occupy-blushi.sbs
Classification: Suspicious
occupy-blushi.sbs is a suspicious hostname. Linked to Lumma Stealer malware. Reported by 1 threat source, last seen 2024-11-26.
Current activity
- Offline — no longer resolving. Last online 2024-11-26 14:17:10.
MITRE ATT&CK associations
Malware families: LUMMA STEALER (S1213)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Lumma Stealer | ThreatFox Abuse.ch | 2024-11-26 14:17:08 | 2024-11-26 14:17:08 | malicious-activity | S1213 Lumma Stealer |
Tags
lumma lummac2 stealerIP addresses resolved by this hostname
- 104.21.7.169 (2024-11-26 14:17:10)
- 172.67.187.240 (2024-11-26 14:17:10)
Whois information
- AS name
- AS13335 Cloudflare, Inc.
- Domain
- occupy-blushi.sbs
- TLD
- sbs
- City
- San Francisco
- State
- CA
- Country
- US — United States 🇺🇸
- First indexed
- 2024-11-26 14:17:08
- Last updated
- 2026-07-14 03:00:32