The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.
Loki botnet controller located at 220.127.116.11 on port 80 (using HTTP POST):
$ dig +short samkoproducts.xyz
Referencing malware binaries (MD5 hash):
0ef11d95ce195cb49efa5bfb435ac0e2 — AV detection: 31 / 68 (45.59)
Other malicious domain names hosted on this IP address: