pa-portal.gloshex.com
Classification: Malicious
pa-portal.gloshex.com is a malicious hostname. Linked to Socgholish malware. Reported by ThreatFox Abuse.ch (FAKEUPDATES), last seen 2026-09-14.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 17:34:21.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: SOCGHOLISH (S1124)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| FAKEUPDATES | ThreatFox Abuse.ch | 2026-09-14 16:12:55 | 2026-09-14 16:25:03 | botnet malicious-activity | S1124 SocGholish |
Tags
socgholish fakeupdate gholoaderIP addresses resolved by this hostname
- 207.246.98.173 (2026-10-17 17:34:21)
Whois information
- Domain
- gloshex.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS3.MY-CONTROL-PANEL.COM, NS4.MY-CONTROL-PANEL.COM
- Registrant
- NameSilo, LLC
- Address
- 1928 E. Highland Ave. Ste F104 PMB# 255
- City
- Phoenix
- State
- AZ
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- Domain created
- 2026-03-03 07:00:00
- Domain expires
- 2027-03-03 09:17:22
- First indexed
- 2026-09-14 16:25:03
- Last updated
- 2026-10-17 17:34:22