ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://00491751076163.com/api.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1735685
IOC: http://00491751076163.com/api
IOC Type :url
Threat Type :botnet_cc
Malware: Lumma Stealer
Malware alias:LummaC2 Stealer
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS34788 NMM-AS
Country:- DE
First seen:2026-01-22 18:04:29 UTC
Last seen:2026-02-07 11:52:36 UTC
UUID:cbd67272-f7bc-11f0-9957-42010aa4000a
Reporter DonPasci
Reward 5 credits from ThreatFox
Tags:c2 Lumma stealer triage
Reference: https://tria.ge/260122-qg9lqahv9e