🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain ww38.roofnrack.us.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1983920
IOC: ww38.roofnrack.us
IOC Type :domain
Threat Type :payload_delivery
Malware: FAKEUPDATES
Malware alias:FakeUpdate, GhoLoader, SocGholish
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS61969 TEAMINTERNET-AS
Country:- DE
First seen:2026-10-24 22:17:51 UTC
Last seen:never
UUID:c0ad3187-cff8-11f1-a74e-42010aa4000a
Reporter varysz
Reward 5 credits from ThreatFox
Tags:SocGholish