gsoam.ge - URL scan, 14 Aug 2026
MalwareAnalyzer by Cyble scanned gsoam.ge and returned a unknown verdict (score 12). The page resolved to 94.130.91.36 on Hetzner Online GmbH in DE. 5 domains and 1 IP were contacted, over 19 HTTP requests. 6 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 14 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 12) · Confidence 15%
- Scanned URL:
http://gsoam.ge/wp-content/plugins/formcraft/file-upload/server/content/files/160823eb244569---faxitujoz.pdf - Domain: gsoam.ge · IP: 94.130.91.36 · AS24940 · DE
- Server: nginx
- Page title: გვერდი არ არის ნაპოვნი
- HTTP status: 404 · text/html; charset=UTF-8
- HTTP requests captured: 19
- Scan tier: fast · observed 2026-08-14 09:49:27 UTC
Redirect chain
http://gsoam.ge/wp-content/plugins/formcraft/file-upload/server/content/files/160823eb244569---faxitujoz.pdfhttps://gsoam.ge/wp-content/plugins/formcraft/file-upload/server/content/files/160823eb244569---faxitujoz.pdf
Malware communicating with this URL (6)
These samples were observed contacting or being served from gsoam.ge. Each links to its full analysis.
- Phishing - referenced ·
82a0617d426193c2a91aea7a8b8b1ba5· first seen 2026-08-14 - Phishing - referenced ·
6293622e068da73d04a17ff24198194b· first seen 2026-08-13 - Phishing - referenced ·
22a78fc45520530a206a6319019f7004· first seen 2026-08-13 - Phishing - referenced ·
3fd1d21dae803fcd2690873d2ac140ad· first seen 2026-08-13 - Phishing - referenced ·
861db6ec3a418c951e7153b4c73c0471· first seen 2026-08-13 - Phishing - referenced ·
bf7a187bd027a86f4948d301c1876da4· first seen 2026-08-13
Antivirus & YARA (1 of 44 engines)
- YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)
These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.
Why this verdict
- A signature matched text in the page (DLV_HTML_Smuggling) — pages that discuss malware can match, so this alone is not a malicious verdict
Detected technologies
- Nginx
- WordPress
- jQuery
Contacted infrastructure
- 94.130.91.36 - AS24940 Hetzner Online GmbH (Germany)
Observed indicators
- gsoam.ge
- gmpg.org
- fonts.googleapis.com
- www.uimeweb.org
- www.aaamed.org
- 94.130.91.36
- https://gsoam.ge/wp-content/plugins/formcraft/file-upload/server/content/files/160823eb244569---faxitujoz.pdf
- http://gmpg.org/xfn/11
- https://fonts.googleapis.com/
- https://gsoam.ge/feed
- https://gsoam.ge/comments/feed
- https://gsoam.ge/wp-content/plugins/ml-slider/admin/assets/dist/css/editor-block.css?ver=3.109.0
- https://gsoam.ge/wp-content/plugins/blossomthemes-email-newsletter/public/css/blossomthemes-email-newsletter-public.min.css?ver=2.2.11
- https://gsoam.ge/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.5
- https://gsoam.ge/wp-content/plugins/raratheme-companion/public/css/raratheme-companion-public.min.css?ver=1.4.4
- https://gsoam.ge/wp-content/themes/the-conference/css/animate.min.css?ver=3.5.2
- https://fonts.googleapis.com/css?family=Nunito%20Sans:200,200i,300,300i,400,400i,600,600i,700,700i,800,800i,900,900i&subset=latin,latin-ext
- https://gsoam.ge/wp-content/themes/the-conference/style.css?ver=1.2.7
- https://gsoam.ge/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
- https://gsoam.ge/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Other scans of gsoam.ge (4)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 19 Aug 2026 - unknown ·
https://gsoam.ge/wp-content/plugins/formcraft/file-upload/server/content/files/16151e2f57a915---koko - 19 Aug 2026 - unknown ·
https://gsoam.ge/wp-content/plugins/formcraft/file-upload/server/content/files/1609ed295a1d34---vuxo - 15 Aug 2026 - unknown ·
https://gsoam.ge/wp-content/plugins/formcraft/file-upload/server/content/files/1612659d1edfa6---7986 - 13 Aug 2026 - unknown ·
https://gsoam.ge/wp-content/plugins/formcraft/file-upload/server/content/files/1613f77c541eae---boki
Questions about gsoam.ge
- Is gsoam.ge safe?
- The scan of gsoam.ge on 14 Aug 2026 reached no verdict either way (score 12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with gsoam.ge?
- 6 analysed samples communicate with this URL, including Phishing.
- How was gsoam.ge checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of gsoam.ge
Scanned on MalwareAnalyzer by Cyble · Open interactive scan