🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: dd.qiyuea.cn
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2020-08-04 14:10:34 UTC
Total malware sites :2
Online malware sites :0 (0%)
Offline Malware sites :2 (100%)
A record(s) observed :142

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-10-30 14:16:48 156.234.199.108Not listedAS138415 YANCYLIMITED-AS-HK- HKyes
2026-10-30 14:16:48 156.234.199.109Not listedAS138415 YANCYLIMITED-AS-HK- HKyes
2026-10-30 14:16:48 156.234.199.110Not listedAS138415 YANCYLIMITED-AS-HK- HKyes
2026-10-30 14:16:48 156.234.199.111Not listedAS138415 YANCYLIMITED-AS-HK- HKyes
2026-10-30 14:16:48 156.234.199.112Not listedAS138415 YANCYLIMITED-AS-HK- HKyes
2026-10-30 14:16:48 156.234.199.113Not listedAS138415 YANCYLIMITED-AS-HK- HKyes
2026-10-30 14:16:48 156.234.199.114Not listedAS138415 YANCYLIMITED-AS-HK- HKyes
2026-10-30 14:16:48 156.234.199.115Not listedAS138415 YANCYLIMITED-AS-HK- HKyes
2026-10-30 14:16:48 156.234.225.79Not listedAS138415 YANCYLIMITED-AS-HK- HKyes
2026-10-30 14:16:48 156.234.225.80Not listedAS138415 YANCYLIMITED-AS-HK- HKyes

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-01-13 11:17:12http://dd.qiyuea.cn/july1/tfsoft.exeOfflineexe zbetcheckin
2020-08-04 14:10:39http://dd.qiyuea.cn/1206/flashupdata_setup.exeOfflineexe zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-02-23 06:50:1289ef526cae6654e9f52cbaee019d8e2aca1a84ff7f55013629988ebe1c1aad33exe  
2021-01-13 11:17:10e2e17c7a66b0571f7d35ecd4f5522eb697a234d2b3d803d609d3f804a63de168exe 
2020-08-06 21:32:43023be7ee30b90de0ee2311e60f64c082ad233ac6fde0ae482f2d110112e5717aexe  
2020-08-04 14:10:36697d33be52a77659f0347fe0f001449b40d42497a14069a42fcb66ba8d1dedacexe