galandskiyher5.com
Classification: Malicious
galandskiyher5.com is a malicious hostname. Linked to Smoke Loader malware. 52 sightings from 3 threat sources (SmokeLoader), last seen 2024-06-02.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 00:35:46.
MITRE ATT&CK associations
Malware families: SMOKE LOADER (S0226)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| SmokeLoader | ThreatFox Abuse.ch | 2024-05-31 06:25:44 | 2024-06-02 06:20:17 | malicious-activity | S0226 Smoke Loader |
| Malware Download | URLhaus Abuse.ch | 2023-11-06 04:19:01 | 2023-12-05 14:21:48 | malicious-activity | |
| Malicious URL | Hybrid-Analysis | 2023-11-08 12:30:05 | 2023-11-08 12:30:05 |
Tags
32 none dofoil sharik smoke smoke loaderIP addresses resolved by this hostname
- 5.188.88.244 (2024-04-19 04:45:34)
- 193.106.175.76 (2024-04-18 04:40:25)
- 141.98.235.120 (2024-03-30 00:41:04)
- 81.94.159.197 (2024-03-29 08:39:52)
- 81.94.150.149 (2024-03-14 08:15:21)
- 31.41.44.192 (2024-03-13 08:39:50)
- 194.87.206.12 (2024-03-12 08:39:15)
- 141.98.235.153 (2024-03-11 00:42:54)
- 193.106.174.70 (2024-03-10 16:25:02)
- 185.12.127.241 (2024-02-23 16:27:27)
- 185.12.126.182 (2024-02-22 12:36:46)
- 158.160.118.17 (2024-01-29 08:12:45)
- 188.119.67.81 (2024-01-16 00:49:00)
- 193.106.175.43 (2024-01-15 16:17:29)
- 109.172.84.91 (2024-01-13 08:12:45)
- 89.23.116.40 (2024-01-13 00:31:54)
- 109.172.85.3 (2024-01-12 16:05:32)
- 158.160.130.138 (2024-01-08 00:50:09)
- 91.203.193.134 (2023-12-21 16:08:46)
- 212.193.52.24 (2023-12-21 08:00:20)
- 85.143.222.45 (2023-12-08 04:00:08)
- 193.37.197.73 (2023-12-06 04:01:51)
- 194.87.32.193 (2023-12-05 08:09:27)
- 85.143.175.8 (2023-12-05 00:23:12)
- 193.106.174.249 (2023-12-04 00:14:08)
- 212.193.56.210 (2023-12-03 08:01:06)
- 89.191.234.38 (2023-11-30 08:07:31)
- 194.49.94.195 (2023-11-30 00:14:50)
- 92.53.104.84 (2023-11-28 08:10:43)
- 45.91.8.197 (2023-11-27 08:01:45)
- 193.37.197.6 (2023-11-26 16:02:25)
- 188.225.78.240 (2023-11-26 08:08:46)
- 193.37.197.23 (2023-11-25 08:04:02)
- 185.251.91.79 (2023-11-24 20:09:31)
- 95.214.26.28 (2023-11-24 12:16:10)
- 188.40.141.211 (2026-10-18 00:35:46)
Whois information
- AS name
- AS44939 Simfonics Iberia S.L.
- Domain
- galandskiyher5.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- DE-A.SINKHOLE.SHADOWSERVER.ORG, DE-B.SINKHOLE.SHADOWSERVER.ORG, tr.apiname.com, eu.apiname.com, de-a.sinkhole.shadowserver.org, de-b.sinkhole.shadowserver.org
- Registrant
- Atak Domain
- Address
- 72 Chase Side, Suite 2, London, United Kingdom, N14 5PH
- City
- London
- State
- Chase Side
- Country
- GB — United Kingdom 🇬🇧
- Contact email
- [email protected]
- Domain created
- 2023-05-19 07:07:40
- Domain expires
- 2027-05-19 10:07:40
- First indexed
- 2023-11-06 04:19:01
- Last updated
- 2026-10-18 00:35:46