sjunmel.org
Classification: Malicious
sjunmel.org is a malicious hostname. Linked to Kinsing malware. 4 sightings from 3 threat sources (DBatLoader, Malware Download), last seen 2023-07-27.
Current activity
- Offline — no longer resolving. Last online 2025-05-11 15:47:44.
MITRE ATT&CK associations
Malware families: KINSING (S0599)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2024-07-28 18:15:09 | 2025-05-11 15:47:43 | benign | |
| DBatLoader | ThreatFox Abuse.ch | 2023-07-26 04:17:22 | 2023-07-27 16:17:29 | malicious-activity | |
| Kinsing | Maltiverse | 2023-03-25 05:50:53 | 2023-03-26 18:35:18 | malicious-activity | S0599 Kinsing |
| Malware Download | URLhaus Abuse.ch | 2023-02-24 13:18:46 | 2023-02-24 13:18:46 | malicious-activity | |
| Gomorrah stealer | ThreatFox Abuse.ch | 2023-02-20 01:12:02 | 2023-02-22 00:18:36 | malicious-activity |
Tags
dbatloader encryptedpayloaddownload modiloader natsoloader apt malware_download gomorrah viribackIP addresses resolved by this hostname
- 45.88.201.179 (2023-03-27 09:31:51)
Whois information
- Domain
- sjunmel.org
- TLD
- org
- First indexed
- 2023-02-20 02:17:38
- Last updated
- 2026-10-14 19:37:36