ctrlINT What the industry said about every indicator, with the quote

llkjllj[.]topDomain

Reported by 1 independent source · first reported by Group-IB · last reported

Last reported 15 months ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “The malware now sends data to a gate server (hxxp://llkjllj[.]top) via HTTP POST requests, rather than directly to the Telegram API.”

    Group-IBVendor
    June’s Dark Gift: The Rise of Qwizzserial

Thanks — we review every report.

Report a wrong value
What is wrong with llkjllj[.]top here?
No account needed. We do not store your IP address.