k6j8.shop
Classification: Malicious
k6j8.shop is a malicious hostname. Linked to Azorult malware. Reported by 1 threat source, last seen 2024-12-11.
Current activity
- Offline — no longer resolving. Last online 2024-12-11 17:17:07.
MITRE ATT&CK associations
Malware families: AZORULT (S0344)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Satacom | ThreatFox Abuse.ch | 2024-12-11 15:52:45 | 2024-12-11 17:17:07 | malicious-activity | |
| Azorult | ThreatFox Abuse.ch | 2024-09-08 04:17:15 | 2024-09-08 04:17:15 | malicious-activity | S0344 Azorult |
Tags
azorult puffstealer rultazo censys legionloader robotdropper satacomIP addresses resolved by this hostname
- 172.64.80.1 (2024-09-08 04:17:16)
Whois information
- Domain
- k6j8.shop
- TLD
- shop
- First indexed
- 2024-09-08 04:17:15
- Last updated
- 2024-12-11 17:17:07