guifenergy.co.ke
Classification: Malicious
guifenergy.co.ke is a malicious hostname. Linked to Azorult malware. Reported by ThreatFox Abuse.ch, last seen 2025-03-09.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 12:38:57.
MITRE ATT&CK associations
Malware families: AZORULT (S0344)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2024-07-28 12:17:47 | 2025-05-11 15:25:09 | benign | |
| Azorult | ThreatFox Abuse.ch | 2025-03-08 13:17:06 | 2025-03-09 00:17:39 | malicious-activity | S0344 Azorult |
Tags
8march2025 iocbottest puffstealer rultazoIP addresses resolved by this hostname
- 2600:1900:4001:96e:8000:1:e848:f5d4 (2026-10-17 12:38:57)
- 34.41.139.193 (2026-10-17 12:38:57)
Whois information
- Domain
- guifenergy.co.ke
- TLD
- co.ke
- First indexed
- 2024-07-28 12:17:47
- Last updated
- 2026-10-17 12:38:57