qu.ax

Classification: Whitelisted

qu.ax is a whitelisted (trusted) hostname. Reported by 5 threat sources, last seen 2026-04-11. IoC context and downloadable threat intel on Maltiverse.

Current activity

  • Offline β€” no longer resolving. Last online 2026-04-11 07:07:19.
  • Malware distribution β€” This indicator is distributing malware.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Malicious URL Triage 2026-02-22 13:26:50 2026-04-11 06:13:14 malicious-activity
Top Popularity Site Tranco 2026-03-27 21:58:57 2026-03-27 21:58:57
Top Popularity Site Cisco Umbrella 2024-05-18 10:36:23 2025-05-24 10:01:15 benign
Malware Download URLhaus Abuse.ch 2023-08-25 18:17:54 2025-04-20 20:18:24 malicious-activity
Top 1M Site Cisco Umbrella 2023-01-08 01:46:45 2025-03-15 12:15:38 benign
Alexa Top 1 Million Alexa 2021-08-17 02:57:42 2021-11-28 02:42:50 benign

Tags

agenttesla targetcompany 499d4c92ae0b7b4b38d21fc5cf646a6e encrypted asar pw-6718 none ascii related_to_mallox_ransomware hijackloader hta extracted defense_evasion discovery persistence privilege_escalation

IP addresses resolved by this hostname

Whois information

AS name
AS13335 Cloudflare, Inc.
Domain
qu.ax
TLD
ax
City
San Francisco
State
CA
Country
US β€” United States πŸ‡ΊπŸ‡Έ
First indexed
2021-08-17 02:57:42
Last updated
2026-04-11 07:07:19