posseswsnc.top
Classification: Malicious
posseswsnc.top is a malicious hostname. Linked to Lumma Stealer malware. 7 sightings from ThreatFox Abuse.ch and Threat Observatory, last seen 2025-08-22.
Current activity
- Offline — no longer resolving. Last online 2025-12-20 21:44:11.
- Command & Control server — Used by cybercriminals to control victim computers.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: LUMMA STEALER (S1213)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Lumma stealer | Maltiverse Threat Observatory | 2025-08-18 11:20:07 | 2025-08-22 03:45:08 | S1213 Lumma Stealer | |
| Lumma Stealer | ThreatFox Abuse.ch | 2025-05-10 19:17:05 | 2025-05-13 05:21:48 | malicious-activity | S1213 Lumma Stealer |
Tags
lumma lummac2 stealer c2 lumma stealer lummastealerIP addresses resolved by this hostname
- 172.64.80.1 (2025-05-13 00:21:36)
Whois information
- Domain
- posseswsnc.top
- TLD
- top
- DNSSEC
- ['unsigned']
- Nameservers
- ariadne.ns.cloudflare.com, cameron.ns.cloudflare.com
- Registrant
- PDR Ltd
- Address
- REDACTED FOR PRIVACY
- City
- REDACTED FOR PRIVACY
- State
- Moscow
- Country
- RU — Russian Federation 🇷🇺
- Contact email
- [email protected], [email protected]
- Domain created
- 2025-05-10 11:07:11
- Domain expires
- 2026-05-10 11:07:11
- First indexed
- 2025-05-10 19:17:05
- Last updated
- 2026-09-07 17:08:38