URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-04-04 07:25:53 | 172.217.17.193 | sof02s22-in-f193.1e100.net | Not listed | AS15169 GOOGLE |  US | yes |
| 2026-04-01 16:58:19 | 142.250.180.1 | lhr25s32-in-f1.1e100.net | Not listed | AS15169 GOOGLE | US | no |
| 2026-03-29 03:03:05 | 192.178.183.132 | lcfraw-in-f132.1e100.net | Not listed | AS15169 GOOGLE | US | no |
| 2026-01-14 15:08:16 | 142.251.141.97 | tzfraa-ai-in-f1.1e100.net | Not listed | AS15169 GOOGLE | US | no |
| 2026-01-17 00:32:56 | 142.251.141.129 | tzfraa-aj-in-f1.1e100.net | Not listed | AS15169 GOOGLE | US | no |
| 2026-02-07 09:44:39 | 142.251.140.161 | lcfraa-bt-in-f1.1e100.net | Not listed | AS15169 GOOGLE | US | no |
| 2026-03-15 08:34:56 | 172.217.16.193 | fra16s65-in-f1.1e100.net | Not listed | AS15169 GOOGLE | US | no |
| 2025-12-17 21:56:48 | 142.251.141.65 | tzfraa-ar-in-f1.1e100.net | Not listed | AS15169 GOOGLE | US | no |
| 2025-09-06 14:42:03 | 216.58.206.65 | mil07s08-in-f1.1e100.net | Not listed | AS15169 GOOGLE | US | no |
| 2026-03-09 20:12:06 | 142.251.38.193 | lcbuda-ao-in-f1.1e100.net | Not listed | AS15169 GOOGLE | US | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2020-02-13 14:54:03 | https://doc-10-44-docs.googleusercontent.com/do... | Offline | AgentTesla  encrypted |  ps66uk |
The table below shows recent payloads delivery by this host.