deagroup-ks.com
Classification: Malicious
deagroup-ks.com is a malicious hostname. Linked to Hancitor malware. 5 sightings from Threat Observatory, last seen 2026-07-10. Seen in SG.
Current activity
- Offline — no longer resolving. Last online 2026-09-28 02:55:15.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: HANCITOR (S0499)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in SG, across technology networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Hancitor | Maltiverse Threat Observatory | 2026-07-10 18:01:05 | 2026-07-10 18:01:05 | country_code:sg industry:technology-and-telecommunications malicious-activity malware | S0499 Hancitor |
IP addresses resolved by this hostname
- 172.64.80.1 (2026-09-16 08:09:52)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-09-16 08:09:52)
Whois information
- Domain
- deagroup-ks.com
- TLD
- com
- First indexed
- 2026-09-16 08:02:27
- Last updated
- 2026-09-28 02:55:15