AS398256
Ultahost, Inc.
AS398256 is an Autonomous System — a group of IP networks managed under a single routing policy — operated by Ultahost, Inc., announcing routes from US. ScanMalware.com has recorded 34 public scans of 28 distinct URLs hosted on this network, the earliest from 2025-11-12 and the most recent from 2026-10-07.
In current BGP routing data, AS398256 announces 16 IPv4 prefixes and 0 IPv6 prefixes, and is reached through 3 observed upstream providers. A network's routing footprint and transit relationships are useful context for judging whether a hosted site sits on established infrastructure or on a network with a pattern of abuse.
Upstream transit providers
These Autonomous Systems are most frequently seen forwarding traffic for AS398256 in BGP routing tables — they form its effective transit and peering profile.
Recent public scans on AS398256
A rolling sample of recent public scans of hosts on this network. Listing a site here is not a safety judgement — open a scan to see its full verdict.
| Site | Scanned |
|---|---|
| https://thegrilljournal.com/ | 2026-10-07 |
| Promote Your Business with Merchant Center - Google for Retail https://ultimategrillhub.com/ | 2026-10-07 |
| Promote Your Business with Merchant Center - Google for Retail https://thegrillinglab.com/ | 2026-10-07 |
| New Tab https://quickkitchendishes.com/ | 2026-10-07 |
| Promote Your Business with Merchant Center - Google for Retail https://progrillguide.com/ | 2026-10-07 |
| Promote Your Business with Merchant Center - Google for Retail https://perfectpitmaster.com/ | 2026-10-07 |
| Promote Your Business with Merchant Center - Google for Retail https://mastergrillrecipes.com/ | 2026-10-07 |
| New Tab https://homehearthcooks.com/ | 2026-10-07 |
Open the full AS398256 search interface — filters, pagination and BGP detail →
Frequently asked questions about AS398256
- Does hosting a site on AS398256 make it unsafe?
- No. AS398256 is a network operated by Ultahost, Inc., and like any Autonomous System it carries a mix of legitimate and malicious sites. Hosting location is context, not a verdict — ScanMalware scores each scanned page on its own content, scripts and behaviour.
- How many sites on AS398256 has ScanMalware scanned?
- ScanMalware has recorded 34 public scans across 28 distinct URLs hosted on AS398256. The figure updates as new URLs on this network are submitted.
- Which networks provide transit for AS398256?
- In the BGP paths ScanMalware observes, AS398256 is most often reached through AS1299 (TWELVE99 Arelion Sweden AB), AS174 (COGENT-174 - Cogent Communications, LLC) and AS394177 (SHIFT-HOSTING-LLC - SHIFT HOSTING LLC). These upstream providers form the network's effective transit profile.
How ScanMalware builds this profile
ScanMalware.com performs public URL scans with a real headless browser, then maps each scanned host to its current ASN ownership and BGP routing context. This profile is built from those scans plus live routing data — the IP prefixes AS398256 announces, the networks that transit it, and the country it operates from — letting you pivot from one suspicious host to the wider network it sits on.
Browse more profiled networks on the ASN index, or scan a URL to see its hosting network.