URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host nklj.com.

Database Entry

Spamhaus DBL:Not listed
SURBL:Not listed
Firstseen:2018-07-24 08:58:10 UTC

IP addresses

The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2018-10-07 10:08:24209.200.154.38a209-200-154-38.deploy.static.akamaitechnologies.comNot listedAS32787 PROLEXIC-TECHNOLOGIES-DDOS-MITIGATION-NETWORK - Akamai Technologies, Inc.- USno
2018-07-24 08:58:11216.219.81.3hdcp001.worldispnetwork.comNot listedAS19318 IS-AS-1 - Interserver, Inc- USyes

Malware URLs

The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2018-12-05 16:56:03http://nklj.com/EN_US/Transaction_details/12_18Offlinedoc emotet heodo Clean@Cryptolaemus1
2018-12-04 14:27:18http://nklj.com/Download/US_us/Open-Past-Due-OrdersOfflinedoc emotet heodo CleanAnonymous
2018-12-03 20:31:12http://nklj.com/Download/US_us/Open-Past-Due-Orders/Offlinedoc emotet heodo Clean@malware_traffic
2018-08-03 05:11:28http://nklj.com/default/En/Payment-with-a-new-addressOfflinedoc emotet heodo Clean@unixronin
2018-08-03 04:27:56http://nklj.com/default/En/Payment-with-a-new-address/Offlinedoc emotet heodo Clean@JRoosen
2018-07-24 08:58:11http://nklj.com/doc/US/Jul2018/Invoice-07-24-18Offlinedoc emotet Clean@ps66uk