blackswmxc.top
Classification: Malicious
blackswmxc.top is a malicious hostname. Linked to Lumma Stealer malware. 12 sightings from ThreatFox Abuse.ch and Threat Observatory, last seen 2025-08-22.
Current activity
- Offline — no longer resolving. Last online 2025-12-20 21:44:11.
MITRE ATT&CK associations
Malware families: LUMMA STEALER (S1213)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Lumma stealer | Maltiverse Threat Observatory | 2025-08-18 11:20:07 | 2025-08-22 03:45:08 | S1213 Lumma Stealer | |
| Lumma Stealer | ThreatFox Abuse.ch | 2025-05-09 14:03:23 | 2025-05-11 13:20:44 | malicious-activity | S1213 Lumma Stealer |
Tags
c2 lumma lumma stealer lummastealer lummac2 stealerIP addresses resolved by this hostname
- 172.67.173.38 (2025-05-09 23:17:55)
- 104.21.55.211 (2025-05-09 23:17:55)
- 172.64.80.1 (2025-05-11 03:47:28)
Whois information
- Domain
- blackswmxc.top
- TLD
- top
- DNSSEC
- ['unsigned']
- Nameservers
- marvin.ns.cloudflare.com, tiffany.ns.cloudflare.com
- Registrant
- PDR Ltd
- Address
- REDACTED FOR PRIVACY
- City
- REDACTED FOR PRIVACY
- State
- Sverdlovskaya oblast
- Country
- RU — Russian Federation 🇷🇺
- Contact email
- [email protected], [email protected]
- Domain created
- 2025-04-30 12:08:16
- Domain expires
- 2026-04-30 12:08:16
- First indexed
- 2025-05-09 14:17:05
- Last updated
- 2026-10-09 01:09:35