L.S.
Re: https://urlhaus.abuse.ch/url/660405/ on IP, see: https://www.shodan.io/host/118.172.176.41
6 engines detect: https://www.virustotal.com/gui/url/850f603769bbf21b0dc682165e546d2b111b241345e780ccc67c036607bcb7e1/detection
Also see: https://scamalytics.com/ip/118.172.176.41 &
https://vulners.com/rst/RST:7CCC9BB6-0041-3A45-A211-8EBD315AF89F
polonus
Seems that the earlier posting is now being qualified by URLhaus as being historical.
So the original originating address has been cleansed of and is without malcode now apparently,
See: https://urlhaus.abuse.ch/url/660405/
This means that malcode can be rather shortlived on some racks, and intentional persistent malcode/malware is another issue alltogether.
polonus