http://keygenninja.com
Classification: Malicious
http://keygenninja.com is a malicious URL. Linked to Azorult malware. 291 sightings from Threat Observatory and Triage, last seen 2026-06-12.
Current activity
- Offline — no longer resolving. Last online 2026-10-13 08:31:39.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: AZORULT (S0344)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in CO, MX, PE and US, across education, healthcare, retail and technology networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Azorult | Maltiverse Threat Observatory | 2026-06-12 16:10:12 | 2026-06-12 16:10:12 | anomalous-activity country_code:co country_code:mx country_code:pe country_code:us industry:education-and-nonprofits industry:healthcare-and-pharmaceutical industry:retail-and-hospitality industry:technology-and-telecommunications malware | S0344 Azorult |
| Azorult | Triage | 2026-06-12 15:26:50 | 2026-06-12 15:26:50 | malicious-activity | S0344 Azorult |
Tags
azorult pony xmrig collection credential_access defense_evasion discovery infostealer miner persistence ransomware rat spyware stealer trojanURL information
- Hostname
- keygenninja.com
- Domain
- keygenninja.com
- TLD
- com
- SHA-256
69a8d22f3420ac36beb01d15372ad1f5641c02b3baa7f20a3e94e96e5342bc87- First indexed
- 2026-06-12 15:26:50
- Last updated
- 2026-10-13 08:31:39
- Last online
- 2026-10-13 08:31:39