URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	galandskiyher2.com
Domain registrar:	Atak Domain
Domain registration date:	2023-05-19 07:07:24 UTC
Abuse complaint sent to registrar:	Yes (2023-08-09 18:05:45 UTC to domain{at}apiname[dot]com)
Domain registry:	VeriSign Global Registry Services
Abuse complaint sent to registry:	Yes (2023-08-09 18:05:45 UTC to info{at}verisign-grs[dot]com)
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-06-26 05:54:04 UTC
Total malware sites :	4
Online malware sites :	0 (0%)
Offline Malware sites :	4 (100%)
A record(s) observed :	7

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-08-31 13:35:25	194.169.175.127		Not listed	AS20911 NETSURF-AS-BG	BG	no
2023-08-31 06:48:04	178.250.186.22		Not listed	AS207957 ServHost-AS	RU	no
2023-08-23 19:26:28	194.169.175.250		Not listed	AS20911 NETSURF-AS-BG	BG	no
2023-08-16 15:18:02	91.103.253.21		SBL655618	AS211522 HYPERCORELTD	NL	no
2023-08-16 14:10:52	193.233.18.78	novosibirsk_1.ip-ptr.tech	Not listed	AS207713 GIR-AS	RU	no
2023-07-30 12:19:00	91.103.253.23		SBL655618	AS211522 HYPERCORELTD	NL	no
2023-06-26 05:54:06	194.50.153.68		Not listed	AS216024 KVMKA-COM	NL	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-09-15 13:18:06	http://galandskiyher2.com/downloads/toolspub3.exe	Offline	exe RedLineStealer Smoke Loader Stealc teambot	vxvault
2023-09-15 13:07:06	http://galandskiyher2.com/downloads/toolspub2.exe	Offline	exe RedLineStealer Smoke Loader Stealc teambot	vxvault
2023-09-09 04:30:10	http://galandskiyher2.com/downloads/toolspub4.exe	Offline	32 exe RecordBreaker Smoke Loader Stealc	zbetcheckin
2023-06-26 05:54:06	http://galandskiyher2.com/downloads/toolspub1.exe	Offline	Amadey exe fabookie LummaStealer RecordBreaker RedLineStealer Smoke Loader Stealc teambot	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-09-23 15:56:40	56b58687886316907f2ee6d19f964f0fb4f26613cfe73bba625b09101e340182	exe		Smoke Loader
2023-09-23 14:48:45	56b58687886316907f2ee6d19f964f0fb4f26613cfe73bba625b09101e340182	exe		Smoke Loader
2023-09-23 14:44:42	f22c85988b5f9c2c58d4f0cdd3c5c5d4aa807d196a9e712b8880e46d9586fb52	exe		Smoke Loader
2023-09-23 13:08:24	7797f32bdc83ad856b04b6ffaeeab60fd17723d51ef20b5aa0b2393c65144bc2	exe		Smoke Loader
2023-09-23 11:56:22	f0b6cf56e0ace4437b8378d1df1379c2ccbdcd3c6264d0f79200c7031a1ffdf5	exe		Smoke Loader
2023-09-23 11:49:42	f0b6cf56e0ace4437b8378d1df1379c2ccbdcd3c6264d0f79200c7031a1ffdf5	exe		Smoke Loader
2023-09-23 09:12:30	b351eec5ba7867286296879d049320b0fbed7200fba224236c5bdd40d688fd8f	exe		RedLineStealer
2023-09-23 09:12:11	a732cf8d4d21e263f45dd45a6e247c39b3e44a2a4c7d0e85cce2fb19bcb82bc0	exe		Smoke Loader
2023-09-23 08:57:08	b351eec5ba7867286296879d049320b0fbed7200fba224236c5bdd40d688fd8f	exe		RedLineStealer
2023-09-23 08:44:33	f458bb60587120cafde3ae163b32763383a10d82781da405fae85d2ab8b1468b	exe		Smoke Loader
2023-09-23 08:26:25	4034d80887f9fb4270bca7544fbaadc57406f0c06665877db813a08ceaecb62e	exe		Smoke Loader
2023-09-23 08:13:34	f76c96aea2f3809cc73e1d3ee497bc1abdbe2657e870844f8714cd11432e129e	exe		Smoke Loader
