overcovtcg.top
Classification: Malicious
overcovtcg.top is a malicious hostname. Linked to Lumma Stealer malware. 9 sightings from ThreatFox Abuse.ch and Threat Observatory, last seen 2025-08-22.
Current activity
- Offline — no longer resolving. Last online 2025-12-20 21:44:11.
MITRE ATT&CK associations
Malware families: LUMMA STEALER (S1213)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Lumma stealer | Maltiverse Threat Observatory | 2025-08-19 12:15:07 | 2025-08-22 03:45:08 | S1213 Lumma Stealer | |
| Lumma Stealer | ThreatFox Abuse.ch | 2025-05-09 14:03:23 | 2025-05-11 13:20:44 | malicious-activity | S1213 Lumma Stealer |
Tags
c2 lumma lumma stealer lummastealer lummac2 stealerIP addresses resolved by this hostname
- 104.21.40.104 (2025-05-10 19:19:18)
- 172.67.150.184 (2025-05-10 19:19:18)
- 172.64.80.1 (2025-05-11 07:01:18)
Whois information
- Domain
- overcovtcg.top
- TLD
- top
- DNSSEC
- ['unsigned']
- Nameservers
- blair.ns.cloudflare.com, guy.ns.cloudflare.com
- Registrant
- PDR Ltd
- Address
- REDACTED FOR PRIVACY
- City
- REDACTED FOR PRIVACY
- State
- Sverdlovskaya oblast
- Country
- RU — Russian Federation 🇷🇺
- Contact email
- [email protected], [email protected]
- Domain created
- 2025-04-30 12:08:16
- Domain expires
- 2026-04-30 12:08:16
- First indexed
- 2025-05-09 14:17:05
- Last updated
- 2026-10-09 08:47:28