URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	oya.qa
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2020-11-25 15:00:04 UTC
Total malware sites :	2
Online malware sites :	0 (0%)
Offline Malware sites :	2 (100%)
A record(s) observed :	7

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-04-27 23:26:55	104.21.84.19		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2025-04-27 23:26:55	172.67.184.197		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2021-01-15 01:13:23	104.21.44.248		Not listed	AS13335 CLOUDFLARENET	n/a	no
2020-12-01 18:13:04	172.67.206.152		Not listed	AS13335 CLOUDFLARENET	n/a	no
2020-12-01 18:13:04	104.18.50.78		Not listed	AS13335 CLOUDFLARENET	n/a	no
2020-12-01 18:13:04	104.18.51.78		Not listed	AS13335 CLOUDFLARENET	n/a	no
2020-11-25 15:00:11	209.90.69.198	vh21.nethosting.com	Not listed	AS5048 FIBER	US	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-11-26 07:56:06	http://oya.qa//lfonl5.rar	Offline	Dridex	JAMESWT_MHT
2020-11-25 15:00:11	http://oya.qa/lfonl5.rar	Offline	Dridex Quakbot	unixronin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2020-11-26 14:27:48	3091e2abfb55d05d6284b6c4b058b62c8c28afc1d883b699e9a2b5482ec6fd51	exe
2020-11-26 14:25:52	3091e2abfb55d05d6284b6c4b058b62c8c28afc1d883b699e9a2b5482ec6fd51	exe
2020-11-26 13:21:02	d43a5dca8a24c7c0334dda904ec12cad5c019c7a5240d231b2dce5c3d489f2ad	dll
2020-11-26 13:17:13	d43a5dca8a24c7c0334dda904ec12cad5c019c7a5240d231b2dce5c3d489f2ad	dll
2020-11-26 09:28:14	8ceb186696c9bda47466e5ecd1d0f0d5f93318e8bdc6b42454dd3be884e99e33	dll	Dridex
2020-11-26 09:25:31	8ceb186696c9bda47466e5ecd1d0f0d5f93318e8bdc6b42454dd3be884e99e33	dll	Dridex
2020-11-26 07:56:06	b12b65a39a6261016b7473cfd08c316cee6958739e00bb746331bdfb52b4b0bb	dll	Dridex
2020-11-26 07:11:05	b12b65a39a6261016b7473cfd08c316cee6958739e00bb746331bdfb52b4b0bb	dll	Dridex
2020-11-25 15:48:21	560478c5532f341407bed4a90de3f7a53bb36d500691f1f41e7d18a44f354f8a	dll	Dridex
2020-11-25 15:00:11	3e7419a65a56ba07ecd1471123e7efd95f955e34a472a735752e9c165f1d6cb5	dll	Quakbot