URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: celestialhost.ltd
Spamhaus DBL :Malware domain
SURBL :Blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2025-12-24 13:20:06 UTC
Total malware sites :29
Online malware sites :27 (93%)
Offline Malware sites :2 (7%)
Newest active malware site :2025-12-24 13:36:21 UTC
Oldest active malware site :2025-12-24 13:20:10 UTC (Age: 4 hours, 9 minutes)
A record(s) observed :1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-12-24 13:20:08 130.12.180.127SBL690641AS214943 RAILNET- USyes

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-12-24 13:36:21http://celestialhost.ltd/dlr.mpslOnlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:32http://celestialhost.ltd/dlr.m68kOnlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:32http://celestialhost.ltd/ntm68kOnlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:32http://celestialhost.ltd/ntmpslOnlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:31http://celestialhost.ltd/ntarm7Onlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:27http://celestialhost.ltd/o.xmlOnlinebotnetdomain sh ua-wget BlinkzSec
2025-12-24 13:20:27http://celestialhost.ltd/c.shOnlinebotnetdomain mirai ext sh ua-wget BlinkzSec
2025-12-24 13:20:25http://celestialhost.ltd/wget.shOfflinebotnetdomain sh ua-wget BlinkzSec
2025-12-24 13:20:24http://celestialhost.ltd/ntarmOnlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:24http://celestialhost.ltd/dlr.arm7Onlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:24http://celestialhost.ltd/dlr.ppcOnlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:24http://celestialhost.ltd/ntx86Onlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:24http://celestialhost.ltd/ntmipsOnlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:23http://celestialhost.ltd/a.shOnlinebotnetdomain mirai ext sh ua-wget BlinkzSec
2025-12-24 13:20:23http://celestialhost.ltd/ntsh4Onlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:22http://celestialhost.ltd/ntarm5Onlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:22http://celestialhost.ltd/dlr.sh4Onlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:21http://celestialhost.ltd/1.shOnlinebotnetdomain sh ua-wget BlinkzSec
2025-12-24 13:20:17http://celestialhost.ltd/n.shOnlinebotnetdomain mirai ext sh ua-wget BlinkzSec
2025-12-24 13:20:16http://celestialhost.ltd/dlr.x86Onlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:14http://celestialhost.ltd/exp.shOnlinebotnetdomain mirai ext sh ua-wget BlinkzSec
2025-12-24 13:20:14http://celestialhost.ltd/dlr.mipsOnlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:14http://celestialhost.ltd/dlr.spcOnlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:14http://celestialhost.ltd/ntppcOnlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:13http://celestialhost.ltd/ntspcOnlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:13http://celestialhost.ltd/dlr.arm5Onlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:13http://celestialhost.ltd/dlr.arm6Onlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:10http://celestialhost.ltd/ntarm6Onlinebotnetdomain elf mirai ext ua-wget BlinkzSec
2025-12-24 13:20:08http://celestialhost.ltd/w.shOfflinebotnetdomain sh ua-wget BlinkzSec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-12-24 13:36:2111b4fb69ecfe34f8e5971ae7a7da62cf0d2d5defbd0d125e9c3088225999c5dbelfMirai
2025-12-24 13:20:32fe6f26eba044f82b78b3cb7f2cf2c7721871fe4de398cf25e90c37890db806d2elfMirai
2025-12-24 13:20:3293b5e35d52129a8f694081b56cd71ca7bd3f53481c32b80e4d653a6039a90af6elfMirai
2025-12-24 13:20:32a97f2be659972982b61aee906b13d8ea4e9e16a2d1284c33f8ed99d8ea41ff59elfMirai
2025-12-24 13:20:3181aad7c6c7e13e69d0759539801b14a00e44d1363adf39ba5ecddb1874709e91elfMirai
2025-12-24 13:20:27aa634e0ad650a5f297d461eb3a94398e96d8f13ed389e9e7a8a6b770e7952f9csh 
2025-12-24 13:20:272753f5f7771d268ea371bd7f3a582295397b5df2877d4ab251358860ad153279shMirai
2025-12-24 13:20:2437490b35b3b2ad15b38e07c6d2614e277d2a43c76355f140c7c7ef6d7cf0f5acelfMirai
2025-12-24 13:20:246d6ab10bed413f91dbfc344d5bc1f7a4582ffb1360e99f0b90e6077b62adba6eelfMirai
2025-12-24 13:20:243c2d244953bb7b50af121ec7456517f880af8679d3a5fa6fc30cf4c287849ce9elfMirai
2025-12-24 13:20:248198e09fd8d9e79cd05d5b00f01c4199706fc156a45ac0bf74f251c8f36d385eelfMirai
2025-12-24 13:20:23f9880bbe5a89d7f785f0aadf21949d7348386abe000122689e28bf57427ae803shMirai
2025-12-24 13:20:2367d445a8aafcd3e7c47746cfcda4ad4a92f00fe2b67fb4f4564d9a5b6f219491elfMirai
2025-12-24 13:20:23b7f840ae5abdf8f07a1ec90a5841a7f875ccec5c064482eee8f935d12f9c8fa6elfMirai
2025-12-24 13:20:22e5e9346a47bce22519a79482111400fa4d1cb57614773f44d27c47574d1fa442elfMirai
2025-12-24 13:20:2163b12e1cbaac712396214896fadf2c5737b712015387dfa3b405ea52508e62f3elfMirai
2025-12-24 13:20:215379e5da6c6eae2eab376717f13ec203dea2307167bbe32fbd2156deabf1d356sh 
2025-12-24 13:20:16438a8f83d6a441a94a2220155439a171df2ae3e7e96eb932fd3c6848537c8f44shMirai
2025-12-24 13:20:1505792543f2ec7e66ba4dc938699bf5555ae9cfcb81aec76662d330bb9ed39e16elfMirai
2025-12-24 13:20:14adb4688748f1465771d3522d319e9d8dc582697f88c9113093c67c18990936ecshMirai
2025-12-24 13:20:1461f29118945e4883ae802db3b79401f9c2d66075ad8337ce4bfe3216052eb8feelfMirai
2025-12-24 13:20:14eb287794ff06e404f4e7ee6af8513d2ad466e85d6895bfc6258cf5f06507bd28elfMirai
2025-12-24 13:20:13562f58604b6c7b9a5a7f174b53301b48afc8fab79fff7de2086ea8943978b735elfMirai
2025-12-24 13:20:13ff07e6e405b5008d7f2227624d592cd35a30b45bcdf0ee2a91ef6d9f7aff9c73elfMirai
2025-12-24 13:20:13490c2a1f0e8a5cbc567dc05792fdc9ff1c8519e3745ad8b5798308f727581767elfMirai
2025-12-24 13:20:13ec4b1c95c8194d9b1e1c05c3e9b735d22215cfcafb579ca8c07c3393df7b0f7delfMirai
2025-12-24 13:20:094822e668692794fad83477e8ba761b11c25d57428ee6665f0f0cef3e7ba4873aelfMirai