crisisrottenyjs.xyz
Classification: Malicious
crisisrottenyjs.xyz is a malicious hostname. Linked to Lumma Stealer malware. 50 sightings from ThreatFox Abuse.ch, last seen 2024-10-13.
Current activity
- Online — resolving/reachable. Last checked 2026-11-07 04:35:29.
MITRE ATT&CK associations
Malware families: LUMMA STEALER (S1213)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Lumma Stealer | ThreatFox Abuse.ch | 2024-08-18 10:03:35 | 2024-10-13 14:17:23 | malicious-activity | S1213 Lumma Stealer |
Tags
domain lummastealer lummac2 stealer c2 lummaIP addresses resolved by this hostname
- 40.91.108.115 (2026-11-07 04:35:29)
Whois information
- Domain
- crisisrottenyjs.xyz
- TLD
- xyz
- DNSSEC
- ['unsigned']
- Nameservers
- ARYA.NS.CLOUDFLARE.COM, TODD.NS.CLOUDFLARE.COM, NS911A.MICROSOFTINTERNETSAFETY.NET, NS911B.MICROSOFTINTERNETSAFETY.NET
- Registrant
- MarkMonitor Inc.
- State
- Moscow
- Country
- RU — Russian Federation 🇷🇺
- Contact email
- [email protected], [email protected]
- Domain created
- 2024-06-27 02:53:49
- Domain expires
- 2027-06-27 23:59:59
- First indexed
- 2024-08-18 10:17:14
- Last updated
- 2026-11-07 04:35:29