cook-rain.sbs
Classification: Suspicious
cook-rain.sbs is a suspicious hostname. Linked to Lumma Stealer malware. Reported by 1 threat source, last seen 2024-11-27.
Current activity
- Online — resolving/reachable. Last checked 2026-07-14 02:45:27.
MITRE ATT&CK associations
Malware families: LUMMA STEALER (S1213)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Lumma Stealer | ThreatFox Abuse.ch | 2024-11-27 04:17:03 | 2024-11-27 04:17:04 | malicious-activity | S1213 Lumma Stealer |
Tags
lumma lummac2 stealerIP addresses resolved by this hostname
- 172.64.80.1 (2024-11-27 04:17:05)
- 40.91.108.115 (2026-07-14 02:45:27)
Whois information
- AS name
- AS13335 Cloudflare, Inc.
- Domain
- cook-rain.sbs
- TLD
- sbs
- City
- San Francisco
- State
- CA
- Country
- US — United States 🇺🇸
- First indexed
- 2024-11-27 04:17:03
- Last updated
- 2026-07-14 02:45:28