ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://tuvalul.cyou/api.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1687118
IOC: https://tuvalul.cyou/api
IOC Type :url
Threat Type :botnet_cc
Malware: Lumma Stealer
Malware alias:LummaC2 Stealer
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS8560 IONOS-AS
Country:- DE
First seen:2025-12-27 12:03:40 UTC
Last seen:2026-01-01 22:54:05 UTC
UUID:158fa27c-e31c-11f0-9957-42010aa4000a
Reporter DonPasci
Reward 5 credits from ThreatFox
Tags:c2 Lumma stealer triage
Reference: https://tria.ge/251227-hesanatqgq