interpwthc.digital
Classification: Malicious
interpwthc.digital is a malicious hostname. Linked to Lumma Stealer malware. 5 sightings from OpenPhish and ThreatFox Abuse.ch, last seen 2026-05-05.
Current activity
- Online — resolving/reachable. Last checked 2026-11-07 04:36:56.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: LUMMA STEALER (S1213)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Phishing | OpenPhish | 2026-05-05 12:05:13 | 2026-05-05 21:05:09 | malicious-activity | T1566 Phishing |
| Lumma Stealer | ThreatFox Abuse.ch | 2025-05-09 10:15:45 | 2025-05-11 10:20:57 | malicious-activity | S1213 Lumma Stealer |
Tags
c2 lumma lumma stealer lummastealer lummac2 stealer phishingIP addresses resolved by this hostname
- 172.64.80.1 (2025-05-10 14:19:45)
- 40.91.108.115 (2026-11-07 04:36:56)
Whois information
- Domain
- interpwthc.digital
- TLD
- digital
- DNSSEC
- ['unsigned, Unsigned']
- Nameservers
- karl.ns.cloudflare.com, cheryl.ns.cloudflare.com
- Registrant
- PDR Ltd. d/b/a PublicDomainRegistry.com
- Address
- REDACTED, Gulekova 83
- City
- REDACTED, Saratov
- State
- Saratovskaya oblast
- Country
- RU — Russian Federation 🇷🇺
- Contact email
- [email protected], [email protected], [email protected]
- Domain created
- 2025-04-30 11:53:11
- Domain expires
- 2026-04-30 11:53:11
- First indexed
- 2025-05-09 11:17:04
- Last updated
- 2026-11-07 04:36:56