2023-09-23 07:42:21	4034d80887f9fb4270bca7544fbaadc57406f0c06665877db813a08ceaecb62e	exe		Smoke Loader
2023-09-23 07:41:36	06c8884b4957bea56236f92a28c5ac4c0bdf66b7976b02effa35e07ee90fe73a	exe		Smoke Loader
2023-09-23 03:35:12	898c2374cff740a001f33d82cf479f0a2a6b339a46ede5ae44c8b4ac87d709d0	exe		Smoke Loader
2023-09-23 03:14:24	898c2374cff740a001f33d82cf479f0a2a6b339a46ede5ae44c8b4ac87d709d0	exe		Smoke Loader
2023-09-23 00:22:58	ec9d71ba85b9d1be8286625c5541cce355497d2d72b604cfdada19e2b13d263b	exe		Smoke Loader
2023-09-22 23:50:13	11f0911b321efc2426db76b7de5d87b2fd671c4561533176b8d5f894f621f248	exe		Smoke Loader
2023-09-22 23:42:26	ec9d71ba85b9d1be8286625c5541cce355497d2d72b604cfdada19e2b13d263b	exe		Smoke Loader
2023-09-22 23:34:36	6df1611a8651ed7962aea076f57beb6bd287aa4f76256351a8003701b279cddf	exe		Smoke Loader
2023-09-22 21:57:00	445de6225ac9dbb6ad101028053fd52e061832df48664b35d451d13aa685e5ab	exe		Smoke Loader
2023-09-22 21:48:19	c76fe7e5cfe5a94cc437f360f815b6f7c7eef063c528503e27e1d27a101f282a	exe		Smoke Loader
2023-09-22 21:17:43	445de6225ac9dbb6ad101028053fd52e061832df48664b35d451d13aa685e5ab	exe		Smoke Loader
2023-09-22 21:14:25	bae86f8abad22ab061abc28dce18567532c81bf228da3efef002e35566c44c85	exe		Smoke Loader
2023-09-22 20:27:49	9359261be9be689a57480154b1947d6485d8eef4d80b89b9d723f5effd566d59	exe		Smoke Loader
2023-09-22 19:54:45	97a587a68fa3b648d84a26023f07eaaf130441df7c804bb6d6c24ae86830c6cf	exe		Smoke Loader
2023-09-22 19:51:52	0fedb4404d94b92490ce84f4beba4839f8b035f7d5bbfd5e18d7e491e5c8a5e4	exe		Smoke Loader
2023-09-22 16:56:05	82a134920474a148dffde34ac05d858980f8e2b702c9195e961b0446dbf3eb08	exe		Smoke Loader
2023-09-22 16:36:41	9e96d77f013c6ca17f641c947be11a1bb8921937ed79ec98c4b49ef4c641ae5f	exe		Smoke Loader
2023-09-22 16:16:30	14a24777db103b832845a5c7656465681d5346c060b1f4a022fc480b523b33ea	exe		Smoke Loader
2023-09-22 16:14:58	9e96d77f013c6ca17f641c947be11a1bb8921937ed79ec98c4b49ef4c641ae5f	exe		Smoke Loader
2023-09-22 15:36:27	3e426457b7d750e038d399c99afa1ea8a75c21ec18e376702af0b25951f9a2fa	exe		Smoke Loader
2023-09-22 13:50:39	99f22d7e71f3a7ed0cc7eee603a3e50d6b9f08957246e302d5c17368efb15b14	exe		RedLineStealer
2023-09-22 13:23:15	99f22d7e71f3a7ed0cc7eee603a3e50d6b9f08957246e302d5c17368efb15b14	exe		RedLineStealer
2023-09-22 13:21:55	7e19fdad6d76b1021bac4a8f7bd56481c9c77cc155d659293481cf6d67cf608c	exe		Smoke Loader
2023-09-22 13:06:13	55627a75c4cdc87a913050d1051c57c9d3ceb0aad3e6453a46ad17c9beaa5ef6	exe
2023-09-22 12:42:30	0bb0b92194deb106603a64297c08060f66e2ac80ef336a2559249786ed4c58fd	exe		Smoke Loader
2023-09-22 12:40:10	f0659054cb13ab88840c2f1a57801047f94107a0cbaa81243562a88d0c9a9db5	exe		Smoke Loader
2023-09-22 12:37:21	0bb0b92194deb106603a64297c08060f66e2ac80ef336a2559249786ed4c58fd	exe		Smoke Loader
2023-09-22 12:33:21	1c0e5446542a67e11bd936b1a3b8e99680445b535cd2de6b72f86fa35a7a235f	exe		Smoke Loader
2023-09-22 11:21:51	3c712a73f1a1ab2248e9002318adef0c78b1aed72b226ec7b6fac4beb863b945	exe		Smoke Loader
