southedhiscuso.shop
Classification: Suspicious
southedhiscuso.shop is a suspicious hostname. Linked to Lumma Stealer malware. Reported by 2 threat sources, last seen 2025-05-23.
Current activity
- Offline — no longer resolving. Last online 2025-08-06 11:49:13.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: LUMMA STEALER (S1213)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Lumma stealer | Maltiverse Threat Observatory | 2025-01-10 00:01:12 | 2025-05-23 00:02:46 | S1213 Lumma Stealer | |
| Lumma Stealer | ThreatFox Abuse.ch | 2024-08-15 22:17:08 | 2024-08-20 07:21:52 | malicious-activity | S1213 Lumma Stealer |
Tags
lumma lummac2 stealer lummastealerIP addresses resolved by this hostname
- 104.21.17.213 (2024-09-07 16:34:56)
- 172.67.178.83 (2024-09-07 16:34:56)
- 172.64.80.1 (2024-09-23 12:53:10)
Whois information
- Domain
- southedhiscuso.shop
- TLD
- shop
- First indexed
- 2024-08-15 22:17:08
- Last updated
- 2026-07-14 02:46:59