www.lixko.com
Classification: Malicious
www.lixko.com is a malicious hostname. Linked to Powerstats, Emotet malware. 8 sightings from Hybrid-Analysis and Abuse.ch, last seen 2021-01-21.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 16:35:26.
MITRE ATT&CK associations
Malware families: POWERSTATS (S0223) EMOTET (S0367)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2024-07-28 15:38:50 | 2025-11-11 14:33:07 | benign | |
| Trojan.W97M.EMOTET | Hybrid-Analysis | 2021-01-21 16:15:24 | 2021-01-21 16:15:24 | S0367 Emotet | |
| Agent | Hybrid-Analysis | 2021-01-06 11:45:35 | 2021-01-06 17:45:10 | ||
| Emotet | Abuse.ch | 2020-12-21 17:15:58 | 2020-12-29 16:15:44 | malicious-activity | S0367 Emotet |
| VB:Trojan.Valyria | Hybrid-Analysis | 2020-12-22 16:45:39 | 2020-12-22 16:45:39 | S0223 POWERSTATS | |
| LooksLike.Macro.Malware | Hybrid-Analysis | 2020-12-21 18:15:26 | 2020-12-21 18:17:25 | ||
| VB:Trojan.VBA.Agent | Hybrid-Analysis | 2020-10-27 03:30:21 | 2020-10-27 15:30:21 | ||
| Trojan.Generic | Hybrid-Analysis | 2020-10-26 15:15:20 | 2020-10-26 20:30:04 | ||
| Heur.Macro.Generic.h | Hybrid-Analysis | 2020-10-26 20:00:08 | 2020-10-26 20:00:08 |
Tags
emotetIP addresses resolved by this hostname
- 49.235.244.65 (2020-10-26 15:15:21)
- 76.223.54.146 (2026-10-17 16:35:26)
- 13.248.169.48 (2026-10-17 16:35:26)
Whois information
- Domain
- lixko.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS3.AFTERNIC.COM, NS4.AFTERNIC.COM
- Registrant
- GoDaddy.com, LLC
- Contact email
- [email protected]
- Domain created
- 2025-12-17 02:09:22
- Domain expires
- 2026-12-17 02:09:22
- First indexed
- 2020-10-26 15:15:20
- Last updated
- 2026-10-17 16:35:26