penetratedpoopp.xyz
Classification: Malicious
penetratedpoopp.xyz is a malicious hostname. Linked to Lumma Stealer malware. 49 sightings from ThreatFox Abuse.ch, last seen 2024-07-02.
Current activity
- Online — resolving/reachable. Last checked 2026-11-07 04:35:29.
MITRE ATT&CK associations
Malware families: LUMMA STEALER (S1213)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Lumma Stealer | ThreatFox Abuse.ch | 2024-06-30 07:33:35 | 2024-07-02 07:24:03 | malicious-activity | S1213 Lumma Stealer |
Tags
lummastealer lummac2 stealerIP addresses resolved by this hostname
- 172.64.80.1 (2024-06-30 08:20:01)
- 40.91.108.115 (2026-11-07 04:35:29)
Whois information
- Domain
- penetratedpoopp.xyz
- TLD
- xyz
- DNSSEC
- ['unsigned, Unsigned', 'unsigned']
- Nameservers
- MARIA.NS.CLOUDFLARE.COM, MATIAS.NS.CLOUDFLARE.COM, maria.ns.cloudflare.com, matias.ns.cloudflare.com, NS911A.MICROSOFTINTERNETSAFETY.NET, NS911B.MICROSOFTINTERNETSAFETY.NET
- Registrant
- MarkMonitor Inc.
- Address
- Kimorskaya
- City
- Moscow
- State
- Moscow
- Country
- RU — Russian Federation 🇷🇺
- Contact email
- [email protected], [email protected], [email protected], [email protected]
- Domain created
- 2024-06-27 17:16:02
- Domain expires
- 2027-06-27 23:59:59
- First indexed
- 2024-06-30 08:19:49
- Last updated
- 2026-11-07 04:35:29