URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 108.62.118.31
Firstseen:2022-04-16 02:24:03 UTC
Total malware sites :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2022-04-16 02:24:10 108.62.118.31static-108-62-118-31.nextroute.coNot listedAS30633 LEASEWEB-USA-WDC- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-04-16 02:24:10http://108.62.118.31/hostads.exeOffline32 DanaBot ext exe zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-04-16 06:40:53173b82157a494d32d8f940491c83f91f118c124bc77bb62f91f95d98b98f8455exe DanaBot
2022-04-16 04:51:455ddd99e29124b4d53e2601159dac900506af9ecb753950adf336d1fa8b96d4ccexe  
2022-04-16 03:54:11cfb04c54f0c8648d9b43d05803f1816769fa8a37aff362141f939c001c361907exeDanaBot
2022-04-16 02:54:452650817e2703b15c7e6fbf4d4caace2066f50db88fc96862190c4daf32d186e7exeDanaBot
2022-04-16 02:24:10b40e6537a52981f980ab811a63c1c8bb751d5ddc5b64668a342dddf24bcbeb94exeDanaBot