URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	pngup.com
Domain registrar:	NameBright.com
Domain registration date:	2024-04-25 10:10:18 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2025-07-28 08:28:19 UTC
Total malware sites :	8
Online malware sites :	0 (0%)
Offline Malware sites :	8 (100%)
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-07-28 08:28:55	149.56.126.37	pngup.com	Not listed	AS16276 OVH	CA	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2026-03-09 12:37:17	https://pngup.com/rv2N/optimized_MSI.png	Offline	MassLogger	abuse_ch
2026-03-09 07:21:14	https://pngup.com/zAiY/optimized_MSI.png	Offline		JAMESWT_WT
2026-03-03 15:49:05	https://pngup.com/j8LG/MSI_PRO_with_b64.png	Offline		abuse_ch
2026-03-03 07:11:25	https://pngup.com/XRhs/MSI_PRO_with_b64.png	Offline	xworm	abuse_ch
2026-03-03 06:44:07	https://pngup.com/xV1t/MSI_PRO_with_b64.png	Offline		JAMESWT_WT
2025-12-08 17:16:14	https://pngup.com/VmOv/MSI_PRO_with_b64.png	Offline	xworm	abuse_ch
2025-08-24 14:17:22	https://pngup.com/ZnJi/output_image.bmpP	Offline	stego	JAMESWT_WT
2025-07-28 08:28:55	https://pngup.com/ZnJi/output_image.bmp	Offline	dcrat	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2026-03-09 12:37:17	a945e648556cb1ef96710cd1682c9bb989dcfa4809dd7f84f31413aeb87f144a	unknown
2026-03-09 07:21:14	3ea51354e8400a708ab3c6bbf2e80d73c81fc52a310306abe321ae6398093f1c	unknown
2026-03-03 07:11:25	c32343a43215da70971163d7c765845ce0246a90b12da62774c2bf16ea2e34d6	unknown
2026-01-16 13:14:40	89c895fdce0b118195532e4ada2c43325c4ebec157e9c600eddd875af696b9c6	unknown
2026-01-13 13:38:17	89c895fdce0b118195532e4ada2c43325c4ebec157e9c600eddd875af696b9c6	unknown
2025-12-08 17:16:14	2e3df3649aba74f4fce04c7323d612642a409ae8944530f5e36b1bac1c38a9d7	unknown
2025-07-28 08:28:55	6f1c7c93375c6895fb0115b64c97ece82d07985996c6317c70113c88ec146531	unknown