ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain footbalpersian.ir.

Database Entry


IOC ID:1846751
IOC: footbalpersian.ir
IOC Type :domain
Threat Type :payload_delivery
Malware: ClearFake
Confidence Level : Confidence level is high (100%)
Is compromised? : True
ASN:AS13335 CLOUDFLARENET
Country:- US
First seen:2026-07-08 20:30:39 UTC
Last seen:2026-07-09 04:45:04 UTC
UUID:e275835d-7b0b-11f1-97fa-42010aa4000a
Reporter Gi7w0rm
Reward 10 credits from anonymous
10 credits from raj_singh
Tags:8July2026 ClearFake Commandline DomainShadowing Windows

Avatar
Gi7w0rm
The account controlling the DNS for this domain has been compromised and an arbitrary wildcard subdomain is used to execute ClearFake attacks.