URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 198.12.83.76 |
|---|---|
| Firstseen: | 2026-03-31 10:57:05 UTC |
| Total malware sites : | 5 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 5 (100%) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-03-31 10:57:10 | 198.12.83.76 | 198-12-83-76-host.colocrossing.com | Not listed | AS36352 AS-COLOCROSSING |  US | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2026-04-14 12:56:10 | http://198.12.83.76/29/img_172631.png | Offline | rat RemcosRAT  |  abuse_ch |
| 2026-04-14 08:10:16 | http://198.12.83.76/29/goodgirlformygirltobe.hta | Offline | RemcosRAT | abuse_ch |
| 2026-04-13 13:33:47 | http://198.12.83.76/55/ec/nicespeakingwithbetst... | Offline | hta opendir rat RemcosRAT | abuse_ch |
| 2026-04-13 13:30:33 | http://198.12.83.76/55/goodforbestthings.js | Offline | ascii js opendir rat RemcosRAT | abuse_ch |
| 2026-03-31 10:57:10 | http://198.12.83.76/img/optimized_MSI.png | Offline |  JAMESWT_WT |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-04-14 12:56:10 | 8b494f544986be84a536a726a42092d0c40fa6ea977ef3dbf789a27549838121 | unknown | ||
| 2026-04-14 08:10:15 | 589451cb37604823b4e83b230fa89c2cb991657b322aaa761011e1b39d67f1ac | unknown | RemcosRAT | |
| 2026-04-13 13:33:47 | 5b967d1bf886ea8bc900e66b55a8707e96ebee8bdb9720d55680209ffb9240ec | hta | RemcosRAT | |
| 2026-04-13 13:30:33 | 73557dc8233fcda24372d21242f53d9219cc3a608df731653e2145f8dbf6d11b | js | RemcosRAT | |
| 2026-03-31 10:57:09 | 95e6c6c13f65217f41c371abf6d03594b2bfed2259a1813bb4222fb2d3c32745 | unknown |