URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	pgn-dkppsby.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-12-25 07:24:09 UTC
Total malware sites :	7
Online malware sites :	0 (0%)
Offline Malware sites :	7 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-07-21 19:38:54	103.253.215.19		Not listed	AS58487 CRI-AS-AP	ID	no
2022-12-25 07:24:13	203.175.8.46	wibisana.dua.rumahweb.com	Not listed	AS58487 CRI-AS-AP	ID	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-03-14 19:03:35	https://pgn-dkppsby.com/connect/	Offline	250255 7710 geofenced Gozi ISFB ITA redir-302 ursnif	abuse_ch
2023-03-14 19:02:46	https://pgn-dkppsby.com/scarica/	Offline	250255 7710 geofenced Gozi ISFB ITA redir-302 ursnif	abuse_ch
2023-03-14 19:01:04	https://pgn-dkppsby.com/agenzia/	Offline	250255 7710 geofenced Gozi ISFB ITA redir-302 ursnif	abuse_ch
2023-03-10 08:58:10	https://pgn-dkppsby.com/scarica/Agenzia_Entrate...	Offline	agenziaentrate Gozi ISFB MEF MISE ursnif	JAMESWT_MHT
2023-03-10 08:58:10	https://pgn-dkppsby.com/scarica/marzo.zip	Offline	agenziaentrate Gozi ISFB MEF MISE ursnif	JAMESWT_MHT
2023-02-09 19:55:06	http://pgn-dkppsby.com/connect/index.php	Offline	agenziaentrate Gozi hta ISFB ITA ursnif zip	JAMESWT_MHT
2022-12-25 07:24:14	https://pgn-dkppsby.com/2.exe	Offline	drop-by-malware N-W0rm PrivateLoader RedLineStealer	andretavare5

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2023-03-10 08:58:10	7d2f338e631518226af04bd9608e452202634cd565d48c506ef6e23bfedccb6d	zip	Gozi
2023-03-10 08:58:10	1f233fdb94239fa884321a91d14342c1a66e64ce02dc64378cb7c53669d5ea28	zip	Gozi
2023-01-05 13:36:50	50ab57ec39642fb2d98e3bd5b412eb0b90db8f6c4d8c19993d534186073f1c04	exe	RedLineStealer
2023-01-05 08:30:59	530daf409e60c26046acc50fa87ed9d312d41bcee68cceb3aa904a4e70e77b96	exe	RedLineStealer
2023-01-05 04:46:47	c54939e1bbeaf1058209dc235bc2a6e0795de547f9dceeb88103077958c787a9	exe	RedLineStealer
2023-01-05 00:52:11	067c2d7901a88e0b9efb00c53da4f6aee6cf6e98c4a197618662e8b906d3c2cd	exe	RedLineStealer
2023-01-04 21:28:46	8817cdf4fd5eb6d82d5fffde09d82407c84bfcbd891a16a6f73947802be07371	exe	RedLineStealer
2023-01-04 16:38:28	92865026ba094ca723778b7a4bc34355b309bcd24ef6842e2e606c33278a6956	exe	RedLineStealer
2023-01-04 13:07:38	7e0a20831fd4412b796b5b4bd2a5c54726df860e8c005b1b8f6b2f14c554fa1c	exe	RedLineStealer
2023-01-04 08:40:12	b67f79930f2e931de2c028807e9b4d01fcdb66eae16da58b8f7c5f52fe5018ab	exe	RedLineStealer
2023-01-04 04:49:35	e35b9ae2b21ae5beecc421526d50450d2b911454cb5db01751f32edb7541eb65	exe	RedLineStealer
2023-01-04 00:25:04	abc837f0aac4c4baccadaa0c8fc8dec0e8cf7321d5fbee167421eb293349677b	exe	RedLineStealer
