https://deagroup-ks.com/secure.php
Classification: Malicious
https://deagroup-ks.com/secure.php is a malicious URL. Linked to Hancitor malware. 7 sightings from 3 threat sources (Malware Download), last seen 2026-07-10.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 10:36:43.
MITRE ATT&CK associations
Malware families: HANCITOR (S0499)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in SG, across technology networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Hancitor | Maltiverse Threat Observatory | 2026-07-10 18:01:05 | 2026-07-10 18:01:05 | country_code:sg industry:technology-and-telecommunications malicious-activity malware | S0499 Hancitor |
| Hancitor | ThreatFox Abuse.ch | 2021-10-07 00:04:08 | 2021-10-07 00:04:08 | malicious-activity | S0499 Hancitor |
| Malware Download | Abuse.ch | 2021-10-06 16:28:08 | 2021-10-06 16:28:08 | malicious-activity |
Tags
doc hancitor html chanitorURL information
- Hostname
- deagroup-ks.com
- Domain
- deagroup-ks.com
- TLD
- com
- SHA-256
dfd026ce17458637f26a9ec527c21f01732fcf1e8cebfe975ae2e12a1481e349- First indexed
- 2021-10-06 17:15:36
- Last updated
- 2026-10-18 10:36:43
- Last online
- 2026-10-18 10:36:43