cladwybn.digital
Classification: Malicious
cladwybn.digital is a malicious hostname. Linked to Lumma Stealer malware. Reported by ThreatFox Abuse.ch, last seen 2025-05-18.
Current activity
- Offline — no longer resolving. Last online 2025-05-18 21:27:31.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: LUMMA STEALER (S1213)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Lumma Stealer | ThreatFox Abuse.ch | 2025-05-15 09:51:19 | 2025-05-18 21:17:21 | malicious-activity | S1213 Lumma Stealer |
Tags
domain lumma lumma stealer stealer lummac2 stealerIP addresses resolved by this hostname
- 104.21.64.1 (2025-05-17 09:41:24)
- 104.21.16.1 (2025-05-17 09:41:24)
- 104.21.112.1 (2025-05-17 09:41:24)
- 104.21.96.1 (2025-05-17 09:41:24)
- 104.21.80.1 (2025-05-17 09:41:24)
- 104.21.48.1 (2025-05-17 09:41:24)
- 104.21.32.1 (2025-05-17 09:41:24)
Whois information
- Domain
- cladwybn.digital
- TLD
- digital
- DNSSEC
- ['unsigned, Unsigned']
- Nameservers
- ns1.suspended-domain.com, ns2.suspended-domain.com, santino.ns.cloudflare.com, fish.ns.cloudflare.com
- Registrant
- PDR Ltd. d/b/a PublicDomainRegistry.com
- Address
- REDACTED, Voznesenskaya 8
- City
- REDACTED, Chita
- State
- Chitinskaya oblast
- Country
- RU — Russian Federation 🇷🇺
- Contact email
- [email protected], [email protected], [email protected]
- Domain created
- 2025-05-06 16:28:10
- Domain expires
- 2026-05-06 16:28:10
- First indexed
- 2025-05-15 10:17:04
- Last updated
- 2026-09-05 07:30:56