slpa.mod-gov.org
Classification: Malicious
slpa.mod-gov.org is a malicious hostname. Linked to Sidewinder, Gamaredon Group activity. 61 sightings from 3 threat sources, last seen 2025-01-07.
Current activity
- Offline — no longer resolving. Last online 2025-01-07 14:20:13.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Intrusion sets: SIDEWINDER (G0121) GAMAREDON GROUP (G0047)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| SideWinder | ThreatFox Abuse.ch | 2025-01-05 14:17:13 | 2025-01-07 14:20:13 | malicious-activity | G0121 Sidewinder |
| Sidewinder | Maltiverse | 2023-05-29 21:49:10 | 2023-05-29 21:49:10 | G0121 Sidewinder G0121 Sidewinder | |
| Razor Tiger | Maltiverse | 2023-03-25 05:46:32 | 2023-03-26 18:35:21 | malicious-activity | |
| Gamaredon Group | Maltiverse | 2023-03-25 05:46:40 | 2023-03-26 18:35:20 | malicious-activity | G0047 Gamaredon Group |
| Malware Download | URLhaus Abuse.ch | 2023-02-21 05:18:24 | 2023-02-21 05:18:25 | malicious-activity |
Tags
razor tiger apt malware_download sidewinderIP addresses resolved by this hostname
- 62.113.255.80 (2023-03-06 05:54:26)
Whois information
- AS name
- AS47447 23Media GmbH
- Domain
- mod-gov.org
- TLD
- org
- DNSSEC
- ['unsigned']
- Nameservers
- ns1.suspended-domain.com, ns2.suspended-domain.com
- Registrant
- PDR Ltd. d/b/a PublicDomainRegistry.com
- Address
- REDACTED FOR PRIVACY
- City
- REDACTED FOR PRIVACY
- State
- Maharashtra
- Country
- IN — India 🇮🇳
- Contact email
- [email protected]
- First indexed
- 2023-02-21 05:18:24
- Last updated
- 2026-09-09 04:29:38