🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://profileone.jo3.org/massfrnd/Crypted.ps1.

Database Entry


IOC ID:1938684
IOC: https://profileone.jo3.org/massfrnd/Crypted.ps1
IOC Type :url
Threat Type :payload_delivery
Malware: VIP Keylogger
Confidence Level : Confidence level is high (95%)
Is compromised? : True
ASN:AS60117 HS
Country:- AE
First seen:2026-09-27 08:50:50 UTC
Last seen:never
UUID:d076f553-ba4e-11f1-af02-42010aa4000a
Reporter whack_sh
Reward 5 credits from ThreatFox
Tags:ps1 VIPKeylogger

Avatar
whack_sh
Multi-vantage capture (datacenter/residential/mobile); payload SHA-256 85d28868e4eb98f23a8e517c8733323afaee2f11951d3937bf358d802a80905f; partner feed labels it vipkeylogger; 24 VirusTotal engines malicious; re-verified serving the same bytes at submission time