www.lha.co.ke
Classification: Malicious
www.lha.co.ke is a malicious hostname. Linked to Gootloader malware. Reported by ThreatFox Abuse.ch, last seen 2022-05-08. Resolves to 51.195.12.191.
Current activity
- Offline — no longer resolving. Last online 2026-10-07 02:38:22.
MITRE ATT&CK associations
Malware families: GOOTLOADER (S1138)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| GootLoader | ThreatFox Abuse.ch | 2022-05-08 16:17:56 | 2022-05-08 16:17:58 | malicious-activity | S1138 Gootloader |
Tags
gootloaderIP addresses resolved by this hostname
- 51.195.12.191 (2022-05-08 16:17:56)
Whois information
- Domain
- lha.co.ke
- TLD
- co.ke
- First indexed
- 2022-05-08 16:17:56
- Last updated
- 2026-10-07 02:38:23