ClearFake

Malware Family

8,318 indicators of compromise attributed to ClearFake across abuse.ch threat intelligence feeds.

Domains

7,772

IPs

26

URLs

36

Hashes

484

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

webcdnstat.5toralix.picsdomaintinybetkade.comdomainpodcast.actordomainmodbus.openapiservicedata.picsdomainalbze.bertifolia.hudomainh537srko.shartbazi.comdomainaetherframework.digitaldomaincolg1.orgdomainmszpkxdh.script-bridge.digitaldomainpdzb.pdfbama.comdomainfsphwjzi.maharatmodiran.xyzdomainatuxkke.penalti.websitedomainraqmk.mururhesabdari.xyzdomainmzapcfw.wlwyb.comdomainpf6n62u7.luxerabet5.comdomainrapidwavenet.verdalya.gardendomainpalenyz.gulshans.comdomaincho4uj96.bet303iran.orgdomaincmdsets.jesuit5itny.latdomainyym1l9om.qurandownload.xyzdomain89.124.109.242ip45.155.69.173ip65.109.115.111ip178.16.53.219ip193.233.82.126ip178.16.53.243ip178.16.53.232ip178.16.55.92ip103.141.13.26ip194.76.227.172ip2.27.5.153ip77.239.114.108ip94.154.35.155ip188.119.122.123ip51.222.96.111ip153.75.90.37ip153.75.90.64ip153.75.90.66ip153.75.90.67ip213.232.235.51iphttps://omnia360.de/reCAPTCHA.htaurlhttps://devltd.top/flomowk2.zipurlhttps://cdn.jsdelivr.net/gh/savina-41vf67-74j/forw-74urlhttps://cdn.jsdelivr.net/gh/vitiapig/lang-28/roboturlhttps://cdn.jsdelivr.net/gh/savina-41/r4240-98d7-bc2c@main/fe3burlhttps://cdn.jsdelivr.net/gh/savina-41/mcv4f-jp5/launchingurlhttps://cdn.jsdelivr.net/gh/swiftvpnaccess/smtp-incoming-mx/loadurlhttp://91.92.242.243:6600/ESPIxN5lducyZQW5we\urlhttps://cdn.jsdelivr.net/gh/swiftvpnaccess/wanting-public-driver-barricade/256446-uuidurlhttp://wer.cache-processing-node.com/etcurlhttps://www.diction.ch/wp-content/uploads/2026/07/ScreenConnect.ClientSetup.msiurlhttps://cdn.jsdelivr.net/gh/galinavsuk6/fjhg-567/humurlhttps://cdn.jsdelivr.net/gh/savina-41/4240-98d7-bc2c@main/fe3burlhttps://cdn.jsdelivr.net/gh/galinavsuk6/text-set/vbrurlhttps://cdn.jsdelivr.net/gh/swiftvpnaccess/wanting-public-driver-barricade/78956-uuidurlhttps://cdn.jsdelivr.net/gh/arinao7/6e91d58f-acdf/e62urlhttps://cdn.jsdelivr.net/gh/galinavsuk6/sdg7-j9/r-fd7urlhttps://cdn.jsdelivr.net/gh/galinavsuk6/text-set/vdrurlhttp://85.239.149.16/f6ptObhnkvaYRgMEJurlhttps://cdn.jsdelivr.net/gh/savina-41/d846-4abc/id-7843url