p6.zbjimg.com
Classification: Suspicious
p6.zbjimg.com is a suspicious hostname. Linked to Emotet, Azorult malware. Reported by 3 threat sources, last seen 2025-09-14.
Current activity
- Online — resolving/reachable. Last checked 2026-08-19 02:34:42.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: EMOTET (S0367) AZORULT (S0344) OLDBAIT (S0138)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Adware.generic | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Android.adware.generic | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Android.backdoor | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Android.spyware | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Android.trojan.generic | Maltiverse Threat Observatory | 2025-02-12 12:20:19 | 2025-09-14 08:21:35 | country_code:co | |
| Backdoor.win32.generic | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Buzus | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Downloader.win32.generic | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Eldorado.ransomware | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Flystudio | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Graftor | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Hoax.win32.agent | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Hupigon | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Hxdef | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Oldbait | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | S0138 OLDBAIT |
| Parite | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Pup | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Razy | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Sharpknot | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Startpage | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Trojan.dropper.win32 | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Trojan.generic | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Trojan.generic.proxy | Maltiverse Threat Observatory | 2024-08-28 02:20:18 | 2025-09-14 08:21:35 | country_code:co | |
| Trojan.jp.zd0baixjzajj | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Trojan.kazy | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Trojan.lp.bh8@ac8kg2mb | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Trojan.patched.cv | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Trojan.stealer | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Virus.acad.pasdoc.gen | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Virut | Maltiverse Threat Observatory | 2024-08-26 22:20:17 | 2025-09-14 08:21:35 | country_code:co | |
| Malware | Mr.Looquer | 2020-11-21 12:39:44 | 2021-01-09 03:49:55 | ||
| Malware Download | Abuse.ch | 2018-12-10 19:37:31 | 2020-08-25 23:15:16 | malicious-activity | |
| Elf | Mr.Looquer | 2019-12-29 02:09:04 | 2019-12-31 08:34:16 | ||
| AZORult | Mr.Looquer | 2019-12-29 02:08:39 | 2019-12-31 08:34:06 | S0344 Azorult | |
| Emotet | Mr.Looquer | 2019-12-30 02:21:01 | 2019-12-30 08:43:56 | S0367 Emotet |
Tags
rar malware binary exe sandboxIP addresses resolved by this hostname
- 183.131.200.81 (2018-12-10 19:37:31)
- 183.131.200.75 (2018-12-10 19:37:31)
- 183.131.200.111 (2018-12-10 19:37:31)
- 183.131.200.86 (2018-12-10 19:37:31)
- 183.131.200.84 (2018-12-10 19:37:31)
- 2a0b:21c1:600a:100::5b (2025-07-26 04:06:04)
- 2604:980:e000:101::17 (2025-07-26 04:06:04)
- 2604:980:e000:101::16 (2025-07-26 04:06:04)
- 98.98.253.43 (2025-07-27 08:04:42)
- 2604:980:e000:101::24 (2025-07-27 08:04:42)
- 2604:980:e000:101::15 (2025-07-27 08:04:42)
- 98.98.253.86 (2025-07-27 08:04:42)
- 199.91.74.188 (2025-07-27 08:04:42)
- 2a0b:21c1:600a:100::28 (2025-07-27 08:04:42)
- 2a0b:21c1:600a:100::2d (2025-07-27 08:04:42)
- 199.91.74.176 (2025-07-27 08:04:42)
- 38.60.178.84 (2026-08-19 02:34:42)
- 2404:a140:3c:1::6e (2026-08-19 02:34:42)
- 38.60.178.85 (2026-08-19 02:34:42)
- 2404:a140:3c:1::6a (2026-08-19 02:34:42)
- 38.60.178.82 (2026-08-19 02:34:42)
- 2404:a140:3c:1::69 (2026-08-19 02:34:42)
Whois information
- AS name
- AS4134 Chinanet
- Domain
- zbjimg.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS3.DNSV3.COM, NS4.DNSV3.COM
- Registrant
- Alibaba Cloud Computing (Beijing) Co., Ltd.
- State
- chong qing
- Country
- CN — China 🇨🇳
- Contact email
- [email protected]
- Domain created
- 2010-03-31 02:42:26
- Domain expires
- 2028-03-31 02:42:26
- First indexed
- 2018-12-10 19:37:31
- Last updated
- 2026-08-19 02:34:44