bravelyko.run
Classification: Malicious
bravelyko.run is a malicious hostname. Linked to Lumma Stealer malware. 4 sightings from ThreatFox Abuse.ch, last seen 2025-04-14.
Current activity
- Online — resolving/reachable. Last checked 2026-11-07 04:37:31.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: LUMMA STEALER (S1213)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Lumma Stealer | ThreatFox Abuse.ch | 2025-04-06 04:28:53 | 2025-04-14 10:21:45 | botnet malicious-activity | S1213 Lumma Stealer |
Tags
lummac2 stealer 14april2025 iocbottestIP addresses resolved by this hostname
- 104.21.16.1 (2025-04-06 05:17:40)
- 104.21.112.1 (2025-04-06 05:17:40)
- 104.21.96.1 (2025-04-06 05:17:40)
- 104.21.64.1 (2025-04-06 05:17:40)
- 104.21.48.1 (2025-04-06 05:17:40)
- 104.21.32.1 (2025-04-06 05:17:40)
- 104.21.80.1 (2025-04-06 05:17:40)
- 40.91.108.115 (2026-11-07 04:37:31)
Whois information
- Domain
- bravelyko.run
- TLD
- run
- First indexed
- 2025-04-06 05:17:22
- Last updated
- 2026-11-07 04:37:31