qu.ax
Classification: Whitelisted
qu.ax is a whitelisted (trusted) hostname. Reported by 5 threat sources, last seen 2026-04-11. IoC context and downloadable threat intel on Maltiverse.
Current activity
- Offline β no longer resolving. Last online 2026-04-11 07:07:19.
- Malware distribution β This indicator is distributing malware.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malicious URL | Triage | 2026-02-22 13:26:50 | 2026-04-11 06:13:14 | malicious-activity | |
| Top Popularity Site | Tranco | 2026-03-27 21:58:57 | 2026-03-27 21:58:57 | ||
| Top Popularity Site | Cisco Umbrella | 2024-05-18 10:36:23 | 2025-05-24 10:01:15 | benign | |
| Malware Download | URLhaus Abuse.ch | 2023-08-25 18:17:54 | 2025-04-20 20:18:24 | malicious-activity | |
| Top 1M Site | Cisco Umbrella | 2023-01-08 01:46:45 | 2025-03-15 12:15:38 | benign | |
| Alexa Top 1 Million | Alexa | 2021-08-17 02:57:42 | 2021-11-28 02:42:50 | benign |
Tags
agenttesla targetcompany 499d4c92ae0b7b4b38d21fc5cf646a6e encrypted asar pw-6718 none ascii related_to_mallox_ransomware hijackloader hta extracted defense_evasion discovery persistence privilege_escalationIP addresses resolved by this hostname
- 172.64.80.1 (2024-10-11 09:23:15)
- 107.152.35.34 (2023-01-08 01:46:45)
- 104.21.65.103 (2021-08-17 02:57:43)
- 172.67.161.150 (2021-08-17 02:57:43)
- 157.180.25.161 (2025-02-17 02:27:09)
- 157.180.25.166 (2025-02-17 02:27:09)
- 57.129.55.84 (2025-02-17 04:44:42)
- 141.227.168.109 (2025-02-17 04:44:42)
- 157.180.25.165 (2025-02-17 06:22:26)
- 95.216.170.132 (2025-02-17 06:22:26)
- 37.27.242.216 (2025-02-17 08:33:26)
- 157.180.18.177 (2025-02-17 08:33:26)
- 157.180.25.156 (2025-02-17 08:33:26)
- 141.227.128.72 (2025-04-05 13:32:23)
- 141.227.130.146 (2025-04-05 13:32:23)
- 141.227.164.144 (2025-04-05 13:32:23)
- 141.227.168.76 (2025-04-05 13:32:23)
- 141.227.138.185 (2025-04-05 13:32:23)
- 141.227.160.180 (2025-04-05 13:32:23)
- 141.227.166.93 (2025-04-05 13:32:23)
- 2001:41d0:ab0c:0:f816:3eff:fe8a:97a6 (2025-04-21 09:26:38)
- 2001:41d0:ab08:0:f816:3eff:fefe:ae64 (2025-04-21 09:26:38)
- 2001:41d0:ab02:0:f816:3eff:fee5:27c5 (2025-04-21 09:26:38)
- 141.227.166.127 (2025-04-21 09:26:38)
- 141.227.168.162 (2025-04-21 09:26:38)
- 2001:41d0:ab0b:0:f816:3eff:feb4:8976 (2025-04-21 09:26:38)
- 141.227.160.185 (2025-04-21 09:26:38)
- 2001:41d0:ab0f:0:f816:3eff:fe16:f912 (2025-04-21 09:26:38)
- 141.227.138.96 (2025-04-21 09:26:38)
- 2001:41d0:ab05:0:f816:3eff:fe97:715 (2025-04-21 09:26:38)
- 141.227.172.162 (2025-04-21 09:26:38)
- 141.227.130.183 (2025-04-21 09:26:38)
- 2001:41d0:ab0b:0:f816:3eff:fe90:1d4f (2025-05-24 10:01:13)
- 141.227.172.157 (2025-05-24 10:01:13)
- 141.227.166.187 (2025-05-24 10:01:13)
- 2001:41d0:ab01:0:f816:3eff:fe20:46ec (2025-05-24 10:01:13)
- 141.227.138.153 (2025-05-24 10:01:13)
- 2001:41d0:ab0f:0:f816:3eff:fe5f:8e57 (2025-05-24 10:01:13)
- 2001:41d0:ab05:0:f816:3eff:fe27:7b43 (2025-05-24 10:01:13)
- 141.227.136.130 (2025-05-24 10:01:13)
- 141.227.168.227 (2025-05-24 10:01:13)
- 2001:41d0:ab0c:0:f816:3eff:fef6:a23d (2025-05-24 10:01:13)
- 43.250.54.137 (2026-03-27 21:58:56)
- 2406:4fc0:1002::137 (2026-03-27 21:58:56)
Whois information
- AS name
- AS13335 Cloudflare, Inc.
- Domain
- qu.ax
- TLD
- ax
- City
- San Francisco
- State
- CA
- Country
- US β United States πΊπΈ
- First indexed
- 2021-08-17 02:57:42
- Last updated
- 2026-04-11 07:07:19