sunnynaturelstone.com
Classification: Malicious
sunnynaturelstone.com is a malicious hostname. Linked to Lokibot malware. 7 sightings from 3 threat sources (Malicious domain), last seen 2022-12-28.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 20:36:38.
MITRE ATT&CK associations
Malware families: LOKIBOT (S0447)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Lokibot | Cybercrime-tracker.net | 2018-05-30 08:22:01 | 2022-12-28 07:45:00 | malicious-activity | S0447 Lokibot |
| Malicious domain | SANS Internet Storm Center | 2019-12-22 02:32:27 | 2019-12-22 02:32:27 | ||
| Trojan.Agent | Hybrid-Analysis | 2018-07-14 20:30:13 | 2018-07-14 20:30:13 | ||
| TSPY_HPLOKI.SMBD | Hybrid-Analysis | 2018-06-19 04:17:12 | 2018-07-10 13:01:36 | ||
| TSPY_HPLOKI.SMALY | Hybrid-Analysis | 2018-06-15 03:45:24 | 2018-06-15 03:45:24 | ||
| Gen:Variant.Strictor | Hybrid-Analysis | 2018-06-01 05:15:43 | 2018-06-01 05:15:43 | ||
| Generic.Malware | Hybrid-Analysis | 2018-05-11 16:45:28 | 2018-05-17 06:45:17 |
IP addresses resolved by this hostname
- 185.6.242.251 (2018-05-11 16:45:28)
- 52.27.79.221 (2026-10-17 20:36:38)
Whois information
- AS name
- AS8928 Interoute Communications Limited
- Domain
- sunnynaturelstone.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.CSOF.NET, NS2.CSOF.NET, NS3.CSOF.NET, NS4.CSOF.NET, ns1.csof.net, ns4.csof.net, ns3.csof.net, ns2.csof.net
- Registrant
- Dynadot Inc
- Address
- PO Box 701
- City
- San Mateo
- State
- California
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- Domain created
- 2026-04-28 04:31:50
- Domain expires
- 2027-04-28 04:31:50
- First indexed
- 2018-05-11 16:45:28
- Last updated
- 2026-10-17 20:36:38