2023-09-22 11:10:13	3c712a73f1a1ab2248e9002318adef0c78b1aed72b226ec7b6fac4beb863b945	exe		Smoke Loader
2023-09-22 10:40:21	fc6b8cd6d48af0fbdb6b0d67bd78739195d8ea4705cf438623c2f66c0490e3aa	exe		Smoke Loader
2023-09-22 10:28:21	9d35150a447696b7c6d5bcf71ff97de4738e5ec528819f537f47e565b9ba14a4	exe		Smoke Loader
2023-09-22 08:18:27	5d676cca0c493faae994040ca98ad4966ac64a90f2e92e5fdada8ed454b3ba11	exe		Smoke Loader
2023-09-22 08:10:00	ee334e9018223eeccba9e25e643f9e87ddbcfcf978dd42bc1a404668d4b97ce8	exe		Smoke Loader
2023-09-22 08:07:57	ee334e9018223eeccba9e25e643f9e87ddbcfcf978dd42bc1a404668d4b97ce8	exe		Smoke Loader
2023-09-22 08:00:58	011ee5e657ac9867f4fb8d06f045b6cdc9063879cc74eebedcf43750f32534d5	exe
2023-09-22 06:44:26	6cda9738bb08c0bc98605e33541057483a71b2b9edb3d6c23a4e17f848223920	exe
2023-09-22 06:29:58	fcd8e63cb523cc06c3cde2b5cd53194a190fd763eb8d935186ae999c5f4ec56f	exe		Smoke Loader
2023-09-22 05:18:52	897a17219c089cfd40d9bd5608d3a6a8d3e743913887477afa0672dc8425442b	exe		Stealc
2023-09-22 05:10:54	fcd8e63cb523cc06c3cde2b5cd53194a190fd763eb8d935186ae999c5f4ec56f	exe		Smoke Loader
2023-09-22 03:10:00	bac10bfc9bccd1acd2aff1fe26474dbc79b6c8fcec9ff1c2b888bb77aebbcb6c	exe		Smoke Loader
2023-09-22 03:04:57	bac10bfc9bccd1acd2aff1fe26474dbc79b6c8fcec9ff1c2b888bb77aebbcb6c	exe		Smoke Loader
2023-09-22 02:52:03	0baf22142437710c7e20d8dee9ab7297603984154fc819d6e6f86cba58f1f661	exe
2023-09-22 02:35:18	e0aa93c3f01841d67f1d1f4caa49705313e441aa6c74ad027c890a2174681154	exe		Smoke Loader
2023-09-22 02:34:43	a0a9900f56a4c15ee2a9d2dd80c6e24b63afe73e5a3cf1139c05e348c10b3c6f	exe		Smoke Loader
2023-09-22 02:15:04	9ebc3628cb743003e47d3b3d007c37040801f0f1b0a7fb1830e26272e0f91efd	exe		Smoke Loader
2023-09-22 02:01:13	a0a9900f56a4c15ee2a9d2dd80c6e24b63afe73e5a3cf1139c05e348c10b3c6f	exe		Smoke Loader
2023-09-22 00:41:25	a3d27d8b35f72399f5c74c2d80a726a3d8fb1c91d834e02e55cfd2e854cf4645	exe		TeamBot
2023-09-22 00:06:42	19b116574c65b58899955fe01700a05ae7afd9db88b36ed8fcd26c141af47417	exe		Smoke Loader
2023-09-21 23:59:05	c7de9a7e559a2de620a3333dce94d18cba3945364cc49e4d655092d43891f656	exe		Smoke Loader
2023-09-21 23:48:23	c7de9a7e559a2de620a3333dce94d18cba3945364cc49e4d655092d43891f656	exe		Smoke Loader
2023-09-21 23:32:36	f1c527027c0bb7a0b4b6dbaa56b3b2e5585a4574bc006a59ee682600b4b39662	exe		Smoke Loader
2023-09-21 23:22:30	12ae050dcb9bb0bfc16cab1d40829e489498b182879c3cd9e1e0f3eed60fc9ad	exe		Smoke Loader
2023-09-21 23:13:35	12ae050dcb9bb0bfc16cab1d40829e489498b182879c3cd9e1e0f3eed60fc9ad	exe		Smoke Loader
2023-09-21 22:49:10	18d52a9089cafbecbd72a6fae6142f819c0ce296bb4b0ba8bd4b2303748364bc	exe		Smoke Loader
2023-09-21 22:38:37	2e6667f8c4a7fd82216bbf4acf9630495c7a0c409333905cfbef308e821d7630	exe		Smoke Loader
2023-09-21 21:09:19	b6fb0618c6000b1c58a68a6d2b1e531dd53357f323f81bedf45c05856e4c12a7	exe		Smoke Loader
2023-09-21 21:03:18	dd41efbedd854045a0f171d798bd808919b330d1f6d141e6059b32a92de2b981	exe		Smoke Loader
2023-09-21 20:56:46	dd41efbedd854045a0f171d798bd808919b330d1f6d141e6059b32a92de2b981	exe		Smoke Loader
