Lumma.cy Scam Check: Blacklist Warning

November 3, 2026 at 7:49 PM

Suspicious Website

Leave a review

Checked by Website Reputation Checker

Table of Contents

Danger Zone

Risky Territory

Caution Advised

Trusted but Verify

Safe & Secure

Lumma → Safety Check

First checked September 26, 2026 at 11:42 AM

Website content and technical signals analyzed

Method: automated checks.

Suspicious Website Gridinsoft currently classifies this site as Suspicious Website. The report highlights 12 blacklist detections and no established public user-review history.

How we scored lumma.cy

Tech signals:

Cloudflare Browser Insights, Tailwind CSS

Negative signals:

security-provider warnings
multiple malware or phishing blacklist detections (12)
a redirect to another domain (grabber.cy)
limited independent reputation data

Positive signals:

an active SSL certificate (3 months)

Final destination:

https[:]//grabber.cy/c24888e733b6c1b0aa965670f4ea6219/login

9 /100

Trust Score

Location

External provider warnings

Last checked November 3, 2026 at 7:49 PM by Gridinsoft Trust Model v2.5.8

Share this report?

What is Lumma?

According to its current page title, lumma.cy presents itself as “BOMBAY STEALER - Login”. The sections below evaluate the site-specific reputation and technical findings.

Is lumma.cy safe?

Use caution with lumma.cy. Its current Gridinsoft trust score is 9/100; review the site-specific findings below before use.

Why is lumma.cy marked "Suspicious Website"?

Gridinsoft's current assessment of lumma.cy is based on external redirect behavior. Context considered alongside those findings includes limited public traffic history. 12 of 27 publicly displayed security sources report a warning. A separate license-restricted partner security signal also contributes to the automated assessment; its provider name and verdict cannot be displayed publicly under the source license.

Registration Form

Automated page analysis detected form or data-entry functionality on lumma.cy. Forms can involve user-submitted information, so verify ownership and privacy terms before entering data.

Cloudflare Browser Insights

This website is proxied through Cloudflare's CDN/network and has Cloudflare Browser Insights enabled.

Tailwind CSS

Blacklisted by Security Providers

Security intelligence signal: A security-provider signal contributes to the automated assessment of lumma.cy. Publicly displayable provider verdicts, when available, are reported separately; some source details may be restricted by license.

Redirects to Another Domain

This site redirects visitors to a different domain. This can be legitimate in some migrations or forwarding setups, but it reduces transparency for users evaluating the original address.

External provider warnings: 12/27 Suspicious Website

This section shows what independent external security sources say about this site.

A warning appears when one or more sources report malware, phishing, abuse, or other safety concerns. Each row shows the source and its verdict.

If no source reports a warning, the site is shown as clear in this section.

alphaMountain.ai

Malicious

CRDF

Malicious

CyRadar

Malware

ESET

Malware

Fortinet

Malware

G-Data

Malware

Kaspersky

Phishing

Lionic

Malicious

Seclookup

Malicious

Sophos

Malware

Webroot

Malicious

BitDefender

Warned

External provider results for Lumma.cy, last checked November 2, 2026. — VirusTotal

Domain Information

Top Level Domain .cy Country Code TLD

Domain Name Lumma.cy

Registration details are private or not accessible for this domain.

Technical Details

HTTP status 301

IP Address 172.67.198.66

Hosting Provider AS13335 Cloudflare, Inc. US

Network AS13335 - Cloudflare, Inc.

SSL Certificate YE1 TLSv1.3 · Valid for: 3 months · from October 13, 2026 at 2:13 AM · to January 11, 2027 at 2:13 AM

Content from the analyzed website

Quoted for security analysis. These statements belong to the source website and are not endorsed by Gridinsoft.

Original page title BOMBAY STEALER - Login

Original description currently the top #1 infostealer. entirely programmed in C. no digital footprints being stored on our servers

Primary Language

Mentioned hosts (6)

lumma.cy grabber.cy fonts.googleapis.com cdn.tailwindcss.com static.cloudflareinsights.com fonts.gstatic.com

How to block Lumma.cy?

Our Anti-Malware can automatically block access to lumma.cy if it is flagged as malicious.

Install and run the protection.
The program will block flagged domains and remove related threats.

Exclusion

If you believe lumma.cy is safe, you can add it to the exclusion list:

Open Gridinsoft Anti-Malware → Tools → Ignore List.
Go to the Internet tab and add lumma.cy.

See detailed instructions for more options.

Are You the Owner?

If you own Lumma.cy and want to challenge the trust score, please submit a review request via portal.gridinsoft.com. There you can claim your profile and add verified company/contact details. If you cannot access the portal, email legal(at)gridinsoft.com with proof of legitimacy and contact details. We never charge website owners for reviews or reconsideration requests. For more information, please review our Disclaimer.

Leave a review

Share your real experience with lumma.cy. Is it a trustworthy site, or did you encounter any issues? The more detail you provide, the more helpful your review is for others!

Publication Tip

- Your feedback helps us improve our security scores.
- Detailed reviews describing your real-life experience have a much higher chance of being published.
- Your email remains confidential.

Signed in via Gridinsoft Portal · View profile

Your score for lumma.cy

5 4 3 2 1

Check another website

Verify the security of domains and services based on 10M+ real websites.

Suspicious Website

Latest Reports

Is This Your Website?

Think your website was scored unfairly? Request a reevaluation and our team will take another look.