URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host lg.icf-fx.kz.

Database Entry

Host: lg.icf-fx.kz
Spamhaus DBL :Not listed
SURBL :Not listed
Quad9 :Status unknown
AdGuard :Not blocked
Firstseen:2018-09-19 20:24:03 UTC
Malware URLs:9
A records observed:12

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-07-08 05:58:56 BERBIDSERVER- IRno
2019-06-14 11:13:02 listedAS60798 ASSERVEREASY- ITno
2019-03-09 18:45:31 listedAS61173 GWSN-AS- IRno
2018-12-10 20:51:42 listedAS61173 GWSN-AS- IRno
2018-12-04 09:28:37 listedAS23033 WOW - Wowrack.com- INno
2018-11-13 07:19:08 listedAS393960 HOST4GEEKS-LLC - Host4Geeks LLC- USno
2018-10-29 06:14:25 listedAS51026 NEGAR-MIZABAN-ASN- IRno
2018-09-24 20:56:00 listedAS44901 BELCLOUD- BGno
2018-09-24 08:41:53 listedAS42244 ESERVER- RUno
2018-09-21 06:32:14 listedAS29182 ISPSYSTEM-AS- RUno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2019-03-01 09:16:07https://lg.icf-fx.kz/abb.msiOfflinemsi @zbetcheckin
2019-03-01 03:12:05http://lg.icf-fx.kz/abb.docOfflineRTF @zbetcheckin
2018-09-19 20:26:39http://lg.icf-fx.kz/svchost.exeOfflineAZORult ext @JayTHL
2018-09-19 20:26:10http://lg.icf-fx.kz/nw.exeOfflineAgentTesla ext @JayTHL
2018-09-19 20:25:42http://lg.icf-fx.kz/lk.exeOfflineLoki ext @JayTHL
2018-09-19 20:25:25http://lg.icf-fx.kz/fb.exeOffline@JayTHL
2018-09-19 20:24:55http://lg.icf-fx.kz/bd.exeOffline@JayTHL
2018-09-19 20:24:34http://lg.icf-fx.kz/az.exeOffline@JayTHL
2018-09-19 20:24:19http://lg.icf-fx.kz/at.exeOffline@JayTHL