https://acms.saleseos.com/src/js/scripts/gallery/photo-swipe/retraction.php
Classification: Malicious
https://acms.saleseos.com/src/js/scripts/gallery/photo-swipe/retraction.php is a malicious URL. Linked to Hancitor malware. Seen in SG.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 10:47:46.
MITRE ATT&CK associations
Malware families: HANCITOR (S0499)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in SG, across technology networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Hancitor | Maltiverse Threat Observatory | 2026-07-10 18:01:05 | 2026-07-10 18:01:05 | country_code:sg industry:technology-and-telecommunications malicious-activity malware | S0499 Hancitor |
| Malware | Google Safebrowsing | 2022-02-01 18:15:17 | 2022-02-01 18:15:17 | malicious-activity | |
| Unwanted Software | Google Safebrowsing | 2022-02-01 18:15:17 | 2022-02-01 18:15:17 | malicious-activity | |
| 2022-02-02 16:Xx:Xx | URLhaus Abuse.ch | 2022-02-01 17:57:08 | 2022-02-01 17:57:08 | malicious-activity | |
| Malware Download | URLhaus Abuse.ch | 2022-02-01 17:57:08 | 2022-02-01 17:57:08 | malicious-activity |
Tags
malware_downloadURL information
- Hostname
- acms.saleseos.com
- Domain
- saleseos.com
- TLD
- com
- SHA-256
9d8a75a95ccf10e3dea8eae9e822483214a6e00694e94c130fce82c8d646223c- First indexed
- 2022-02-01 18:15:17
- Last updated
- 2026-10-18 10:47:46
- Last online
- 2026-10-18 10:47:46