URLhaus Database

You are currently viewing the URLhaus database entry for https://playhave.com/in/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2635051
URL: https://playhave.com/in/?1
URL Status:Offline
Host: playhave.com
Date added:2023-05-16 21:59:10 UTC
Last online:2023-05-18 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-16 22:01:25 UTC to abuse{at}as45671[dot]net[dot]au)
Takedown time:2 days, 0 hours, 49 minutes Poor (down since 2023-05-18 22:50:36 UTC)
Tags:BB28 geofenced js Qakbot link qbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Imqsn.jsjs d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37aVirustotal results 23.73% 
2023-05-18Clla.jsjs 1a2e818afb29521c8658d2a0643158af97370d69c32c0bd85cb900bd3e85b0eeVirustotal results 22.03% 
2023-05-18Kdulpgv.jsjs 51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4Virustotal results 22.03%
2023-05-18Fgfqwp.jsjs c74cf0cb7927a8438a84c9cedbdbab3e4815550813336043f39674a67b6a021aVirustotal results 28.07% 
2023-05-18Lrmzfw.jsjs ed12509d0c36a587b6d64914d5f75da73c48cc024cac16d3a75467e5bc69897fn/a 
2023-05-18Pehi.jsjs c28a0689fa744ad9aa6b9113d992a9fc9d303cf30f2b622975fb5e9a82ac02e6Virustotal results 27.12% Quakbot
2023-05-18Etgua.jsjs be782f3af4554ce0188bf903632e461191f0020d22f70c2760c1f9d32b21bfban/a 
2023-05-18Rzxlqytd.jsjs 3c55d89d269d20d6852bd0da433091d1fb247c736acddefdf23c414213857e73Virustotal results 31.03% Quakbot
2023-05-18Rdyteh.jsjs 3e294b83a7ced7203c04c79e0e2893c636344ba211f59ff49a66d91a93fe3bc4Virustotal results 13.56% Quakbot
2023-05-18Nfilklfs.jsjs f21a9095152b5a7124af37bde4000f76717ad002ec5e40bb2b86dc71839dabeaVirustotal results 30.51% Quakbot
2023-05-18Qbsuw.jsjs 7a4ab56c0029ea06eceabbc4e8b9f005b37b97d1ea376ed3db95729269780e17n/a Quakbot
2023-05-18Akucn.jsjs 09ae96eb664bab43c15f8208e579fc06cb4e92d817de28ade6659d138ca9571en/a 
2023-05-18Qfnorvc.jsjs b45fa98328f6170801cd88be88f4ac670f2266e2ed383e78f37fdd5d860dc695Virustotal results 30.51% Quakbot
2023-05-17Ovjrrc.jsjs 9b45c4614db7627fee14ec88aef1faf7e97115a9755ad170998bf331df8c2b0dVirustotal results 27.12% Quakbot
2023-05-17Qpmbowk.jsjs 8b5a063138d39c424fbf7ce7022dc972afa3c2df792b3a030272c1c77490dc96n/a Quakbot
2023-05-17Vbdem.jsjs 8290e44e2bd6431a3cb8fce93c83b97d4710c63bffe7f1eb93db3282ae17b5f6Virustotal results 27.12% Quakbot
2023-05-17Ksdtwlh.jsjs 97961abc6b3628852a890d9f074e8095b28bd2f9f186169b33981286e6f0529cn/a Quakbot
2023-05-17Mykqaz.jsjs f39cee789a4050e31f3f61e2dae48c0b5328d480424a439ba3c06fdf7d12ba43n/a 
2023-05-17Fibg.jsjs d4048bb4d8d517078d21db74a0238b8f0696dbad0bfb9cecbe0dad5e3a89bb47Virustotal results 30.51% Quakbot
2023-05-17Oebsrne.jsjs 3b521273a1f49f0fb7c2f4ea15df405e5c77af2e36c653ca0e352ada89db0c6bn/a 
2023-05-17Qvjrlexe.jsjs 5c02cc26158109b9e14b2601be5848cda11477e56c521a791dfdc4081366da0bn/a Quakbot
2023-05-17Uszbh.jsjs 975998596a06c14835b2991f23a98e84a9716a97091d77a1f8108b5892b22ec2n/a Quakbot
2023-05-17Hfyaqfuy.jsjs 4b38d6791e13a3cd24a9497106c26b55dfb024ee93436f08a01ccb10eabaf181n/a 
2023-05-17Cnlved.jsjs 9081843ff4532f1a0587f2129186fb27802d0d574e26ce755f1c84e708d6163bn/a Quakbot
2023-05-17Ikhvs.jsjs 69b6407092b9198a522d82e51f7681fb6a87e2f64a302e888d37eaa8402dd129n/a Quakbot
2023-05-17Qcoup.jsjs bc0971db3b7403215e6a5db027173cacfb7e5760df0ea536d440498a541c1685n/a Quakbot
2023-05-17Zywtakw.jsjs ce96e6c437d22d90f560edc621d5e610e83264b893f2d1d078e49381ef0e366fn/a Quakbot
2023-05-16Drdv.jsjs df563efbf8f271dbca2e6ed0c0f6d3983b15e5fe395ba743157a2c48d7c4184cn/a Quakbot
2023-05-16Phop.jsjs 4610441af188599410ebc4b4a27c356a52d92a92ab5faa1b8d1e127d0a1bcae7n/a Quakbot