Indicator of Compromise
High Domain Active
Value
pa5s.x-2-lu.ru
Association

ClearFake

Tags
clearfake
Description

payload_delivery

First Seen

October 29, 2025 16:39

Last Seen

October 29, 2025 16:48
6 months ago

Created

April 29, 2026 14:29

Last Updated

April 29, 2026 14:29

Additional Metadata 
{'anonymous': '1',
 'confidence_level': 100,
 'crawled_at': '2026-04-29T14:29:08.880092+00:00',
 'malware': 'js.clearfake',
 'malware_alias': None,
 'malware_printable': 'ClearFake',
 'original_value': None,
 'reference': None,
 'reporter': 'ttakvam',
 'source': 'threatfox-abuse-ch',
 'tags': ['clearfake'],
 'threat_type': 'payload_delivery',
 'threatfox_id': '1628993'}
STIX Data 
{'description': 'payload_delivery',
 'external_references': [{'external_id': '1628993',
                          'source_name': 'threatfox-abuse-ch',
                          'url': 'https://threatfox.abuse.ch/ioc/1628993/'}],
 'id': 'indicator--1628993',
 'name': 'DOMAIN: pa5s.x-2-lu.ru',
 'pattern': "[DOMAIN:value = 'pa5s.x-2-lu.ru']",
 'pattern_type': 'stix',
 'pattern_version': '2.1',
 'type': 'indicator',
 'valid_from': '2025-10-29 16:39:21',
 'valid_until': '2025-10-29 16:48:39'}
Quick Actions
Edit IOC Update from Web
Back to IOCs
Dashboard About