URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: gozofilmfestival.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2020-12-03 01:47:03 UTC
Total malware sites :2
Online malware sites :0 (0%)
Offline Malware sites :2 (100%)
A record(s) observed :3

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-04-27 12:22:56 185.224.137.224Not listedAS47583 AS-HOSTINGER- NLyes
2021-04-12 23:41:49 45.13.252.88Not listedAS47583 AS-HOSTINGER- FRno
2020-12-03 01:47:06 192.185.117.214192-185-117-214.unifiedlayer.comNot listedAS31898 ORACLE-BMC-31898- USno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-12-03 02:15:10https://gozofilmfestival.com/zhndau.zipOfflinedll Dridex ext Cryptolaemus1
2020-12-03 01:47:06http://gozofilmfestival.com/zhndau.zipOfflinedll Dridex ext Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-12-04 11:23:21ebe87cc844fd9875d411b5435f0ffee5e651be5ff011a306a09a6b5f3376c81edllDridex
2020-12-04 11:22:36ebe87cc844fd9875d411b5435f0ffee5e651be5ff011a306a09a6b5f3376c81edllDridex
2020-12-03 19:26:01c96fa76a5147bf58b44c47fe42c9449da7494bf329c11e3e2792fdca8fff917edll Dridex
2020-12-03 19:06:03c96fa76a5147bf58b44c47fe42c9449da7494bf329c11e3e2792fdca8fff917edll Dridex
2020-12-03 16:20:55ab851d5364bae0749d452459953ccab2b62c62c6d5784e7adedc4d9ba43727dbdll Dridex
2020-12-03 16:14:28ab851d5364bae0749d452459953ccab2b62c62c6d5784e7adedc4d9ba43727dbdll Dridex
2020-12-03 14:48:32f183722041cc6ed4275dd6fc17899b36509a78617c50ed4ce4c4c39472f82deadll Dridex
2020-12-03 14:44:37f183722041cc6ed4275dd6fc17899b36509a78617c50ed4ce4c4c39472f82deadll Dridex
2020-12-03 12:38:48f49f9acac47b813ec018f48ab2d54ddd982b294e8a68227a4d83f817cb24ec7adll Dridex
2020-12-03 12:19:22f49f9acac47b813ec018f48ab2d54ddd982b294e8a68227a4d83f817cb24ec7adll Dridex
2020-12-03 11:03:53664a8adb4d5dbf9e03ca8316faecc6ae36647e331e4fab9c506045cd59fa75eedll Dridex
2020-12-03 11:03:16664a8adb4d5dbf9e03ca8316faecc6ae36647e331e4fab9c506045cd59fa75eedll Dridex
2020-12-03 09:36:0644941ab73d211c0353038856bba5c74f95703c3ac93786b6f9d2568a658b298adll Dridex
2020-12-03 09:29:4244941ab73d211c0353038856bba5c74f95703c3ac93786b6f9d2568a658b298adll Dridex
2020-12-03 07:31:506120c83e844de1ca1e68ec95c714218928c272edfb379cd7344a74e5890eb2d3dll Dridex
2020-12-03 07:26:346120c83e844de1ca1e68ec95c714218928c272edfb379cd7344a74e5890eb2d3dll Dridex
2020-12-03 06:49:1655aae894419c68f653d66c98a0b87d23c68bcdc9e4f5ca143acd03143b8f221bdll Dridex
2020-12-03 06:31:2755aae894419c68f653d66c98a0b87d23c68bcdc9e4f5ca143acd03143b8f221bdll Dridex
2020-12-03 05:31:13b49927abf18a8cad4054f65c1b05f418b49c56f67477928cd2949ea6a6f042d3dllDridex
2020-12-03 05:24:31b49927abf18a8cad4054f65c1b05f418b49c56f67477928cd2949ea6a6f042d3dllDridex
2020-12-03 03:33:01148026042a20a170fb56b258538a078be324b0493746bbf5ea17704c99e38486dllDridex
2020-12-03 03:21:11148026042a20a170fb56b258538a078be324b0493746bbf5ea17704c99e38486dllDridex
2020-12-03 02:15:107fee8c20f0586ce2d544f172b5df1f96acde543b02c50473bb7732de0d1c9fb4dll Dridex
2020-12-03 01:47:067fee8c20f0586ce2d544f172b5df1f96acde543b02c50473bb7732de0d1c9fb4dll Dridex