The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.
Malware botnet controller located at 18.104.22.168 on port 80 (using HTTP GET):
$ dig +short loftui.xyz
Referencing malware binaries (MD5 hash):
b3ea5c5e439b8ab445dd8d2f0c41c631 — AV detection: 40 / 67 (59.70)
Other malicious domain names hosted on this IP address: