towerxxuytwi.xyz
Classification: Malicious
towerxxuytwi.xyz is a malicious hostname. Linked to Lumma Stealer malware. 49 sightings from ThreatFox Abuse.ch, last seen 2024-07-02.
Current activity
- Online — resolving/reachable. Last checked 2026-11-07 04:35:29.
MITRE ATT&CK associations
Malware families: LUMMA STEALER (S1213)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Lumma Stealer | ThreatFox Abuse.ch | 2024-06-30 07:33:34 | 2024-07-02 07:24:04 | malicious-activity | S1213 Lumma Stealer |
Tags
lummastealer lummac2 stealerIP addresses resolved by this hostname
- 172.64.80.1 (2024-06-30 08:20:01)
- 40.91.108.115 (2026-11-07 04:35:29)
Whois information
- Domain
- towerxxuytwi.xyz
- TLD
- xyz
- DNSSEC
- ['unsigned']
- Nameservers
- INES.NS.CLOUDFLARE.COM, SID.NS.CLOUDFLARE.COM, NS911A.MICROSOFTINTERNETSAFETY.NET, NS911B.MICROSOFTINTERNETSAFETY.NET
- Registrant
- MarkMonitor Inc.
- State
- Moscow
- Country
- RU — Russian Federation 🇷🇺
- Contact email
- [email protected], [email protected]
- Domain created
- 2024-06-27 17:16:02
- Domain expires
- 2027-06-27 23:59:59
- First indexed
- 2024-06-30 08:19:51
- Last updated
- 2026-11-07 04:35:29