inini.kesug.com
Classification: Malicious
inini.kesug.com is a malicious hostname. Linked to Kimsuky activity. 6 sightings from ThreatFox Abuse.ch and URLhaus Abuse.ch, last seen 2026-10-11.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 16:34:41.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Intrusion sets: KIMSUKY (G0094)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Kimsuky | ThreatFox Abuse.ch | 2026-06-07 07:28:53 | 2026-10-11 23:25:04 | botnet compromised malicious-activity | G0094 Kimsuky |
| Malware Download | URLhaus Abuse.ch | 2026-06-07 07:29:13 | 2026-06-16 12:42:06 | malicious-activity |
Tags
ascii js kimsuky apt powershellIP addresses resolved by this hostname
- 185.27.134.168 (2026-06-07 07:35:11)
- 185.27.134.24 (2026-10-17 16:34:41)
Whois information
- Domain
- kesug.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.BYET.ORG, NS2.BYET.ORG, NS3.BYET.ORG, NS4.BYET.ORG, NS5.BYET.ORG, ns1.byet.org, ns2.byet.org, ns3.byet.org, ns4.byet.org, ns5.byet.org
- Registrant
- NAMECHEAP INC
- Address
- 16192 Coastal Highway
- City
- Lewes
- State
- Delaware
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- Domain created
- 2023-08-19 15:17:40
- Domain expires
- 2027-08-19 15:17:40
- First indexed
- 2026-06-07 07:35:07
- Last updated
- 2026-10-17 16:34:41