URLhaus Database

You are currently viewing the URLhaus database entry for https://reposebay.com/le/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2634586
URL: https://reposebay.com/le/?1
URL Status:Offline
Host: reposebay.com
Date added:2023-05-16 19:13:11 UTC
Last online:2023-05-18 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-16 19:14:07 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:2 days, 2 hours, 49 minutes Poor (down since 2023-05-18 22:04:03 UTC)
Tags:BB28 geofenced js Qakbot link qbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Lubckht.jsjs d76b1300fd995ec8def343df0450c11a58a217803fee3749db4afacebc64182eVirustotal results 22.03% 
2023-05-18Zzsut.jsjs 51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4Virustotal results 22.03%
2023-05-18Hopwhpwv.jsjs bbcdb87a842c5157acea98f0cedd358f764e2613b6a635e4f9f5946de8c07780Virustotal results 13.56% 
2023-05-18Utqoca.jsjs d3c6e06204212c1aeeef29809460056535cba3beca8cf163b7c8719671ef0c9fn/a 
2023-05-18Xrhw.jsjs 79126f299d6fa3d58aff457d118ab11356537345d798c52cf1849567bbd9156dVirustotal results 19.23% Quakbot
2023-05-18Dzld.jsjs 90d7044e2b3c6695b8ce4be887d9fedf198e2631c47d77093e427bbdc2ff19fdVirustotal results 29.82% Quakbot
2023-05-18Hyutdkv.jsjs 00101ce136b60da252cd994cf9a49191259f677d6b7f56801b5d6084e3b5a1a5n/a 
2023-05-18Rlbxehle.jsjs e83bd9c4b21fcd0dac063c512259b7310762d0f7b923cba778206403e5314398n/a Quakbot
2023-05-18Qjehf.jsjs c97e0d75191c3cd583de9edf9cef56be0b4b4bb3e072a64e3fd6133eef6ea96dVirustotal results 25.86% Quakbot
2023-05-18Zdju.jsjs f14437be247480b6af38f3ccdd4ba46e6e55eb7b3d706b8df711f63558b8703fn/a 
2023-05-18Nsids.jsjs fe6c3afc81fba017285089bb2240464e993b83edbf51755fe47e70d5ce454558Virustotal results 22.64% Quakbot
2023-05-18Pzltskup.jsjs e50fb972f8f78042286895b6d869daf014f5e8082e3c3989ca853daee780a6aan/a Quakbot
2023-05-18Syzcpmg.jsjs 1a3fc3e2d336f6c024b0a452cf6eab7b5521bd6591f7ff15ac80caf4af268c3aVirustotal results 32.20% Quakbot
2023-05-17Wfrs.jsjs 3e294b83a7ced7203c04c79e0e2893c636344ba211f59ff49a66d91a93fe3bc4Virustotal results 13.56% Quakbot
2023-05-17Dfxlfgr.jsjs 9ed630b44354fa9a5b12648e092b487dbecee08d6aad53bf5d2695dbea9b9cc6Virustotal results 32.20% Quakbot
2023-05-17Lzvgai.jsjs 5385fad188601d9e6dde0c124799956c0f227ef163e10a45533ba701150ef12fVirustotal results 11.76% Quakbot
2023-05-17Ogqcxv.jsjs da4bf3b68417dffef143d4e6c343ee8adb0fc59559ccca0c4ba48cd6e3e1e5f8Virustotal results 25.42% Quakbot
2023-05-17Exen.jsjs 2dba215a58d9e94365ddf7dad401aaefe0258795b13308a0521c655fc8cbbb26Virustotal results 15.52% Quakbot
2023-05-17Bdzobwo.jsjs 9fc5c95367df0d42df001590faddb4edf2e71a19e7159cb210d5525553462459Virustotal results 15.25% Quakbot
2023-05-17Vsmasm.jsjs fb2bca8ce3aa4207fc636e9ebc34bb47cc0d9b6a233352bff3b6875b6bedce3dn/a Quakbot
2023-05-17Udmz.jsjs 0c9469102ecaca4251e71a40348fef4eb3f8d29bf908101c4e09efd6a086d91fn/a 
2023-05-17Qvjoix.jsjs c4288f8b65f8e5bb48b7f86aaa74ab8a33307a86d43ad72e6399bab4f245c0can/a Quakbot
2023-05-17Miqa.jsjs 57aeff28a6223e79265d7289b1d247a8e4638bf4390a87c3d9b8be2838a794can/a Quakbot
2023-05-17Lfdykmt.jsjs 89daf1d0822d03a7be388ad7c736e571423d8be676172ebe1eb9a44707c68f73n/a Quakbot
2023-05-17Lqbzyeb.jsjs 87cdf54841b045b75b802d0ab5f1c5d77a2bbc82e35ff27d9bb03ceb005e38ben/a 
2023-05-17Dfnbmpe.jsjs 3068cd506d4c47f2c38d1be72a10f7eb7f6b0df5d84ac582853d9ccd2262f414n/a Quakbot
2023-05-17Lzgp.jsjs 220ce0735c0a7765c1114dac57926fd9b207b23714e4434e63eb2cabc5993e2cn/a Quakbot
2023-05-16Flwsbta.jsjs b0530cbf03762c2cf7d7e98946bcf233c0fac2cf468de9d76a4b5e86220ed0e6n/a Quakbot
2023-05-16Ipkwj.jsjs 9b6ab16455f724d4405790eaeec50a78ae47dd0c6a6c0d74d06c368778f0ed71n/a Quakbot
2023-05-16Segg.jsjs 6cc20a08fe33f4f97dca2a1da83f2d44f4f57e4b161ddc2299a1d9172631976cn/a