backbaymall.ga
Classification: Malicious
backbaymall.ga is a malicious hostname. Linked to Lokibot malware. 3 sightings from ThreatFox Abuse.ch and Cybercrime-tracker.net, last seen 2024-10-02.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 08:39:37.
MITRE ATT&CK associations
Malware families: LOKIBOT (S0447)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Loki Password Stealer (PWS) | ThreatFox Abuse.ch | 2024-10-02 17:17:16 | 2024-10-02 18:17:26 | malicious-activity | |
| Lokibot | Cybercrime-tracker.net | 2019-11-09 01:01:12 | 2022-12-28 07:33:13 | malicious-activity | S0447 Lokibot |
Tags
burkina loki lokibot lokipwsIP addresses resolved by this hostname
- 8.208.15.143 (2019-11-09 01:01:13)
- 2600:1900:4001:96e:8000:1:8286:fe02 (2026-10-17 08:39:37)
- 34.41.139.193 (2026-10-17 08:39:37)
Whois information
- AS name
- AS3356 Level 3 Communications, Inc.
- Domain
- backbaymall.ga
- TLD
- ga
- First indexed
- 2019-11-09 01:01:12
- Last updated
- 2026-10-17 08:39:37