litellm.cloud
Risk AlertPotentially Malicious
Malicious domain used for data exfiltration and C2
litellm.cloud Risk Alert
Malicious domain used for data exfiltration and C2
Potentially Malicious Data Exfiltration Endpoint
This domain is a confirmed malicious endpoint used in a supply chain attack against the litellm Python library. It facilitates the exfiltration of stolen credentials and sensitive system data from compromised environments.
Classification Confidence
highTechnical Vitals
Global Rank
Unranked
Registered
Mar 2026
1 day ago
Primary Hosting
GHOSTYNETWORKS Ghosty Networks LLC
Topics (Themes)
malwaredata exfiltrationsupply chain attackcredential theft