URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 107.173.143.52 |
|---|---|
| Firstseen: | 2026-07-13 17:21:12 UTC |
| Total malware sites : | 4 |
| Online malware sites : | 3 (75%) |
| Offline Malware sites : | 1 (25%) |
| Newest active malware site : | 2026-07-13 21:15:27 UTC |
| Oldest active malware site : | 2026-07-13 17:21:15 UTC (Age: 1 day, 3 hours, 49 minutes) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-07-13 17:21:13 | 107.173.143.52 | 107-173-143-52-host.colocrossing.com | Not listed | AS36352 AS-COLOCROSSING |  US | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2026-07-13 21:15:27 | http://107.173.143.52/145/img_012558.png | Online | rat RemcosRAT  |  abuse_ch |
| 2026-07-13 17:21:15 | http://107.173.143.52/30/goodthingsarecoming.hta | Online | hta RemcosRAT | abuse_ch |
| 2026-07-13 17:21:15 | http://107.173.143.52/20/givinggoodchancestogiv... | Online | hta RemcosRAT | abuse_ch |
| 2026-07-13 17:21:13 | http://107.173.143.52/145/givingbestthingsbeter... | Offline | hta | abuse_ch |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-07-13 21:15:27 | 5a30deb6afad58c5f4a836cb0b3f5614447cb2248ad2f4cead7149af073867a7 | unknown | ||
| 2026-07-13 17:21:15 | 1164aa2fd96db37151aaf75eda4651078651791b82a21322b8849f2c62a7897f | hta | RemcosRAT | |
| 2026-07-13 17:21:15 | b168ee90804aa4d1788482fd76c7e41a032b6d0acddf2344a9dbf7363fa29601 | hta | RemcosRAT |