2023-01-03 21:03:07	b210a5e5d110352baab377e07132f8d1e1526d2895efd94cd95f84864ac97dae	exe	RedLineStealer
2023-01-03 17:15:45	3d98fb814f6177c1351fb02b21dcbe04f705eb8cd1ff4515d39f542c7abdfd4f	exe	RedLineStealer
2023-01-03 12:34:27	85af98e93af4aebc14cfe9a49b3d093eb17227040793029ac245d79ff84933b1	exe	RedLineStealer
2023-01-03 08:05:09	a2e4945fc9c9b7816d72b2330e0687c675eb0fb4e906810276d3652a86c9c0a2	exe	RedLineStealer
2023-01-03 07:22:20	f4d84209c87561c1c63f96f68eff8f7ec29ec25c408f1722105f383e99a2d17d	exe	RedLineStealer
2023-01-03 00:09:29	2f83a30a92b91721525137b0c050a9f949984dfd4cb1c6043262fff3d575c13e	exe	RedLineStealer
2023-01-02 20:35:36	72b71bc4208fc3448e7e623ace14f509b447db71b340069be3f43fe83ebbc9fb	exe	RedLineStealer
2023-01-02 17:00:51	ce51452582adb86adebc20985dd43b191a3fc98685fb569937f1e9bad86c0c6b	exe	RedLineStealer
2023-01-02 12:41:45	a3899ddc252cd012aa31f253752be08c7f20ed1a0ba253246ba092cbf42971dc	exe	RedLineStealer
2023-01-02 08:04:40	f10f350d3dbfdbe5754904464697288704185fa9d4fb474092e30f907d3d252e	exe	RedLineStealer
2023-01-02 05:12:57	77c4e946ba9207534ea7a827c4608d566dd7bd130a22f46c3903a5180eb3f30d	exe	RedLineStealer
2023-01-02 00:35:34	96392e891a818bc191b8e786d032ba9782af8039caa791d6d895fef9898136f4	exe	RedLineStealer
2023-01-01 20:27:24	e5eaad869ff379415e109e6df54b63a71dac6c925e02c20c7028ce16af97fe86	exe	RedLineStealer
2023-01-01 16:12:55	44312c2207d025bcefca42f8a68330f2841ba8a564356e521d23d9b05450457c	exe	RedLineStealer
2023-01-01 12:01:29	d82068382e82697bb266f6c668fd1cda36f7ca2de8ce34ae280e9c1397d02567	exe	RedLineStealer
2023-01-01 08:36:01	c1cebe5904b2258dc151a969663ca94ae02bdc2b208fbbf620f3cd300e445a32	exe	RedLineStealer
2023-01-01 04:48:26	fab797b0780b201242ed15ac9e5646651345c2c49e301e8e55a41c5b9a3158ee	exe	RedLineStealer
2023-01-01 00:56:48	877a34ee02e595c5625b2735b71a466ab06a94ca9073198bd9c0266581859cfd	exe	RedLineStealer
2022-12-31 20:57:30	73dccea2cb14e60c0968f4ebe5c4195c3d8e3fee9d86c28d53aa28bf7974ded2	exe	RedLineStealer
2022-12-31 16:46:34	0047b0e0bda4131d1e4c91bb548422c6f6599e2982df9ed66277316a4b656a07	exe	RedLineStealer
2022-12-31 12:52:38	c0e05e633a522dc2fef569ac644ead5d52c7d922796a6c8161ce8491ec116c1d	exe	RedLineStealer
2022-12-31 08:37:55	691bfda349d0e18174260f9104159c4828b3ec20a53db6db96e8bd4560ffaa84	exe	N-W0rm
2022-12-31 04:05:16	3ffaa9a185e5383699135a53923f61ecae70ef538fbd7db6fe8f90f421fe4524	exe	RedLineStealer
2022-12-31 01:10:37	d5097ee31074ae901e48ebaf25737447a719fb40979eda31cff9ca3e45dd1bd0	exe	RedLineStealer
2022-12-30 20:18:57	1fe48238c1fe505741333ab50df52d474fab149444184fc8e16871c6075be8b2	exe	RedLineStealer
