https://static.s123-cdn-static.com/uploads/4368770/normal_5fddd6e71da2c.pdf
Classification: Malicious
https://static.s123-cdn-static.com/uploads/4368770/normal_5fddd6e71da2c.pdf is a malicious URL. Linked to Qakbot malware. Seen in 7 countries.
Current activity
- Offline — no longer resolving. Last online 2026-10-18 05:52:15.
- Command & Control server — Used by cybercriminals to control victim computers.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: QAKBOT (S0650)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in AR, BR, CO, CR, DE, US and UY, across education, energy, financial services, government, manufacturing and professional services networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Qakbot | Maltiverse Threat Observatory | 2025-06-17 19:44:25 | 2026-10-18 05:21:17 | country_code:ar country_code:br country_code:co country_code:cr country_code:de country_code:us country_code:uy industry:education-and-nonprofits industry:energy-and-utilities industry:financial-services industry:government-and-public-sector industry:manufacturing industry:professional-services industry:retail-and-hospitality industry:technology-and-telecommunications malicious-activity malware | S0650 QakBot |
URL information
- Hostname
- static.s123-cdn-static.com
- Domain
- s123-cdn-static.com
- TLD
- com
- SHA-256
63c8465f5ed27dcd7ceec6f0ff4f4dcbd1a8e9d0c16f5990ce08bbd593041882- First indexed
- 2025-07-10 17:04:27
- Last updated
- 2026-10-18 05:52:15
- Last online
- 2026-10-18 05:52:15