🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain wisma138ayaka.com.

Database Entry


IOC ID:1923304
IOC: wisma138ayaka.com
IOC Type :domain
Threat Type :payload_delivery
Malware: ClearFake
Confidence Level : Confidence level is high (100%)
Is compromised? : True
ASN:AS13335 CLOUDFLARENET
Country:- US
First seen:2026-09-17 15:07:50 UTC
Last seen:2026-09-17 15:07:57 UTC
UUID:8cbb12b6-b2a9-11f1-8450-42010aa4000a
Reporter Gi7w0rm
Reward 10 credits from raj_singh
Tags:17September2026 ClearFake Commandline DomainShadowing Windows

Avatar
Gi7w0rm
The account controlling the DNS for this domain has been compromised and an arbitrary wildcard subdomain is used to execute ClearFake attacks.