2022-12-30 16:45:14	99b21510e79967ae3ad4e40e757263ae61d5b8e5d3cecc76cfcfbff7b4848b10	exe	RedLineStealer
2022-12-30 12:25:21	1ed32d464e8ba3b51bdce4d0544fba7ce00e22961340c50cb78441df46d99848	exe	RedLineStealer
2022-12-30 08:31:57	ecf0c11ebf5e4d33208470fa906bd052aed3bbb5389b6b5a382b33b8a92cf70c	exe	RedLineStealer
2022-12-30 04:40:08	501f2463bdfc1e0260205d87eab7bcfe23254cefb6f43923172bb852cc96b2dd	exe	RedLineStealer
2022-12-30 00:10:45	61a1cd94691b0e620eeb4ff4d424f48d07419b4de4ee27cfcadf2ee759b32004	exe	RedLineStealer
2022-12-29 20:05:21	9c64bca70fe75187dcac8bc03ef05667def8947f114a82bccf8b3928c36a067b	exe	RedLineStealer
2022-12-29 16:42:19	018a65e059d418802b351b4611fe09093e5b50562143ce5a522c28ef0f0bcf10	exe	RedLineStealer
2022-12-29 16:17:16	a29cd4230a77e54b4efc06bb66caa7f3dab4c986a94a55cf6a76eb3761eb3394	exe	RedLineStealer
2022-12-29 12:21:32	6ea1d03968fc6cc0faa8d80a7cff8451d260a6e89a8e6ab4e068c37acac0ed9b	exe	RedLineStealer
2022-12-29 08:27:25	639d797ca8e9aa8de8544cdf900682191797d640c76ea3880609fb3ec7fc3c43	exe	RedLineStealer
2022-12-29 04:59:34	b3631f77ec6c54f3bbbb2b2b59a647e3bcc3b330516c0b6de96113be9369ca46	exe	RedLineStealer
2022-12-29 00:19:26	2ac9675aa85fdc4ae911e08d08e3bf773dae1edd9a1beb0a0450bccaa2e6441d	exe	RedLineStealer
2022-12-28 20:20:21	a9b555e6a8b7b9cf30579b133efac39d7f4d1417791f81baadc24413cc3e3c4f	exe	RedLineStealer
2022-12-28 16:11:57	6d70dfa130f8aba153401722f06c431a2a48fc42c2613e4dfb2c4695f672a507	exe	RedLineStealer
2022-12-28 14:31:13	7541eed07ff803ddda40f22f6acc187230fa56cad8dec7b0a3f6d4b65204a61e	exe	RedLineStealer
2022-12-27 20:36:22	007475d84db6b3046d60428b499f8a881dedcc4bc2b0e85222b725005699dbf8	exe	RedLineStealer
2022-12-27 16:18:07	b3ecf50e232abd59a59b8015ff03f74e4b1285dd65d04ea0053de8bf1fc0b907	exe	RedLineStealer
2022-12-27 14:02:59	a3f6dbe0e98b1bef0c4e4b4a31c7b3ea42e5e4d2df9a1cd618e3699ca8c72747	exe	RedLineStealer
2022-12-27 12:06:02	58d7db40a50b925a9dc7a31ab1a75c2ea242384008c7d07c18a2f4891e64a8f2	exe	RedLineStealer
2022-12-27 08:50:12	6d3c6795325dd55b1c07a70573875a31721fe3989f81fa761e8091f21a24b262	exe	RedLineStealer
2022-12-27 04:27:51	da7e60e0d37a5b8064f287ac41b0802e47653f4c3978a509b78d8fbcc6f2f9f7	exe	RedLineStealer
2022-12-27 00:41:30	b5e8852c7ca0b33b63dd35c38e0981ec382d32fe69f1c1453dfaf5a15418cea7	exe	RedLineStealer
2022-12-25 11:54:57	505509de0eccbd99559118cc90f42f5618c68827d963394afdef810c7fc3b2f1	exe	RedLineStealer
2022-12-25 08:38:22	3ca4879853a8f13a89473cb07e7ae77ab830abbf0ea5e09b3f525c5810b153b9	exe	RedLineStealer
2022-12-25 07:24:12	99b7396773e11d0a1d44f674310025344f2d8c9d2813d33e9bd7dd35ac5f2360	exe	RedLineStealer