URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: techipress.com
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2020-09-29 15:08:07 UTC
Total malware sites :1
A record(s) observed :16

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-11-22 13:41:36 154.12.233.103vmi2921617.contaboserver.netNot listedAS40021 CONTABO-40021- USyes
2025-11-22 13:41:36 185.217.127.20vmi2921626.contaboserver.netNot listedAS51167 CONTABO- FRyes
2025-11-17 21:09:09 195.201.128.179static.179.128.201.195.clients.your-server.deNot listedAS24940 HETZNER-AS- DEyes
2025-11-17 21:09:09 46.62.128.205static.205.128.62.46.clients.your-server.deNot listedAS24940 HETZNER-AS- FIyes
2025-11-17 21:09:09 5.161.47.86static.86.47.161.5.clients.your-server.deNot listedAS213230 HETZNER-CLOUD2-AS- USyes
2025-11-20 16:57:16 5.78.156.59static.59.156.78.5.clients.your-server.deNot listedAS212317 HETZNER-CLOUD3-AS- USyes
2025-09-23 00:51:34 76.223.91.20ad988eeb126877ff9.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USyes
2025-11-17 21:09:09 5.78.153.186static.186.153.78.5.clients.your-server.deNot listedAS212317 HETZNER-CLOUD3-AS- USno
2025-09-23 00:51:34 166.117.68.124Not listedAS16509 AMAZON-02- USno
2025-07-04 02:13:31 84.32.84.33Not listedAS47583 AS-HOSTINGER- LTno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-09-29 15:08:08http://techipress.com/docs/Document/HshMGedoGx/Offlinedoc emotet ext epoch1 heodo ext Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-09-29 15:32:352b76bed992df2036c3068fd1b33abc390bae3f22b4679e650d5e02786347d6a5docHeodo
2020-09-29 15:08:084730292036a58215d83a817af2dccfd57271fefb607c590ccb33a48b353c449fdoc Heodo