URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host jsya.co.kr.

Database Entry


Host: jsya.co.kr
Spamhaus DBL :Abused domain (malware) link
SURBL :Blacklisted
Quad9 :Not blocked
AdGuard :Blocked link
Firstseen:2019-03-14 20:14:59 UTC

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-12-30 20:33:15 125.134.74.228Not listedAS4766 KIXS-AS-KR Korea Telecom- KRyes
2019-03-14 20:15:04 211.221.32.244SBL449094AS4766 KIXS-AS-KR Korea Telecom- KRno

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsGSBReporter
2019-04-23 22:49:03http://jsya.co.kr/@eaDir/iGFE-yUBMaibuO7rUvM_EALOLBggQ-gxa/Onlinedoc emotet ext epoch1 heodo ext Clean@Cryptolaemus1
2019-04-16 22:09:09http://jsya.co.kr/@eaDir/bJKo-zIDYXFHVK2Ws88A_UsHxlzFa-gFM/Onlinedoc emotet ext epoch2 heodo ext Clean@Cryptolaemus1
2019-04-10 13:46:07http://jsya.co.kr/@eaDir/security/support/question/EN/04-...Onlineemotet ext heodo ext Clean@erdnuss
2019-03-14 20:15:04http://jsya.co.kr/@eaDir/trust.myacc.send.biz/Onlineemotet ext epoch1 heodo ext Clean@unixronin