ISXHost

CYBER3 and block

Executive Order 14144 (Cyber)

Programme US-CYBReference 52830treasury.govofac.treasury.gov

Canada is imposing sanctions against 11 entities from the energy, finance and military industrial sectors who support Russia’s full-scale invasion of Ukraine. The list of sanctioned entities includes two large liquified natural gas producers that serve as a critical source of budget revenue, helping fund Russia’s war efforts, a third country-owned financial institution enabling sanctions invasion, and entities that supply the cyber infrastructure used in Russian hybrid strategies against Ukraine.

Programme CA-SEMAinternational.gc.cainternational.gc.ca

Asset freeze and director disqualification sanction

ZSERVERS has been involved in relevant cyber activity, in that by providing hosting services that support relevant cyber activity it has provided support for the commission, planning or preparation of such activity, has supplied technology and provided technical assistance that could contribute to such activity, and has carried out activities which promoted, enabled or facilitated the commission of relevant cyber activity. ZSERVERS has operated from Barnaul, Russia and has promoted itself as a Bulletproof Hosting (BPH) provider. ZSERVERS has been involved in relevant cyber activity though its role providing infrastructure used in ransomware incidents and reprovisioning infrastructure for customers identified as being involved in malicious cyber activity, including those affiliated with the LockBit ransomware group. ZSERVERS infrastructure was used to host a ransomware-dedicated site connected with the leak of private information stolen from Australian health insurance company Medibank Private Limited. ZSERVERS has been identified as a key enabler of the cybercrime ecosystem. Such activity that ZSERVERS was involved in, directly or indirectly caused, or was intended to cause, economic loss to, or prejudice to the commercial interests of those affected by the activity.

ZSERVERS has been involved in relevant cyber activity, in that by providing hosting services that support relevant cyber activity it has provided support for the commission, planning or preparation of such activity, has supplied technology and provided technical assistance that could contribute to such activity, and has carried out activities which promoted, enabled or facilitated the commission of relevant cyber activity. ZSERVERS has operated from Barnaul, Russia and has promoted itself as a Bulletproof Hosting (BPH) provider. ZSERVERS has been involved in relevant cyber activity though its role providing infrastructure used in ransomware incidents and reprovisioning infrastructure for customers identified as being involved in malicious cyber activity, including those affiliated with the LockBit ransomware group. ZSERVERS infrastructure was used to host a ransomware-dedicated site connected with the leak of private information stolen from Australian health insurance company Medibank Private Limited. ZSERVERS has been identified as a key enabler of the cybercrime ecosystem. Such activity that ZSERVERS was involved in, directly or indirectly caused, or was intended to cause, economic loss to, or prejudice to the commercial interests of those affected by the activity.

Programme GB-CYBReference 16746Reference CYB0064Last updated 9 Apr 2025gov.ukgov.uk

Targeted financial sanction

Autonomous Sanctions (Designated Persons and Entities and Declared Persons – Thematic Sanctions) Amendment (No. 1) Instrument 2025

Programme AU-CYBLast updated 12 Feb 2025dfat.gov.audfat.gov.au

1, Part 2

Programme CA-SEMAReference 757international.gc.cainternational.gc.ca

Prohibition/Restriction

Redacted for Security Reasons

sam.gov

Director Disqualification Sanction and asset freeze

XHOST INTERNET SOLUTIONS LP ('XHOST') has been involved in relevant cyber activity, in that it is owned or controlled by and is acting on behalf or at the direction of ZSERVERS, which is involved in relevant cyber activity through the provision of hosting services that support such activity. XHOST has provided support for the commission, planning or preparation of relevant cyber activity, has supplied technology that could contribute to such activity, and has carried out activities which promoted, enabled or facilitated the commission of relevant cyber activity, by providing hosting services that support such activity. Further, XHOST was established to support and obfuscate relevant cyber activity by ZSERVERS, a Russian-based provider of bulletproof hosting services. Such activity that XHOST was involved in, directly or indirectly caused, or is intended to cause, economic loss to, or prejudice to the commercial interests of, those affected by the activity.

XHOST INTERNET SOLUTIONS LP ('XHOST') has been involved in relevant cyber activity, in that it is owned or controlled by and is acting on behalf or at the direction of ZSERVERS, which is involved in relevant cyber activity through the provision of hosting services that support such activity. XHOST has provided support for the commission, planning or preparation of relevant cyber activity, has supplied technology that could contribute to such activity, and has carried out activities which promoted, enabled or facilitated the commission of relevant cyber activity, by providing hosting services that support such activity. Further, XHOST was established to support and obfuscate relevant cyber activity by ZSERVERS, a Russian-based provider of bulletproof hosting services. Such activity that XHOST was involved in, directly or indirectly caused, or is intended to cause, economic loss to, or prejudice to the commercial interests of, those affected by the activity.

Programme GB-CYBReference 16747Reference CYB0065Last updated 9 Apr 2025gov.ukgov.uk

Canada is imposing sanctions against 11 entities from the energy, finance and military industrial sectors who support Russia’s full-scale invasion of Ukraine. The list of sanctioned entities includes two large liquified natural gas producers that serve as a critical source of budget revenue, helping fund Russia’s war efforts, a third country-owned financial institution enabling sanctions invasion, and entities that supply the cyber infrastructure used in Russian hybrid strategies against Ukraine.

Programme CA-SEMAinternational.gc.cainternational.gc.ca

1, Part 2

Programme CA-SEMAReference 758international.gc.cainternational.gc.ca