sempersim.su
Classification: Malicious
sempersim.su is a malicious hostname. Linked to Nanocore, Lokibot malware. 35 sightings from 3 threat sources, last seen 2025-07-05.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 04:35:40.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: NANOCORE (S0336) LOKIBOT (S0447)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2024-07-28 13:18:54 | 2025-09-14 14:43:29 | benign | |
| Malicious.behaviour | Maltiverse Threat Observatory | 2025-07-05 08:10:09 | 2025-07-05 08:10:09 | ||
| Lokibot | Maltiverse Threat Observatory | 2025-04-11 00:01:05 | 2025-05-29 22:01:04 | S0447 Lokibot | |
| Loki Password Stealer (PWS) | ThreatFox Abuse.ch | 2022-03-26 00:02:07 | 2024-05-30 14:18:27 | malicious-activity | |
| LokiBot | ThreatFox Abuse.ch | 2024-05-01 07:19:40 | 2024-05-01 07:19:40 | malicious-activity | S0447 Lokibot |
| Malicious URL | Hybrid-Analysis | 2023-08-28 08:15:03 | 2024-01-26 14:00:22 | ||
| Nanocore RAT | ThreatFox Abuse.ch | 2022-08-30 14:06:41 | 2022-09-01 13:19:32 | malicious-activity | S0336 NanoCore |
Tags
loki burkina lokibot lokipws nanocore rat nancrat c2IP addresses resolved by this hostname
- 104.237.252.22 (2024-08-28 08:04:50)
- 185.130.225.203 (2024-08-14 00:02:31)
- 46.148.39.131 (2024-06-12 08:28:19)
- 104.237.252.29 (2024-05-24 08:32:06)
- 104.237.252.28 (2024-05-17 00:32:01)
- 104.237.252.14 (2024-03-11 20:11:29)
- 103.215.221.168 (2024-02-19 04:22:12)
- 142.93.72.33 (2024-01-20 00:30:56)
- 141.8.194.39 (2022-03-26 00:02:07)
- 46.148.39.36 (2023-06-25 18:28:44)
- 185.239.242.18 (2023-07-25 16:13:12)
- 185.126.34.104 (2023-09-14 06:45:17)
- 46.148.39.105 (2023-09-14 19:17:08)
- 103.215.221.162 (2023-09-21 06:02:36)
- 104.237.252.65 (2024-01-19 08:15:46)
- 34.229.166.50 (2026-10-17 04:35:40)
Whois information
- AS name
- AS51788 PartPayam Shahin Shahr ISP
- Domain
- sempersim.su
- TLD
- su
- Nameservers
- v1s1.xundns.com., v1s2.xundns.com., ns1.csof.net., ns2.csof.net., ns3.csof.net., ns4.csof.net.
- Registrant
- RUCENTER-SU
- Contact email
- [email protected], [email protected]
- Domain created
- 2025-07-11 09:21:11
- Domain expires
- 2027-07-11 09:21:11
- First indexed
- 2022-03-26 00:02:07
- Last updated
- 2026-10-17 04:35:41