URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	remenelectricals.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2019-03-01 01:50:02 UTC
Total malware sites :	13
Online malware sites :	0 (0%)
Offline Malware sites :	13 (100%)
A record(s) observed :	6

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-07-30 08:37:07	148.135.141.210		Not listed	AS47583 AS-HOSTINGER	IN	yes
2025-06-12 16:29:52	217.21.85.66		Not listed	AS47583 AS-HOSTINGER	IN	no
2025-04-27 08:18:14	103.89.45.51		Not listed	AS150044 MIEUXTECH-AS-IN	IN	no
2019-11-12 09:02:18	103.212.121.57	flash.herosite.pro	Not listed	AS135222 MWNASHIK-AS	IN	no
2019-06-13 14:42:12	103.108.220.2	server.enkloud.in	Not listed	AS133296 WEBWERKS-AS-IN	IN	no
2019-03-01 01:50:06	198.54.126.111	server53-1.web-hosting.com	Not listed	AS22612 NAMECHEAP-NET	US	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2019-03-18 11:35:04	http://remenelectricals.com/doc/P2.exe	Offline	exe Loki	abuse_ch
2019-03-18 11:34:05	http://remenelectricals.com/doc/tkcrypted.exe	Offline	exe HawkEye	abuse_ch
2019-03-18 08:01:11	http://remenelectricals.com/spect.co.in/u/007%2...	Offline	emotet exe	zbetcheckin
2019-03-18 06:17:13	http://remenelectricals.com/doc/BC1.exe	Offline	exe	abuse_ch
2019-03-18 06:17:05	http://remenelectricals.com/doc/FC1.exe	Offline	exe	abuse_ch
2019-03-13 01:00:13	http://remenelectricals.com/doc/slycrypted.exe	Offline	exe	zbetcheckin
2019-03-13 00:58:05	http://remenelectricals.com/doc/ifcrypted5.exe	Offline	exe	zbetcheckin
2019-03-12 19:38:07	http://remenelectricals.com/doc/bobcrypted1.exe	Offline		dvk01uk
2019-03-07 08:28:15	http://remenelectricals.com/doc/tkcrypt.exe	Offline		dvk01uk
2019-03-07 08:28:10	http://remenelectricals.com/doc/bobcrypted.exe	Offline	exe HawkEye keylogger	dvk01uk
2019-03-07 05:52:24	http://remenelectricals.com/doc/testexe.exe	Offline	exe HawkEye Loki	dvk01uk
2019-03-01 01:50:10	http://remenelectricals.com/doc/cctv.exe	Offline	emotet exe HawkEye keylogger payload stage2	shotgunner101
2019-03-01 01:50:06	http://remenelectricals.com/doc/doc.exe	Offline	exe HawkEye keylogger payload stage2	shotgunner101

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2019-05-09 22:00:45	0faeac48eb46ba14a387fb333cf41adb75dc6e99abea2f334d8bd6f58114dc18	exe
2019-05-09 20:25:32	d26613c20baa20c92258f7f359edde113e90cbc9e6eea5c3bfed47a699bca41c	exe
2019-05-09 19:54:36	84da79072777c7aa0fde92b5218cc68efd9ba95598a4d10c6173343c972e781e	exe
2019-05-09 19:29:16	ddca5fbb8e2a733851e981e8641430b5e15617cd88014c652672e211ee2747a6	exe
2019-05-09 15:09:38	076841da7938bc0f1029baed8b0f72e180138661f46521ad7628d6aebc4e1b01	exe
2019-04-13 07:40:44	0053ac263769a01f4cb609c0d9604965cef0696f22f4a28aa137893c6717d178	exe
2019-03-18 11:35:04	b0f39235a850657fbfbc528c5387943e8f4edd7867cfe0447610d71436b14157	exe	Loki
2019-03-18 11:34:05	b6e788666a29a323c394c1f34fa2c9965dcdd061d7a14a90152e0e4fa7740272	exe	HawkEye
2019-03-18 08:01:11	e98f4dbfc2c5bfe7d4f8f4a21bcab3a4f8b0a577c1f25b417371b9047eba6e66	exe	Emotet
2019-03-18 06:17:13	9a532e661cb26bb378398054833bb3f651b70116fb09c1a33ab37f3a4015c08c	exe
2019-03-18 06:17:05	58ee50cdefcc187ce88afc7ecbe852946bcac4da013cb9f70bc86428bc1c38f4	exe
2019-03-13 01:00:13	becae163b3aebb08e6d0791f2a61cbe3237396de09227ce23ef4ac5be0699c38	exe
2019-03-13 00:58:05	ffba654b4866244700bb17993eee63f3a9439ffd40e6ac7ae77cc1ccd685c284	exe
2019-03-12 19:38:07	ffc18bfc45608505c5a3a9777f675e52818d794286953ceb3cdace93179ca7d8	exe
2019-03-07 08:28:15	447f6d1dc4404e993f92d1abd074be35933bf2fdafce8c13d3c75183fe82d609	exe
2019-03-07 08:28:08	6c473236d3965a7767f0380a09f9c8dacdb1c988c77e2feed774b161edaad942	exe
2019-03-07 05:52:24	636fef597c46293b0a5ae0e734cf881e801adf9d2f565b98fe764e25e3e80778	exe	Loki
2019-03-01 01:50:10	e98f4dbfc2c5bfe7d4f8f4a21bcab3a4f8b0a577c1f25b417371b9047eba6e66	exe	Emotet
2019-03-01 01:50:05	0432d8f8f5493463e21e63bec2775b0768883427a3c304ed5c654295fe194f54	exe