gpi-q.com
Classification: Malicious
gpi-q.com is a malicious hostname. Linked to Lokibot malware. Reported by Hybrid-Analysis and Cybercrime-tracker.net (Trojan.Agent), last seen 2022-12-28.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 08:40:09.
MITRE ATT&CK associations
Malware families: LOKIBOT (S0447)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Lokibot | Cybercrime-tracker.net | 2020-02-01 00:54:30 | 2022-12-28 07:28:24 | malicious-activity | S0447 Lokibot |
| Trojan.Agent | Hybrid-Analysis | 2020-02-08 08:30:21 | 2020-02-08 08:30:21 |
IP addresses resolved by this hostname
- 75.2.18.233 (2022-12-28 07:27:55)
- 85.117.234.217 (2020-02-01 00:54:30)
- 37.46.130.143 (2020-02-01 00:54:30)
- 3.238.30.69 (2026-10-17 08:40:09)
Whois information
- AS name
- AS7018 AT&T Services, Inc.
- Domain
- gpi-q.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.CSOF.NET, NS2.CSOF.NET, NS3.CSOF.NET, NS4.CSOF.NET
- Registrant
- Dynadot Inc
- Contact email
- [email protected]
- Domain created
- 2025-12-11 02:41:31
- Domain expires
- 2026-12-11 02:41:31
- First indexed
- 2020-02-01 00:54:30
- Last updated
- 2026-10-17 08:40:10