URLhaus Database

You are currently viewing the URLhaus database entry for https://todaycss.com/rblo/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2635116
URL: https://todaycss.com/rblo/?1
URL Status:Offline
Host: todaycss.com
Date added:2023-05-16 22:01:07 UTC
Last online:2023-05-18 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-16 22:02:13 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:1 day, 23 hours, 15 minutes Poor (down since 2023-05-18 21:17:28 UTC)
Tags:BB28 geofenced js Qakbot link qbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Nduif.jsjs 51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4Virustotal results 22.03%
2023-05-18Akflp.jsjs 6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59dVirustotal results 28.81% 
2023-05-18Pcyay.jsjs d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37aVirustotal results 24.56% 
2023-05-18Ifikknz.jsjs 8011ee77efd02ec9574815cca69d8d557e26cc408ef06972770ab880ed9d23fen/a 
2023-05-18Wrbkacdx.jsjs 47b6986c5352ef5a3ecf9cbe02d34caf8e096cb6635c958ce8dedb89540da3d8Virustotal results 26.79% Quakbot
2023-05-18Bfwc.jsjs 4740733be7e52c249ac1279362bec08d1af06172836e48e8e4d016c679ba2c01Virustotal results 16.95% Quakbot
2023-05-18Guqg.jsjs b89d6433da85e8b53b60dd8f31aa096c923d9b4fb337c03d3b381482ef280974n/a Quakbot
2023-05-18Ryja.jsjs 3f5e5c65bd5814cdaf300e4fff7de23851e1c5fcc764d920ba42761515bc506aVirustotal results 25.42% Quakbot
2023-05-18Skylcd.jsjs 828ab9b198ace6540bab66d12bff28bf5b11bb1258df06ae467240d2ff175f1bVirustotal results 24.56% 
2023-05-18Gfsz.jsjs f4915f167c3fb3624d4d085f3c8bed83ad6edb3d7f55c9b9bb17a4f06111e131n/a Quakbot
2023-05-18Tjqgwfmm.jsjs bc08bfae3a441cb9485634aeda5f5ae4cbbe5e36cd98ce7b2812cd62ed4e5034Virustotal results 25.42% 
2023-05-18Cooqost.jsjs b243ce7f5b24e6eab35ff99fcc718064f5897388b337460b05226b50e50b7dfen/a Quakbot
2023-05-17Eipyzlw.jsjs 8e13d078cc5a623e77df862498a637bd089487d45c2af8d1413f79f59d94dea3n/a Quakbot
2023-05-17Sxaq.jsjs fb639f61394301ec51c3c82b270fa10118b12150f177db33a72560d80ad79f25n/a 
2023-05-17Hvyqaly.jsjs 7b0e64b5b88495d402a11b16ad7776cc5e0d44a07992e8b9cf9c7006a92ac8bcn/a Quakbot
2023-05-17Xugkcyfy.jsjs a5f3d5a1dd9f57238b6a528792a0d6043f93289be9f4e2760c3549006c132bf8n/a Quakbot
2023-05-17Mwxujf.jsjs 9fc93269f064d50db15333e3dbcf15dccb35094dc51bedfc465ba99ce6a37953n/a Quakbot
2023-05-17Xjwya.jsjs 92bcab1aebfd8fc6b8ed37048bab5574189469b98f8152e71b4c41106be5e52en/a Quakbot
2023-05-17Cpmwxoxk.jsjs 1382bbc235ac7b5a2dd52d131a5789c7736d4f2a5d674e59c647d3aa92091188n/a Quakbot
2023-05-17Xsyqfky.jsjs 4d39b321ed33c69cfba60c4895ccff89e5803d57091427100b5016a4b7f0e536n/a Quakbot
2023-05-17Qjwkitu.jsjs 8b0b712f5f7470001c3f60d4fc745c68292bf3b6beb7b745bffc391901a33855n/a Quakbot
2023-05-17Urlikmr.jsjs 17394807b3c412047a70f77a133a20f71decde7902573c82b7cdb0983f8bd938n/a Quakbot
2023-05-17Igynv.jsjs 37172b676b1ed303c23d0cc64886819bfdb33a15e6e749c9698bf8feb354502fn/a Quakbot
2023-05-17Cbuowi.jsjs e28e71f16beb2c8e9938a44221a97d84cf14aaa88d29e7afd3ff942ff57e6b66n/a Quakbot
2023-05-17Splrilf.jsjs 91cc797aa0d12681b8b48d0e803287fc2d92bc82155bdc0200e7560a2f02844bn/a Quakbot
2023-05-17Vimgob.jsjs 685efdf6a866249d558de1d8a0a9fb07d4512555130db5cf03e0a76d37dd6f17n/a Quakbot
2023-05-17Rhsm.jsjs e4e20438d1922cf40721f2e8a9273081413012bacdf80f482b1fb8561ac84d6bn/a Quakbot
2023-05-16Lyxbxnv.jsjs 7ca8d837ba1b8d8ab34d934ee093f7592fa04b033b2103452913eb617c0c2c8fn/a Quakbot