2023-09-21 20:53:17	4b58638cdfb9a5264397c697d55ffc2e042bff4661a1963a0a93ee27f6c2ee3f	exe		Smoke Loader
2023-09-21 20:27:05	eddd307cf96712242a8c1566c50a23a2aa372165e5448996921309c306402f7a	exe		Smoke Loader
2023-09-21 20:17:46	734c300338f40643967931a824822684721d02b80912b7066814a7802eff06af	exe		Smoke Loader
2023-09-21 20:17:30	8d43f8348fee01ce9c98d073c628cb127e0fd94f71725322132167a89699b9fa	exe		Smoke Loader
2023-09-21 20:13:28	eddd307cf96712242a8c1566c50a23a2aa372165e5448996921309c306402f7a	exe		Smoke Loader
2023-09-21 17:59:11	33d6b7b997c29914a22279fa8c1ac329ed5490e85f1edf2617c6158a0b453b12	exe		Smoke Loader
2023-09-21 17:56:17	86f24e6115bdbd4f9dd101f53031ef20cadced204ca71bc20d93345a53800c7b	exe		Smoke Loader
2023-09-21 17:54:38	0aa0146c720c3018a04e4cbeb1a2da2f5609dc8de9ecd8657c94faea5ef06fe2	exe		Smoke Loader
2023-09-21 17:34:52	33d6b7b997c29914a22279fa8c1ac329ed5490e85f1edf2617c6158a0b453b12	exe		Smoke Loader
2023-09-21 16:37:49	4300d0608c27fe4c4a2cf7c106746ace4505cefc786ca99a8a64e48c328039a9	exe		Smoke Loader
2023-09-21 16:34:30	6ed7dd6b5d5fc4b1ecb0b53332bb8d0ce2982c6bdd79f544124d9d93a357159b	exe		Smoke Loader
2023-09-21 15:49:44	6ed7dd6b5d5fc4b1ecb0b53332bb8d0ce2982c6bdd79f544124d9d93a357159b	exe		Smoke Loader
2023-09-21 15:44:28	83a59f9830a5fbd1ba5d8bca59562ed6c482240b5c8cb627a46654258046be05	exe		Smoke Loader
2023-09-21 13:46:57	b161842fb55681498c8f03903030df175c4bd3a1ad069a55ede445ffc7c67b5c	exe		Smoke Loader
2023-09-21 13:32:20	46298bba7f592537511eaba5ac06078c6db05ae0d3c029741eaff36476321014	exe		Smoke Loader
2023-09-21 13:11:37	ed997d5e7bc98f15a2c489877a05b24ef2088316422420e46ad472e96269792f	exe		Smoke Loader
2023-09-21 12:39:15	ed997d5e7bc98f15a2c489877a05b24ef2088316422420e46ad472e96269792f	exe		Smoke Loader
2023-09-21 10:34:37	a8dd148fa85d239fb47f6524a1706ae783a2a2e47448fdb1aa3be18315f36ce9	exe		Smoke Loader
2023-09-21 10:18:55	a8dd148fa85d239fb47f6524a1706ae783a2a2e47448fdb1aa3be18315f36ce9	exe		Smoke Loader
2023-09-21 10:17:32	84a27a78f530ce50649de7add12e861c8c6818828dd91e64902a97a937bce4ea	exe		Smoke Loader
2023-09-21 10:12:38	da0bd2568e010e954f29b03512d733e3f6756110fcef569c25f368442020a1ac	exe		Smoke Loader
2023-09-21 09:36:30	c5712973eff5fedc221c4783a457e6ecf8a652cb8b213beecdc1e7439913bb86	exe		Smoke Loader
2023-09-21 09:19:19	d3441f161efcc0c004c8e80dca94e94c6969a95a442dad688b48e1074b16ef09	exe		Smoke Loader
2023-09-21 09:14:33	c5712973eff5fedc221c4783a457e6ecf8a652cb8b213beecdc1e7439913bb86	exe		Smoke Loader
2023-09-21 08:53:50	1aa694a406a89fc83cce2efe737b8e5db3e174ee062788dd92db43b8a450c5ae	exe		Smoke Loader
2023-09-21 08:01:59	73cc2f12df2fcb90584571bc1e1392559e76a49bf40fbd7984082844bf3774d7	exe		Smoke Loader
2023-09-21 07:56:22	1aa694a406a89fc83cce2efe737b8e5db3e174ee062788dd92db43b8a450c5ae	exe		Smoke Loader
2023-09-21 07:53:27	45c00fc07a9ef6a19af5ea63a9c57fa3fc36107c112a691ad3be23ee752f50d9	exe		Smoke Loader
2023-09-21 05:39:21	74b0a679bf127c51b11424e2e6ce7127849c1d8e6923e526b0c4252ead8b4987	exe		Smoke Loader