ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain leusceke.com.

Database Entry


IOC ID:1779214
IOC: leusceke.com
IOC Type :domain
Threat Type :payload_delivery
Malware: KongTuke
Malware alias:TAG-124, js.LandUpdate808
Confidence Level : Confidence level is moderate (50%)
Is compromised? : False
ASN:AS13335 CLOUDFLARENET
Country:- US
First seen:2026-03-30 20:14:11 UTC
Last seen:2026-04-09 14:08:17 UTC
UUID:03edabb2-2c75-11f1-9af6-42010aa4000a
Reporter HuntYethHounds
Reward 5 credits from ThreatFox
Tags:ClickFix Kongtuke payload

Avatar
HuntYethHounds
Example: hxxps[:]//leusceke[.]com/p/reach?tk=e637ae6fdecbe78693fba4057bfe348c Tokens expire. If the token has expired the payload script will not be presented with the genuine version of ChromeSetup.exe being dropped instead.