ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://leusceke.com/p/reach?tk=.

Database Entry


IOC ID:1779216
IOC: https://leusceke.com/p/reach?tk=
IOC Type :url
Threat Type :payload_delivery
Malware: KongTuke
Malware alias:TAG-124, js.LandUpdate808
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS13335 CLOUDFLARENET
Country:- US
First seen:2026-03-30 20:15:27 UTC
Last seen:never
UUID:3161a588-2c75-11f1-9af6-42010aa4000a
Reporter HuntYethHounds
Reward 5 credits from ThreatFox
Tags:ClickFix Kongtuke payload

Avatar
HuntYethHounds
Example: hxxps[:]//leusceke[.]com/p/reach?tk=e637ae6fdecbe78693fba4057bfe348c Tokens expire. If the token has expired the payload script will not be presented with the genuine version of ChromeSetup.exe being dropped instead.