zi-chem.co
Classification: Malicious
zi-chem.co is a malicious hostname. Linked to Azorult, Lokibot malware. 3 sightings from Cybercrime-tracker.net and ThreatFox Abuse.ch, last seen 2023-09-27.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 16:35:21.
MITRE ATT&CK associations
Malware families: AZORULT (S0344) LOKIBOT (S0447)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Azorult | ThreatFox Abuse.ch | 2023-09-27 22:50:51 | 2023-09-27 22:50:51 | malicious-activity | S0344 Azorult |
| AZORult | Cybercrime-tracker.net | 2020-10-14 04:04:10 | 2022-12-28 07:10:22 | malicious-activity | S0344 Azorult |
| Lokibot | Cybercrime-tracker.net | 2020-10-20 02:05:12 | 2022-12-28 07:10:21 | malicious-activity | S0447 Lokibot |
Tags
azorult c2 historicalandnew puffstealer rultazoIP addresses resolved by this hostname
- 217.195.154.94 (2020-10-14 04:04:10)
- 2600:1900:4001:96e:8000:1:644a:2d24 (2026-10-17 16:35:21)
- 34.41.139.193 (2026-10-17 16:35:21)
Whois information
- Domain
- zi-chem.co
- TLD
- co
- First indexed
- 2020-10-14 04:04:10
- Last updated
- 2026-10-17 16:35:21