xor055rox550ytr.com

Classification: Malicious

xor055rox550ytr.com is a malicious hostname. Linked to Ursnif malware. Reported by 1 threat source, last seen 2023-09-29.

Current activity

  • Offline — no longer resolving. Last online 2023-09-29 20:20:58.

MITRE ATT&CK associations

Malware families: URSNIF (S0386)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Gozi ThreatFox Abuse.ch 2023-09-27 21:01:25 2023-09-29 20:20:58 malicious-activity S0386 Ursnif

Tags

c2 gozi historicalandnew rat crm gozi crm papras snifula ursnif

Whois information

Domain
xor055rox550ytr.com
TLD
com
First indexed
2023-09-27 22:18:39
Last updated
2026-08-16 06:33:12