URLhaus Database

You are currently viewing the URLhaus database entry for https://tpbindo77.xyz/od/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2659500
URL: https://tpbindo77.xyz/od/
URL Status:Offline
Host: tpbindo77.xyz
Date added:2023-06-13 18:39:18 UTC
Last online:2023-06-14 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-06-13 18:40:21 UTC to abuse{at}cloudflare[dot]com)
Takedown time:1 day, 20 hours, 58 minutes Poor (down since 2023-06-15 15:38:40 UTC)
Tags:BB32 geofenced js Qakbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-06-15document_FA507_Jun_15.zipzip 590d757d672504a7fd36b29b3bf323a8d9d353b87295e2380c7371e22da60b96n/a 
2023-06-15document_BE342_Jun_15.zipzip 860ee563b0559402170c33335ab076e78cdf46645e76f616872650b0fc17ccc0Virustotal results 6.67% Quakbot
2023-06-15mAO9rxXy2ey2.jsjs aa9c9a3a40a76a2bac259c25c08411489d9b0574991514dc9fac76ff5d12fd6en/a Quakbot
2023-06-151HaM6BfDpAexy.jsjs 934188c2f14055613ba19d7d74840927bff78ce0d1fb52dd98b296ab9d28ab95n/a Quakbot
2023-06-15HRYRi2TwJjst.jsjs 852618ef59a4df8df32a320b1775c5f257c1f1481550d0f9bd701c20ed53b255n/a Quakbot
2023-06-157Zev6E93owUM.jsjs e7b5bacb031b4a2b76e2a559103c3dfc3795ee5f2ada3a63db26d1b4b276afb0Virustotal results 22.03% 
2023-06-158m3ffiGpnvQGg.jsjs 15d278fcec95174ae520cbe5b6a0f47b29bd3a9023f0c74a58498fb76d1021a9Virustotal results 18.64% 
2023-06-153Trp5spC85H6OX.jsjs 2e0e38430c1decf4a6cbc4a56083f21d37b2c5fbdc93d427edae7720d9ddc0d8Virustotal results 10.34% 
2023-06-14cK9w6Pfics5pJ7.jsjs 2fa2ad7f8afa99f581f00dbf670d0c914ba44761a3f723aadccaaffd87d6bebcVirustotal results 3.39%Quakbot
2023-06-144GWT3o4psztJ.jsjs 940f269d5b9a5c931664c4c5c57f55d309fa906d549202f8e793948ba8826c15Virustotal results 1.69% Quakbot
2023-06-14fsFOUbz8EWS4u.jsjs aa40a59a9bce42bac8e7f9c8cefe208cb707d97c1a2816557875e2ece947dd06Virustotal results 15.25% Quakbot
2023-06-14Oq63BuFHfG95y.jsjs 920edc038dff33a9f7e85a8850b41efe7553e05c55ea970d45dd0809ca6ff22bVirustotal results 0.00% Quakbot
2023-06-14WnDK3vYAwLWFS.jsjs ce325aa2f2fa00c9f66f9f6e16ca0c15dde3c71774e25fe0d2fa98377e4fa907Virustotal results 1.69% Quakbot
2023-06-14zh4NTXPhz4aO.jsjs 54b75674a61ab2bfffe124af32a3ac3213972ae6ced8d4a9bb4d0b7286513257Virustotal results 0.00% Quakbot
2023-06-14NlEyVR9lY1Wr.jsjs 759ddb59654de37cb3dcb7bd281a2e6ebd99d4b74987d6723dcd224db39dc879Virustotal results 0.00% Quakbot
2023-06-14f3NjGJVIKJVsr.jsjs 6ee254383a658cdaaf89c33b3a317af72a04384d990326e57adbefa77a2cf9fbVirustotal results 14.04% Quakbot
2023-06-149iaXSo4sNpSy.jsjs 95f39895645fa1cf28a00404995ea9e9463e30da69c3607fc718f06046175eb9Virustotal results 0.00% Quakbot
2023-06-149s1GlmHgad1o.jsjs d430bf12371e3eed95783e3f3db00b3d4665ca7de88cd76514c64cea4e020175n/a Quakbot
2023-06-14OU7DaQPhbRfj.jsjs 560a5ab4cce6e9d0734472d58f8bf3852a5298769bfed40509ac71dab225d411Virustotal results 15.25%Quakbot
2023-06-13FRE40Rke3Y3y.jsjs d128c1ca12beaff1951aeb80aff1059daa87442e39a5c2bc1674441a7561b7f1Virustotal results 0.00% Quakbot
2023-06-13ytrogkaEsyx22g.jsjs cd92783315a2dd65518a32bd36fe2b33afc753223578d98f1ea106e531f0f2e0n/a Quakbot
2023-06-135vWbvSDSs18Jl.jsjs 930344da054b37c5cc4ce764b1562976503b8062063ec52a0535b3d5a00ff583n/a 
2023-06-13UBcxJSgiGYslii.jsjs 1e714f8c24367068cfb8eafaa93258baf9e3ec77ab4c1b44027a4c4a8ad168b7Virustotal results 0.00% Quakbot
2023-06-13GkdtsQfBUOZEv.jsjs 92fe1dad89f33feab35cc082af7bedc5bdfb88b64a7b4d5c9fb9b5b4ba2a40d8n/a Quakbot