spencerstuartllc.top
Classification: Malicious
spencerstuartllc.top is a malicious hostname. Linked to Agent Tesla malware. 54 sightings from ThreatFox Abuse.ch and Maltrail, last seen 2025-03-24.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 04:40:23.
MITRE ATT&CK associations
Malware families: AGENT TESLA (S0331)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2024-07-28 10:06:01 | 2025-05-11 15:20:53 | benign | |
| Agent Tesla | Maltrail | 2025-02-25 16:43:27 | 2025-03-24 11:46:22 | malicious-activity | S0331 Agent Tesla |
| Loki Password Stealer (PWS) | ThreatFox Abuse.ch | 2024-03-29 02:18:50 | 2024-05-13 08:18:22 | malicious-activity |
Tags
loki burkina lokibot lokipws viribackIP addresses resolved by this hostname
- 91.195.240.12 (2024-11-01 04:27:17)
- 31.192.239.19 (2024-07-09 04:35:34)
- 172.67.156.11 (2024-09-18 08:03:02)
- 104.21.50.30 (2024-09-18 08:03:02)
- 172.64.80.1 (2024-09-28 00:33:27)
- 3.222.192.211 (2026-10-18 04:40:23)
Whois information
- Domain
- spencerstuartllc.top
- TLD
- top
- DNSSEC
- ['unsigned']
- Nameservers
- ns1.csof.net, ns4.csof.net, ns3.csof.net, ns2.csof.net
- Registrant
- Dynadot LLC
- Contact email
- [email protected]
- Domain created
- 2025-11-11 15:39:05
- Domain expires
- 2026-11-11 15:39:05
- First indexed
- 2024-03-29 02:18:50
- Last updated
- 2026-10-18 04:40:23