URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-04-27 14:23:32 | 38.114.121.38 | ch2.leetdns.com | Not listed | AS63023 AS-GLOBALTELEHOST |  US | yes |
| 2023-03-24 17:37:54 | 38.143.66.100 | 66100mx.leetdns.com | Not listed | AS63023 AS-GLOBALTELEHOST | US | no |
| 2022-06-06 21:36:53 | 198.57.27.86 | 86-27-57-198.clients.gthost.com | Not listed | AS62563 AS-GLOBALTELEHOST |  CA | no |
| 2022-01-11 12:24:06 | 192.198.206.28 | mx20628.leetdns.com | Not listed | AS19437 SS-ASH | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2022-01-11 12:45:05 | http://deltagases.com.br/wp-includes/555gssIAjR... | Offline | emotet  epoch4 heodo SilentBuilder xls | Anonymous |
| 2022-01-11 12:24:06 | http://deltagases.com.br/wp-includes/555gssIAjR... | Offline | emotet epoch4 redir-doc xls |  waga_tw |
The table below shows recent payloads delivery by this host.