🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: lingering-cloud-8a93.zinhoooo.workers.dev
Spamhaus DBL :Abused domain (phishing)
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2026-10-23 12:47:04 UTC
Total malware sites :19
Online malware sites :1 (5%)
Offline Malware sites :18 (95%)
Newest active malware site :2026-10-24 09:08:03 UTC
Oldest active malware site :2026-10-24 09:08:03 UTC (Age: 6 days, 9 hours, 55 minutes)
A record(s) observed :6

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-10-23 12:47:11 188.114.96.3Not listedAS13335 CLOUDFLARENETn/ayes
2026-10-23 12:47:11 188.114.97.3Not listedAS13335 CLOUDFLARENETn/ayes
2026-10-28 05:36:37 188.114.96.12SBL687666AS13335 CLOUDFLARENETn/ano
2026-10-28 05:36:38 188.114.97.12Not listedAS13335 CLOUDFLARENETn/ano
2026-10-24 16:43:37 188.114.96.1Not listedAS13335 CLOUDFLARENETn/ano
2026-10-24 16:43:37 188.114.97.1Not listedAS13335 CLOUDFLARENETn/ano

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-10-28 16:30:10https://lingering-cloud-8a93.zinhoooo.workers.d...OfflineAgentTesla ext abuse_ch
2026-10-28 16:30:09https://lingering-cloud-8a93.zinhoooo.workers.d...OfflineAgentTesla ext abuse_ch
2026-10-28 16:10:08https://lingering-cloud-8a93.zinhoooo.workers.d...OfflineDarkCloud abuse_ch
2026-10-28 11:12:10https://lingering-cloud-8a93.zinhoooo.workers.d...Offlineascii Encoded rat RemcosRAT ext abuse_ch
2026-10-27 16:00:07https://lingering-cloud-8a93.zinhoooo.workers.d...Offlineascii Encoded xworm abuse_ch
2026-10-27 15:55:07https://lingering-cloud-8a93.zinhoooo.workers.d...Offlineascii Encoded xworm abuse_ch
2026-10-27 07:32:07https://lingering-cloud-8a93.zinhoooo.workers.d...Offlineascii xworm abuse_ch
2026-10-27 07:17:06https://lingering-cloud-8a93.zinhoooo.workers.d...Offlineascii Encoded PureLogsStealer abuse_ch
2026-10-27 06:48:07https://lingering-cloud-8a93.zinhoooo.workers.d...OfflineAgentTesla ext ascii Encoded abuse_ch
2026-10-27 06:44:07https://lingering-cloud-8a93.zinhoooo.workers.d...Offlineascii Encoded Formbook ext abuse_ch
2026-10-26 15:35:12https://lingering-cloud-8a93.zinhoooo.workers.d...Offlineascii xworm abuse_ch
2026-10-26 13:39:07https://lingering-cloud-8a93.zinhoooo.workers.d...Offlineascii Encoded xworm abuse_ch
2026-10-26 13:13:07https://lingering-cloud-8a93.zinhoooo.workers.d...OfflineAgentTesla ext ascii powershell ps1 abuse_ch
2026-10-25 13:56:55https://lingering-cloud-8a93.zinhoooo.workers.d...OfflineAgentTesla ext ascii Encoded abuse_ch
2026-10-24 09:57:57https://lingering-cloud-8a93.zinhoooo.workers.d...Offlineascii Encoded PureRAT rat abuse_ch
2026-10-24 09:08:33https://lingering-cloud-8a93.zinhoooo.workers.d...OfflineAgentTesla ext ascii Encoded abuse_ch
2026-10-24 09:08:03https://lingering-cloud-8a93.zinhoooo.workers.d...OnlineAgentTesla ext ascii Encoded rev-base64-loader abuse_ch
2026-10-23 12:47:11https://lingering-cloud-8a93.zinhoooo.workers.d...Offlinexworm abuse_ch
2026-10-23 12:47:11https://lingering-cloud-8a93.zinhoooo.workers.d...Offlineascii Encoded xworm abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-10-29 11:24:08074cdaaaa9283f19872cc111fdc95a2a5b823a12c01814a91f4f64c06b7a8856txt  
2026-10-29 04:04:21892531ac05db56b399880722cef00a55afc868a314272475e1b32c0818af1785txt  
2026-10-28 16:30:103536d2001467f4707502b49d0aa25f388b629fa7aff9cc914f03814723c134a8txt  
2026-10-28 16:30:093536d2001467f4707502b49d0aa25f388b629fa7aff9cc914f03814723c134a8txt  
2026-10-28 16:10:083536d2001467f4707502b49d0aa25f388b629fa7aff9cc914f03814723c134a8txt  
2026-10-28 11:12:103536d2001467f4707502b49d0aa25f388b629fa7aff9cc914f03814723c134a8txt  
2026-10-27 20:10:293536d2001467f4707502b49d0aa25f388b629fa7aff9cc914f03814723c134a8txt  
2026-10-27 16:00:073536d2001467f4707502b49d0aa25f388b629fa7aff9cc914f03814723c134a8txt  
2026-10-27 15:55:073536d2001467f4707502b49d0aa25f388b629fa7aff9cc914f03814723c134a8txt  
2026-10-27 07:32:074dc9b7b3ec46d05817587769c9db1ccec2bd08a15bec7cc46b0a601882946a81txt  
2026-10-27 07:17:064dc9b7b3ec46d05817587769c9db1ccec2bd08a15bec7cc46b0a601882946a81txt  
2026-10-27 06:48:074dc9b7b3ec46d05817587769c9db1ccec2bd08a15bec7cc46b0a601882946a81txt  
2026-10-27 06:44:074dc9b7b3ec46d05817587769c9db1ccec2bd08a15bec7cc46b0a601882946a81txt  
2026-10-26 21:34:054dc9b7b3ec46d05817587769c9db1ccec2bd08a15bec7cc46b0a601882946a81txt  
2026-10-26 15:35:1279d4ef0a40ceccd4983432913a47338699d28b11b7d07bef930b4ce4dff9832dtxt  
2026-10-26 13:39:0779d4ef0a40ceccd4983432913a47338699d28b11b7d07bef930b4ce4dff9832dtxt  
2026-10-26 13:13:0779d4ef0a40ceccd4983432913a47338699d28b11b7d07bef930b4ce4dff9832dtxt  
2026-10-25 13:56:5579d4ef0a40ceccd4983432913a47338699d28b11b7d07bef930b4ce4dff9832dtxt  
2026-10-24 09:57:5779d4ef0a40ceccd4983432913a47338699d28b11b7d07bef930b4ce4dff9832dtxt  
2026-10-24 09:08:3279d4ef0a40ceccd4983432913a47338699d28b11b7d07bef930b4ce4dff9832dtxt  
2026-10-24 09:08:0279d4ef0a40ceccd4983432913a47338699d28b11b7d07bef930b4ce4dff9832dtxt  
2026-10-23 12:47:1179d4ef0a40ceccd4983432913a47338699d28b11b7d07bef930b4ce4dff9832dtxt  
2026-10-23 12:47:1179d4ef0a40ceccd4983432913a47338699d28b11b7d07bef930b4ce4dff9832dtxt