siiigroup.com
Classification: Malicious
siiigroup.com is a malicious hostname. Linked to Lokibot malware. 6 sightings from 3 threat sources (Malicious url, Covid19 scam), last seen 2022-12-28.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 16:34:50.
MITRE ATT&CK associations
Malware families: LOKIBOT (S0447)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Lokibot | Cybercrime-tracker.net | 2019-10-19 01:16:53 | 2022-12-28 07:34:01 | malicious-activity | S0447 Lokibot |
| Malicious url | Cyber Threat Coalition | 2020-12-14 20:50:29 | 2021-03-04 15:40:55 | malicious-activity | |
| Covid19 scam | Cyber Threat Coalition | 2020-11-24 23:47:11 | 2020-12-13 21:00:02 | malicious-activity | |
| TrojanSpy.LOKI.SMAD | Hybrid-Analysis | 2019-10-15 09:30:07 | 2019-10-15 09:30:07 | ||
| Trojan.Agent | Hybrid-Analysis | 2019-10-04 08:30:10 | 2019-10-04 08:30:10 | ||
| Injector.EICD | Hybrid-Analysis | 2019-10-02 14:45:26 | 2019-10-02 14:45:26 |
Tags
covid19 coronavirus scam phishingIP addresses resolved by this hostname
- 23.82.12.31 (2022-12-28 07:17:46)
- 8.208.76.80 (2019-10-02 14:45:27)
- 192.64.119.221 (2024-12-31 08:22:47)
- 44.192.95.127 (2026-10-17 16:34:50)
Whois information
- AS name
- AS60781 LeaseWeb Netherlands B.V.
- Domain
- siiigroup.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.CSOF.NET, NS2.CSOF.NET, NS3.CSOF.NET, NS4.CSOF.NET
- Registrant
- Dynadot Inc
- Contact email
- [email protected]
- Domain created
- 2025-11-24 01:45:41
- Domain expires
- 2026-11-24 01:45:41
- First indexed
- 2019-10-02 14:45:26
- Last updated
- 2026-10-17 16:34:50