URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: service.21stcenturyleadersawards.org
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Control D HaGeZi :Not blocked
Firstseen:2020-10-01 06:50:39 UTC
Total malware sites :1
A record(s) observed :2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2021-04-01 02:19:39 195.110.58.46Not listedAS47583 AS-HOSTINGER- GBno
2020-10-01 06:50:40 188.130.138.40Not listedAS204490 ASKONTEL- RUno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-10-01 06:50:40http://service.21stcenturyleadersawards.org/imp...Offlinegeofenced Gozi ext ITA ursnif ext reecdeep

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-10-02 14:31:40147bd085ab39c0be297f21613aad892a93ea4bdd0bb20e1d25873aeeab4e02cdexe  
2020-10-02 01:38:501f489fc6703dd57a5d322a920c98c60b0a9be1168147e3ab1f0db8fa2ba03daeexeGozi
2020-10-01 15:01:076103b1c38fc1eed6098eccf623cc093d0d54288d08ed5e90849f06688fe8b250dllGozi
2020-10-01 09:19:26f23809150b9ab8cdde2e38049987f158ebd23f72e25488620c5da003da308b50dllGozi
2020-10-01 07:11:21ff84091bb6f0eee80d98d41baf3ea143b48502d3933c0d9097abdf99618ffcf8exeGozi