URLhaus Database

You are currently viewing the URLhaus database entry for https://godivingapp.com/oc/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2634893
URL: https://godivingapp.com/oc/?1
URL Status:Offline
Host: godivingapp.com
Date added:2023-05-16 21:56:05 UTC
Last online:2023-05-18 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-16 21:57:12 UTC to abuse{at}amazonaws[dot]com)
Takedown time:1 day, 23 hours, 5 minutes Poor (down since 2023-05-18 21:02:46 UTC)
Tags:BB28 geofenced js Qakbot link qbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Ccwf.jsjs c74cf0cb7927a8438a84c9cedbdbab3e4815550813336043f39674a67b6a021aVirustotal results 28.07% 
2023-05-18Mptwx.jsjs bbcdb87a842c5157acea98f0cedd358f764e2613b6a635e4f9f5946de8c07780Virustotal results 13.56% 
2023-05-18Vovd.jsjs c292c671754e5cc5d124580267d79dff7486c023307791f406ead89fd6c31e1bn/a 
2023-05-18Yxlez.jsjs 7cfdf6db2bcad8f5b911ac39a8da45e6a8bc3e53c287742c8afc09821a544c0fVirustotal results 29.31% Quakbot
2023-05-18Diutlva.jsjs b726185bac5c9502b0014a711f793d0559b2d0afcaf5cc376d063cb315412020Virustotal results 30.51% Quakbot
2023-05-18Bzkm.jsjs d5cf74860b7b3a07c522d435a8360406d7c4a5575bd34a1244d8d0c1426bdb61n/a Quakbot
2023-05-18Nqxdu.jsjs 15abbc922de384ed273fbc1a2e831ab1024bff793998f2cea3c69abd68a85566n/a 
2023-05-18Atwwxxf.jsjs 403516fd88c6e48a70d5ab2c1e966024e8e46c5403dcaa8dbb3b56774715cf30Virustotal results 25.86% Quakbot
2023-05-18Byawk.jsjs 397ed6d5f113de3b5a638878e1ab22bb58f5fb493aaef92441db571bcb4c81b5n/a 
2023-05-18Setstmj.jsjs 5ed8c2a8ffd44a6f80d52c65210bcb3ab9bbfc42a217a03db9d435fe66f68833Virustotal results 25.42% Quakbot
2023-05-18Elukdjbn.jsjs 69d10bf1c18cc7df540de106a1056c5af79f8b60f1ffae762d06532cc84375d8n/a Quakbot
2023-05-17Gtqodgc.jsjs 27d3fa3ffa307f97bc3047f15898d338734929484e224f43ab8740c710601a78n/a Quakbot
2023-05-17Tdwrs.jsjs 51351bc77c5c23de367e4fdd74a87fd4ea6a100dd396c2f78dde57c715543f3dVirustotal results 27.12% Quakbot
2023-05-17Xbzqadt.jsjs c63bbe3dc673315fe3da91f26e53709a754546f9d2fe9fdbbd7dfebbf28c116fVirustotal results 23.73% Quakbot
2023-05-17Zodkbys.jsjs 3ac894a6a388d20bc81ae5f8474ee788079f5036842b1542150a55c8fed2059en/a 
2023-05-17Tvrv.jsjs 5fe1ce92222b0ef2d0fe599c26907689fbeb05acb3c14dcc9cd468d2db479a26n/a Quakbot
2023-05-17Jtqyuyg.jsjs 4604c9a02925f680aa68df7691aab5b247d61f74fa2c2c261a58ed40e9680327n/a Quakbot
2023-05-17Gxaosgk.jsjs 62f72a40ec519cd843b1c38ebe9ee2be23628961bffc952c1da59c3687a87466Virustotal results 24.14% Quakbot
2023-05-17Qddmdhb.jsjs 16e669d4d5391d00940846a4f52891c84d175cd3dabd4f776ef0b2b352c4f2c2n/a Quakbot
2023-05-17Uqkobul.jsjs 4c3579ddf4063b7c37bc0340c9299b7ff623319a3289738406bb92709e6f508cn/a Quakbot
2023-05-17Wdawmco.jsjs dac4ea1dcfbbe9058415df317d02a297204ef7eda22831bf1b5bc7bead1e7026n/a Quakbot
2023-05-17Zccdaqn.jsjs cc4a55ed58ca9a62986eb73cbd8e14841b47bc4ea02b6ac2ded716c2925249een/a 
2023-05-17Lttnfn.jsjs 71adf7028a6e846ceccc54c593785ed556c946db7fc31836f8b2e3b19fc9c88an/a Quakbot
2023-05-17Zazhqyl.jsjs 39cc5954cd622338d58edceaf57567e370d6d57e29c661beb8b044ecb9e19839n/a Quakbot
2023-05-17Uygiq.jsjs e0f5ff4faa09ac8472e8e737c51e6ea42e6406f7db32f8b5f3402000d55299d6n/a Quakbot
2023-05-16Wdbm.jsjs c0835d46e74f988a65b3f52f25a67ffa264db2b9c73107b36757f2620fd51ba3n/a Quakbot
2023-05-16Plqndkq.jsjs 3be1b6423a5defdf8fb61f3c4754e4f31fcb099750ace8b82f6044eac1260c25n/a Quakbot