URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 37.120.239.108
Firstseen:2021-08-10 10:04:03 UTC
Total malware sites :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2021-08-10 10:04:04 37.120.239.108SBL641941AS9009 M247- NLyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-08-10 10:04:04http://37.120.239.108/200.exeOffline32 exe zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-08-10 11:01:0866cebd1b0a87df2ddcd805723d15e8094c23dfe1d4a2108348579995a102c994exePitou
2021-08-10 10:13:527432d519a0a8042c26d8fa9637c9c07de4c33cde886feb1fbc063f1a5d828ed4exePitou
2021-08-10 10:04:04ce1c2e089ab14ef543b6604bd4fd82213708b89372fd63d414ff6e694ddce4adexePitou