URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: pingu.ltd
Spamhaus DBL :Spammer domain
SURBL :Blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2026-09-01 16:02:05 UTC
Total malware sites :16
Online malware sites :15 (94%)
Offline Malware sites :1 (6%)
Newest active malware site :2026-09-01 16:02:53 UTC
Oldest active malware site :2026-09-01 16:02:20 UTC (Age: 1 hour, 42 minutes)
A record(s) observed :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-09-01 16:02:20 93.152.221.234SBL699858AS197170 TECHTIES-AS- DEyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-09-01 16:03:22http://pingu.ltd/run.shOfflinebotnetdomain pingu-ltd sh ua-wget BlinkzSec
2026-09-01 16:02:53http://pingu.ltd/ppc64Onlinebotnetdomain DDoSAgent elf pingu-ltd ua-wget BlinkzSec
2026-09-01 16:02:46http://pingu.ltd/armv5lOnlinebotnetdomain elf pingu-ltd ua-wget BlinkzSec
2026-09-01 16:02:39http://pingu.ltd/ppc64leOnlinebotnetdomain DDoSAgent elf pingu-ltd ua-wget BlinkzSec
2026-09-01 16:02:39http://pingu.ltd/i686Onlinebotnetdomain DDoSAgent elf pingu-ltd ua-wget BlinkzSec
2026-09-01 16:02:38http://pingu.ltd/amd64Onlinebotnetdomain DDoSAgent elf pingu-ltd ua-wget BlinkzSec
2026-09-01 16:02:37http://pingu.ltd/aarch64Onlinebotnetdomain elf pingu-ltd ua-wget BlinkzSec
2026-09-01 16:02:30http://pingu.ltd/mipsOnlinebotnetdomain DDoSAgent elf pingu-ltd ua-wget BlinkzSec
2026-09-01 16:02:29http://pingu.ltd/x86Onlinebotnetdomain DDoSAgent elf pingu-ltd ua-wget BlinkzSec
2026-09-01 16:02:28http://pingu.ltd/mips64Onlinebotnetdomain DDoSAgent elf pingu-ltd ua-wget BlinkzSec
2026-09-01 16:02:28http://pingu.ltd/armv6lOnlinebotnetdomain elf pingu-ltd ua-wget BlinkzSec
2026-09-01 16:02:28http://pingu.ltd/arm64Onlinebotnetdomain elf pingu-ltd ua-wget BlinkzSec
2026-09-01 16:02:25http://pingu.ltd/x86_64Onlinebotnetdomain DDoSAgent elf pingu-ltd ua-wget BlinkzSec
2026-09-01 16:02:21http://pingu.ltd/mips64leOnlinebotnetdomain DDoSAgent elf pingu-ltd ua-wget BlinkzSec
2026-09-01 16:02:21http://pingu.ltd/armv7lOnlinebotnetdomain elf pingu-ltd ua-wget BlinkzSec
2026-09-01 16:02:20http://pingu.ltd/mipselOnlinebotnetdomain DDoSAgent elf pingu-ltd ua-wget BlinkzSec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-09-01 16:08:563e36760ba1929dd8ac335daf75f10912f21cde1f7c79848dffcfc287536ff794elfDDoSAgent
2026-09-01 16:07:5712005831c060b0a64e2ccd1f490e1cf6b7601a4ba9b815b2962bf1c2f6627389elfDDoSAgent
2026-09-01 16:02:53377e2b28d13ffd865201839b14fadbb6d3fc275a3e8e58211e84d425013f6cdfelfDDoSAgent
2026-09-01 16:02:462f43448fbf7a8a51e84f531dbd644ece019b4508da237200abd646fc27d18d40elf 
2026-09-01 16:02:39b75025837c6e4c451b1a793ca7ba2877f026b0a3900eaf5d7b27837e87cf3ff3elfDDoSAgent
2026-09-01 16:02:39136c27594f93dcc214448491f91eddeedf46d40574664c17579c31e02200bd65elfDDoSAgent
2026-09-01 16:02:38ca144e29fddb1470ea6f8713249af3f0c979b6af572d9cc2944e1e665af024c6elfDDoSAgent
2026-09-01 16:02:37fda5ad2c019dd092098833c9715c7dd0a11fbb36086e0d6cf6d28b94747b348felf 
2026-09-01 16:02:29136c27594f93dcc214448491f91eddeedf46d40574664c17579c31e02200bd65elfDDoSAgent
2026-09-01 16:02:2872c10910f098611e04613c664716c5fd275d1f4b8d749409a24487148392ea7aelfDDoSAgent
2026-09-01 16:02:286fdaf2a16399ae318a33bef674cb569e21765022f7f1e30a4196aa511327f087elf 
2026-09-01 16:02:28fda5ad2c019dd092098833c9715c7dd0a11fbb36086e0d6cf6d28b94747b348felf 
2026-09-01 16:02:24ca144e29fddb1470ea6f8713249af3f0c979b6af572d9cc2944e1e665af024c6elfDDoSAgent
2026-09-01 16:02:216b7b76c98480df34a93606564a986f63d984d46f4c6dcb626f6a953a09a1d372elfDDoSAgent
2026-09-01 16:02:2181722c7605e51e025796636e50b478daca07a7dbb6ccf3c07aad74ecc4522843elf