icq.com - URL scan, 16 Aug 2026
MalwareAnalyzer by Cyble scanned icq.com and returned a unknown verdict (score -6). The page resolved to 95.163.61.100 on VK Services in RU. 4 domains and 1 IP were contacted, over 1 HTTP request. 5 malware samples communicate with this URL (Generickdz). The request followed 3 redirects before landing. This is a point-in-time observation from 16 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -6) · Confidence 12%
- Scanned URL:
http://http.proxy.icq.com/hello - Domain: icq.com · IP: 95.163.61.100 · AS47764 · RU
- Server: kittenx
- Page title: ICQ
- HTTP status: 200 · text/html
- TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Oct 7 12: · subject CN=*.icq.com
- HTTP requests captured: 1
- Scan tier: fast · observed 2026-08-16 06:44:52 UTC
Redirect chain
http://http.proxy.icq.com/hellohttps://icq.com/https://icq.com/enhttps://icq.com/desktop/en#windows
Malware communicating with this URL (5)
These samples were observed contacting or being served from icq.com. Each links to its full analysis.
- Generickdz - referenced ·
f19b561bd552351fcc37e1fbd065257f· first seen 2026-08-16 - Generickdz - referenced ·
1d90eff0634fe74b0ce850ab78836555· first seen 2026-08-15 - Generickdz - referenced ·
a3ef37ff7dbdf034a68d59a6d3a4972d· first seen 2026-08-15 - Generickdz - referenced ·
04c5f9830165bbb147c3fbfd03273651· first seen 2026-08-14 - Generickdz - referenced ·
9d250fb76cd8c1ebce9082d370a7ddb5· first seen 2026-08-13
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
- Cross-host redirect chain
Detected technologies
- Google Analytics
Contacted infrastructure
- 95.163.61.100 - AS47764 VK Services (Russian Federation)
Observed indicators
- icq.com
- www.googletagmanager.com
- vk.me
- biz.mail.ru
- 95.163.61.100
- https://icq.com/desktop/en#windows
- https://www.googletagmanager.com/gtm.js?id=
- https://icq.com/cached/img/landing/favicon.ico
- https://icq.com/cached/img/landing/icon_ios_60.png?1
- https://icq.com/cached/img/landing/icon_ios_76.png?1
- https://icq.com/cached/img/landing/icon_ios_120.png?1
- https://icq.com/cached/img/landing/icon_ios_152.png?1
- https://icq.com/cached/img/landing/icon_and_48.png?1
- https://icq.com/cached/img/landing/icon_and_72.png?1
- https://icq.com/cached/img/landing/icon_and_96.png?1
- https://icq.com/cached/img/landing/icon_and_192.png?1
- https://icq.com/desktop/images/favicons/icq.ico?1
- https://icq.com/cached/img/landing/icon_web_60.png?1
- https://icq.com/cached/img/landing/icon_web_152.png?1
- https://www.googletagmanager.com/ns.html?id=GTM-N8R3VWS
Other scans of icq.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 16 Aug 2026 - unknown
- 15 Aug 2026 - unknown
- 14 Aug 2026 - unknown
Questions about icq.com
- Is icq.com safe?
- The scan of icq.com on 16 Aug 2026 reached no verdict either way (score -6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with icq.com?
- 5 analysed samples communicate with this URL, including Generickdz.
- How was icq.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of icq.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan