URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	fortdelgres.com
Spamhaus DBL :	Abused domain (malware)
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-01-18 08:51:04 UTC
Total malware sites :	14
Online malware sites :	0 (0%)
Offline Malware sites :	14 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-01-18 08:51:05	145.239.37.162	cluster030.hosting.ovh.net	Not listed	AS16276 OVH	FR	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-03-01 10:33:21	https://fortdelgres.com/impresa/contratto.ppa	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-03-01 10:33:17	https://fortdelgres.com/impresa/Agenzia.ppa	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-03-01 10:33:17	https://fortdelgres.com/impresa/Marzo.ppa	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-03-01 10:33:15	https://fortdelgres.com/impresa/	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-03-01 10:33:13	https://fortdelgres.com/impresa/azienda.ppa	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-03-01 10:33:13	https://fortdelgres.com/impresa/Agenzia_Entrate...	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-03-01 10:33:13	https://fortdelgres.com/impresa/cliente.ppa	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-03-01 10:33:13	https://fortdelgres.com/impresa/AgenziaEntrate.ppa	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-03-01 10:33:10	https://fortdelgres.com/impresa/documenti.ppa	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-03-01 10:33:09	https://fortdelgres.com/impresa/Direzione.ppa	Offline	agenziaentrate Gozi ISFB ITA italy njRAT ursnif	JAMESWT_MHT
2023-03-01 10:33:06	https://fortdelgres.com/impresa/impresa.ppa	Offline	agenziaentrate Gozi ISFB ITA italy ursnif	JAMESWT_MHT
2023-01-23 09:39:09	http://fortdelgres.com/headers/online/index.php	Offline	agenziaentrate botnet-7707 geofenced Gozi ISFB ITA redir-302 ursnif	abuse_ch
2023-01-18 08:51:06	http://fortdelgres.com/agenzia/	Offline	geo Gozi ISFB ITA redir-onedrive ursnif	abuse_ch
2023-01-18 08:51:05	http://fortdelgres.com/agenzia/0c77/kUn8cI.php	Offline	geo Gozi ISFB ITA redir-onedrive ursnif	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2023-03-01 10:33:21	d42cf1aa9737e9ee24d49805db194c72d799608174b6335bcb8d7a0798f9ddb3	doc	Gozi
2023-03-01 10:33:17	ca6cca63731e86074f4b715fd5ff280771c7478aa9e336267e8cc95cdf4905fe	doc	Gozi
2023-03-01 10:33:16	7c33aeb8fc1276e42d9c7580d8aa5c7082375eb3ab60e54e067ded8a92f8fd4b	doc	Gozi
2023-03-01 10:33:13	4722a4d6ff371f1f3f3c6731e6d1cd19cf12f2f78fb9663e6ceb93c4925f4011	doc	Gozi
2023-03-01 10:33:13	c49ab691bed47d2ef3c57761c1a4b2ff8c897b06f843853b0d7e9d0c73cc0f61	doc	Gozi
2023-03-01 10:33:13	1e599a0475a7a2874fef31e7430679fbba19709f8b0a27a681bc2823425a1111	doc	Gozi
2023-03-01 10:33:13	32f2c6292a6f01bc517e056acff0326cefb4ecac9e7fc66c37d60b757c2f9174	doc	Gozi
2023-03-01 10:33:10	677786a7ca8f925a37187be1f7a1dc245bdb7ef26d4267207fd1dad1429a7181	doc	Gozi
2023-03-01 10:33:08	c704b5b9f047b84b8bef8ecc5755092c0a42bc2717577a63c067889ac44a31a2	doc	njrat
2023-03-01 10:33:06	20da71a1e773ba27b69fea318e4ec57087a35e9591a02ddb51d01c666eec03d9	doc	Gozi