https://deagroup-ks.com/approx.php
Classification: Malicious
https://deagroup-ks.com/approx.php is a malicious URL. Linked to Hancitor malware. 7 sightings from 3 threat sources (Malware Download), last seen 2026-07-10.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 10:47:49.
MITRE ATT&CK associations
Malware families: HANCITOR (S0499)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in SG, across technology networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Hancitor | Maltiverse Threat Observatory | 2026-07-10 18:01:05 | 2026-07-10 18:01:05 | country_code:sg industry:technology-and-telecommunications malicious-activity malware | S0499 Hancitor |
| Hancitor | ThreatFox Abuse.ch | 2021-10-07 00:04:10 | 2021-10-07 00:04:10 | malicious-activity | S0499 Hancitor |
| Malware Download | Abuse.ch | 2021-10-06 16:28:06 | 2021-10-06 16:28:06 | malicious-activity |
Tags
doc hancitor html chanitorURL information
- Hostname
- deagroup-ks.com
- Domain
- deagroup-ks.com
- TLD
- com
- SHA-256
eb92695bc0566b4b78ed84ed08bd84dff80945d0c1c8aa1ef0b0713a460cc3d6- First indexed
- 2021-10-06 17:15:38
- Last updated
- 2026-10-18 10:47:49
- Last online
- 2026-10-18 10:47:49