http://static.s123-cdn-static.com/uploads/4368770/normal_5fddd6e71da2c.pdf
Classification: Malicious
http://static.s123-cdn-static.com/uploads/4368770/normal_5fddd6e71da2c.pdf is a malicious URL. Linked to Qakbot malware. Seen in 7 countries.
Current activity
- Offline — no longer resolving. Last online 2026-10-18 05:53:30.
- Command & Control server — Used by cybercriminals to control victim computers.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: QAKBOT (S0650)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in AR, BR, CO, CR, DE, US and UY, across education, energy, financial services, government, manufacturing and professional services networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Qakbot | Maltiverse Threat Observatory | 2025-06-17 19:44:25 | 2026-10-18 05:21:17 | country_code:ar country_code:br country_code:co country_code:cr country_code:de country_code:us country_code:uy industry:education-and-nonprofits industry:energy-and-utilities industry:financial-services industry:government-and-public-sector industry:manufacturing industry:professional-services industry:retail-and-hospitality industry:technology-and-telecommunications malicious-activity malware | S0650 QakBot |
URL information
- Hostname
- static.s123-cdn-static.com
- Domain
- s123-cdn-static.com
- TLD
- com
- SHA-256
b6d1e8d71a61fabacc49c5067b900d73bc15e43b7fcd6d7c7bf98986676cfa1a- First indexed
- 2025-07-10 17:06:22
- Last updated
- 2026-10-18 05:53:30
- Last online
- 2026-10-18 05:53:30