URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	1eight1.com
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2018-09-12 14:40:20 UTC
Total malware sites :	10
Online malware sites :	0 (0%)
Offline Malware sites :	10 (100%)
A record(s) observed :	6

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-05-05 17:23:10	188.114.96.3		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2025-05-05 17:23:10	188.114.97.3		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2025-11-05 02:38:45	188.114.96.12		SBL687667	AS13335 CLOUDFLARENET	n/a	no
2025-11-05 02:38:45	188.114.97.12		SBL687666	AS13335 CLOUDFLARENET	n/a	no
2019-08-21 14:48:27	157.7.44.219	users017.vip.heteml.jp	Not listed	AS7506 MAINT-JPNIC	JP	no
2018-09-12 14:40:22	157.7.188.206		Not listed	AS7506 MAINT-JPNIC	JP	no

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2019-06-01 01:07:03	http://1eight1.com/3Wn/INC/nsTUWivSSHMXSqVxZlDJSdJ	Offline	doc	zbetcheckin
2019-05-31 23:37:04	http://1eight1.com/3Wn/INC/nsTUWivSSHMXSqVxZlDJ...	Offline	doc emotet epoch2 heodo	spamhaus
2018-11-19 19:38:03	http://1eight1.com/EN_US/Clients/09_18/	Offline	emotet heodo	cocaman
2018-10-01 09:10:29	http://1eight1.com/EN_US/Clients/09_18	Offline	doc emotet heodo	unixronin
2018-09-27 19:08:04	http://1eight1.com/FILE/En_us/Question/	Offline	doc heodo	zbetcheckin
2018-09-27 18:36:06	http://1eight1.com/FILE/En_us/Question	Offline	doc emotet heodo	unixronin
2018-09-19 10:39:02	http://1eight1.com/Facture/	Offline	doc heodo	zbetcheckin
2018-09-19 09:57:49	http://1eight1.com/Facture	Offline	doc emotet heodo	Anonymous
2018-09-13 05:33:07	http://1eight1.com/FILE/US_us/Overdue-payment/	Offline	doc emotet epoch2	Cryptolaemus1
2018-09-12 14:40:23	http://1eight1.com/FILE/US_us/Overdue-payment	Offline	doc emotet heodo	unixronin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2019-06-01 04:44:11	ef62880b29c9e9403633bfe2c0572d75e5d9ee3fa4fb698697dceb9efc99ec3d	doc	Heodo
2019-06-01 03:58:10	7c4cc9d295547a0cef91a556f42d21a5e87964fb2272c8a33fca00016e71ec4c	doc	Heodo
2019-06-01 03:43:45	bf032ea596d973c8333c4a7d4e7338cdb4276e3d2e8ae5046b8bfbac20941c92	doc	Heodo
2019-06-01 03:16:08	51b855cbe57d74b049f542899bba538e6a47f83b9d6e15e8e5f38cc758664f8b	doc
2019-06-01 02:44:12	545a4700f14d2cfd7f03499246dbb2738f5555f92ed45538f5301622f220c985	doc	Heodo
2019-06-01 02:17:09	f787bedcfbb4d4f2ac2507770741ea1ac63ea94e2ea432d464e3bbd23465798a	doc	Heodo
2019-06-01 01:30:11	84a66f8e7292ede26e286442de89b8a1fed1521c29552f9b8b1bc17da0d26e5f	doc	Heodo
2019-06-01 00:43:08	78f1f6d72541c029a695ff06e0b00368d8c2e76e40a24f220ae805149d55daeb	doc	Heodo
2019-06-01 00:25:10	bffe54938b6af06cb9d5792d99ed694370b373ca0aba791a5ba9b1028fbfbc92	doc	Heodo
2019-06-01 00:01:13	49682d6275f2860d0b97b984d63ccecf1268c44ab9a147ddf95662472cd9a538	doc	Heodo
2019-05-31 23:37:03	71bfba9498217d205555c3c7f0896f3930029f0ebc78a09e0ceb48cbbe8b2899	doc	Heodo
2018-10-01 09:10:29	c1940e2957fb9e958e292b15ebda7ee2c47216be582c3e63bc4d69d052c8afc8	doc	Heodo