https://deagroup-ks.com/converting.php
Classification: Malicious
https://deagroup-ks.com/converting.php is a malicious URL. Linked to Hancitor malware. 7 sightings from 3 threat sources, last seen 2026-07-10. Seen in SG.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 10:41:41.
MITRE ATT&CK associations
Malware families: HANCITOR (S0499)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in SG, across technology networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Hancitor | Maltiverse Threat Observatory | 2026-07-10 18:01:05 | 2026-07-10 18:01:05 | country_code:sg industry:technology-and-telecommunications malicious-activity malware | S0499 Hancitor |
| Hancitor | ThreatFox Abuse.ch | 2021-10-07 00:04:10 | 2021-10-07 00:04:10 | malicious-activity | S0499 Hancitor |
| Malware Download | Abuse.ch | 2021-10-06 16:28:04 | 2021-10-06 16:28:04 | malicious-activity |
Tags
doc hancitor html chanitorURL information
- Hostname
- deagroup-ks.com
- Domain
- deagroup-ks.com
- TLD
- com
- SHA-256
d6c7760c09132d2819acb4c50d707863c728a1c24fb866f19809c2e2c75b2bc2- First indexed
- 2021-10-06 17:15:40
- Last updated
- 2026-10-18 10:41:41
- Last online
- 2026-10-18 10:41:41