Domain > golos.org

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to golos.org

MD5	A/V
e21b3469b4fc1efddf76d8c89f1ebb2a	[Malware.Packer.HGX1] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.AXUE!tr]
971d6821a96e8f41da919db02ebc60da	[Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Yakes] [W32/Kelihos.BCEB!tr]
315325f544912a68464bf38e3edf6371	[HW32.CDB.9e5e] [Backdoor/W32.Hlux.829456.H] [Packed.Win32.Katusha.3!O] [Backdoor.Hlux.r3] [Backdoor.Hlux!aauIqdu764w] [Trojan.FakeAV] [Kryptik.CDQY] [Backdoor.Win32.Hlux.dqyy] [Win32.Backdoor.Hlux.Lhdb] [UnclassifiedMalware] [Trojan.Packed.26581] [Win32.Hack.Hlux.dq.(kcloud)] [Backdoor:Win32/Kelihos.F] [Backdoor.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.aZvR] [Win32/Trojan.337]
2c05ffe297116df3062faac792c44c91	[HW32.CDB.B4b9] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [UnclassifiedMalware] [BackDoor.Slym.13873] [Win32.Troj.Undef.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BD!tr] [Crypt_s.GNC] [Win32/Trojan.0de]
dde053529fc90359815908c8ee1def65	[FakeSecTool-FCX!DDE053529FC9] [Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.XPACK/RDM!5.1]
0dd56a0b8ea7bedb57cebf9aacdac40f	[Malware.Packer.HGX1] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [W32/Kryptik.AXUE!tr]
c86f315b840f993b805369f3a29ba797	[HW32.CDB.9f50] [Packed.Win32.Katusha.3!O] [Crypt_s.GNC]

Whois

Property	Value
Name	Registration Private
Organization	Domains By Proxy, LLC
Email	GOLOS.ORG@domainsbyproxy.com
Zip Code	85260
City	Scottsdale
State	Arizona
Country	US
Phone	+1.4806242599
Fax	+1.4806242598
NameServer	ns2.dnsimple.com
Created	2000-08-30 08:22:06
Changed	2013-02-06 17:54:21
Expires	2015-08-30 08:22:06
Registrar	GoDaddy.com, LLC (R9

DNS Resolutions

Date	IP Address
2013-05-16	154.35.160.19 (ClassC)
2013-12-02	50.19.220.67 (ClassC)
2013-12-18	23.21.108.188 (ClassC)
2014-03-11	23.21.41.227 (ClassC)
2014-06-17	23.21.182.174 (ClassC)
2014-06-18	50.17.243.11 (ClassC)
2014-06-18	23.21.215.187 (ClassC)
2014-12-31	50.17.245.213 (ClassC)
2014-12-31	23.23.80.206 (ClassC)
2015-02-25	50.19.222.54 (ClassC)
2015-03-01	54.225.174.166 (ClassC)
2015-03-01	54.243.122.132 (ClassC)
2015-03-10	23.21.43.109 (ClassC)
2015-03-10	54.225.181.237 (ClassC)
2015-03-17	54.243.70.214 (ClassC)
2015-03-17	23.21.41.210 (ClassC)
2015-03-17	54.225.211.152 (ClassC)
2015-03-17	50.16.247.197 (ClassC)
2015-03-25	54.243.123.128 (ClassC)
2015-03-28	23.23.95.139 (ClassC)
2015-04-10	54.225.218.167 (ClassC)
2015-04-10	54.225.170.255 (ClassC)
2015-11-27	54.197.245.182 (ClassC)
2016-05-28	54.235.246.152 (ClassC)
2019-07-29	104.28.5.41 (ClassC)
2019-08-07	104.28.4.41 (ClassC)
2023-07-23	172.67.130.136 (ClassC)
2024-10-26	172.67.165.8 (ClassC)
2024-11-22	104.21.33.167 (ClassC)
2025-03-31	104.21.96.1 (ClassC)
2025-07-19	104.21.64.1 (ClassC)
2025-07-26	104.21.32.1 (ClassC)
2025-07-30	104.21.112.1 (ClassC)
2025-08-18	104.21.16.1 (ClassC)
2025-08-21	104.21.48.1 (ClassC)
2025-08-27	104.21.80.1 (ClassC)

Subdomains

Date	Domain	IP
obuchenie.golos.org	2024-07-04	104.21.33.167
archive.golos.org	2024-10-29	104.21.33.167
files.golos.org	2024-11-05	104.21.33.167
www.golos.org	2015-02-25	75.101.133.50

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]