URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: despinaspyrou.gr
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2020-09-29 12:43:03 UTC
Total malware sites :1
A record(s) observed :2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-04-27 10:33:24 176.9.120.219ares.elastic.mediahost.grNot listedAS24940 HETZNER-AS- DEyes
2020-09-29 12:43:05 95.217.204.224zeus.elastic.mediahost.grNot listedAS24940 HETZNER-AS- FIno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-09-29 12:43:05http://despinaspyrou.gr/logs/Scan/3obycq4lZgeFG...Offlinedoc emotet ext epoch1 heodo ext Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-09-29 20:47:562184b04d9d840af86cf5ca1ce1456ee071aa92eb2fe601363e6340eedcbbcc79docHeodo
2020-09-29 13:16:29cacecb9a3497441868f40dde360118e2651edb458003d9cc250a259213588127docHeodo
2020-09-29 12:56:49648be0aa3c7200ffc546fb744d1cafb15c159dd273a13afc064ce340d02b608fdocHeodo
2020-09-29 12:43:04735040fdbf1b513dfe79b4c6485de58b176dba061ef76dd8a0cb42e8161551b4docHeodo