ClearFake

Malware Family

30 881 indicators of compromise attributed to ClearFake across abuse.ch threat intelligence feeds.

Domains

30 029

IPs

35

URLs

274

Hashes

543

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (30 029)IPs (35)URLs (274)Hashes (543)

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CCredit-Card SkimmerpayloadPayload Delivery

Sample indicators

IndicatorType
www.sibat-ci.comdomain
noir-1.miv6soren.in.netdomain
grannysgummies.comdomain
en-synaptigen-us.comdomain
pigeon-net.pigeonbreed.in.netdomain
bettime90.casinodomain
uaat6cni.bet1yek1.betdomain
file1-swap.travemox.in.netdomain
jvdf.serial.videodomain
free5logicway.eleuther-stupidity.betdomain
tj0x.eggman8eisha.in.netdomain
ext3gate.hydrofluxstorage.in.netdomain
waggrzdi.meadow-observability-core.gardendomain
bend-edge.starbend.in.netdomain
apidocs.1zorelin.latdomain
zent-node.zentalis.in.netdomain
rush.powerdrift.surfdomain
dist-sync.veloxis.in.netdomain
vkg9h21t.eachway-multiplier.comdomain
datahostunit.flex2node.surfdomain
213.232.235.51ip
193.233.82.126ip
178.16.53.232ip
178.16.55.92ip
45.94.47.129ip
77.239.114.108ip
94.154.35.155ip
188.119.122.123ip
51.222.96.111ip
153.75.90.64ip
153.75.90.67ip
178.16.53.219ip
89.124.109.242ip
45.155.69.173ip
54.240.48.33ip
195.10.205.218ip
185.196.9.183ip
158.94.210.166ip
91.219.23.145ip
94.154.35.162ip
https://infodatalis.comurl
https://cdn.jsdelivr.net/gh/cowenrty/issue/googleurl
https://qbsad.pages.dev/url
https://svcnode.neturl
https://metricgw.comurl
https://cdn.jsdelivr.net/gh/galinavsuk6/fjhg-567/hm-354url
https://testingcf.jsdelivr.net/gh/3fF2/CC-40BA-03-BF/dgfhtyr-47574-fhdfurl
https://crop-v2.croprotation.in.neturl
https://cdn.jsdelivr.net/gh/34-19-44r/573-45-43cvi/B5-B0-74url
https://haven-v2.goldhaven.in.neturl
https://cdn.jsdelivr.net/gh/galinavsuk6/text-set/vdrurl
https://nextcheck.onlineurl
https://cdn.jsdelivr.net/gh/zor-876/futures-import@04e2419/llmurl
https://sky-sync.bluehaven.in.neturl
https://raw.githubusercontent.com/Kath19634/calcium/refs/heads/main/dissuadeurl
https://rot04.croprotation.in.neturl
https://blue03.bluehaven.in.neturl
https://testingcf.jsdelivr.net/gh/19875567137/76738746509856-346/rty4657293847url
https://online-park.onlineurl
https://cdn.jsdelivr.net/gh/Anny11-34/aviator/stuckurl