Last online:2023-06-22 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-06-22 10:14:07 UTC to abuse{at}internetx[dot]com)
Takedown time:1 month, 6 days, 20 hours, 25 minutes Bad (down since 2023-06-22 15:36:35 UTC)
Tags:BB28 geofenced js Qakbot link qbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-19n/aunknown d5d89b90aeac7565181932649fd6ebfbbd2e4974a2c338eb26870e1a640393c1n/a 
2023-05-18Uwcszfh.jsjs 51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4Virustotal results 22.03%
2023-05-18Fuxqc.jsjs 6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59dVirustotal results 28.81% 
2023-05-18Ezjhyjnx.jsjs d3c6e06204212c1aeeef29809460056535cba3beca8cf163b7c8719671ef0c9fVirustotal results 22.03% 
2023-05-18Uaexd.jsjs c74cf0cb7927a8438a84c9cedbdbab3e4815550813336043f39674a67b6a021an/a 
2023-05-18Pzdv.jsjs 7fc4905fb7d4a1e1c931e869fdfaabceabbdbf242ca9e35ff7178f74e6f7b207Virustotal results 25.42% Quakbot
2023-05-18Qailt.jsjs 32805d4a1cf5298234803410351824aacdf3ae591f390289a3ae325ad6e77e1en/a Quakbot
2023-05-18Zwbqjmaq.jsjs cac584e2ff62f01ca51db682d0b6d32ff11123c3bc3b6a5e9794606ad51844fcn/a Quakbot
2023-05-18Jcagzz.jsjs f252bb947741e263a585e14d04e2ccd38b535351fa818233c9ab294b4b174275Virustotal results 27.59% Quakbot
2023-05-18Wiqbe.jsjs f4915f167c3fb3624d4d085f3c8bed83ad6edb3d7f55c9b9bb17a4f06111e131n/a Quakbot
2023-05-18Zglxx.jsjs 9665c60390e6de64d398dc14f91957bbec2a396ca2c0ee79cde6f8ae0e2a585dn/a Quakbot
2023-05-18Rsjv.jsjs b95a6f4518de9f894317d0fe03a9dbf1132ea5b5053e9f11d63ac0746afde62bn/a Quakbot
2023-05-18Dripkjrv.jsjs 6a2c26dc0efdfc1c4fdf83525f29de723f3f77f866558ce277756af920925c89Virustotal results 27.12% Quakbot
2023-05-18Aogobv.jsjs e4e514b57ab086485b47e1413c71a7e9bebc8c84c6615f90bf252d04c98fb5ebn/a Quakbot
2023-05-17Tksajswr.jsjs e2334bf18981148d6120cbe4ab94a09cd0bb833ae95e71955079aadd6cfc720dn/a Quakbot
2023-05-17Sodxew.jsjs b22c3068eb2fde1d32dd3e2ce301ae348c6baefe0a01c2b50703b10083122ae6n/a Quakbot
2023-05-17Tcbn.jsjs 88f6a8cb20802cddd090c331d20f9642aed6deeda17214154bc2017f911d61c3Virustotal results 21.15% Quakbot
2023-05-17Kjbqtvi.jsjs ccdaaebf2ae2ce525ab5ccf2b4d74cf6b58e7d9515c21c0d46e2b8e0709eefb6n/a Quakbot
2023-05-17Mpjcwpb.jsjs 9695d2ed6261eeebd78cdc70e45105cb68ff36705197941a93e942a4f861ab3eVirustotal results 25.42% Quakbot
2023-05-17Qlidrqrl.jsjs 4604c9a02925f680aa68df7691aab5b247d61f74fa2c2c261a58ed40e9680327n/a Quakbot
2023-05-17Tycyxa.jsjs d5cf74860b7b3a07c522d435a8360406d7c4a5575bd34a1244d8d0c1426bdb61n/a Quakbot
2023-05-17Yorbsyq.jsjs 6228700d79c99caf992f1fda2bf6dac93a086d7f2d9ed5f1020f1981a8825ec9n/a Quakbot
2023-05-17Bcfk.jsjs 6185be7562dcf5a39f24ff969551013ff0b6f41e0fbbbd7ad9665a2fa730586cn/a Quakbot
2023-05-17Gqeuh.jsjs 8aac433e170377beb13882e2553cb98666f979eaf0046a518165e29be77c2d05n/a 
2023-05-17Oeod.jsjs 211c8bc0b3418d61e06350eafb0d023e19e170da16c08de89413955f6fa1c498n/a 
2023-05-17Cikms.jsjs df14f6f74db8185f16dcae8ac56ada7a7597f8057817c8f4c82072f7f18b4b0en/a Quakbot
2023-05-17Gjxqbz.jsjs 14ec58799dc7b5362f8e69028f73f141cd6be134ca38997c9b185c907cba55edn/a Quakbot
2023-05-17Lsdcvya.jsjs b05e019ac212d9cebced1e45b07f04587c54f519a49e943781ed470e61f1dd05n/a Quakbot
2023-05-16Jmuajt.jsjs 3ae3af42fc04bce5998daa66f0ead7468fd17356b483aff5989fbdbcc2eba163n/a Quakbot
2023-05-16Nvgioqcg.jsjs d5cea5133c49a24d0c2e8067b625e590cf97739b328cf7ce3ec351ee5ed18b36n/a Quakbot
2023-05-16Zzinxil.jsjs 9d0852a3df8acf34745d2b458f79be233dc519ddb8b25dd5475398ab6b266833n/a Quakbot