URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	jsrmach.com
Domain registrar:	Public Domain Registry
Domain registration date:	2008-11-15 04:34:23 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2023-03-14 05:57:09 UTC
Total malware sites :	9
Online malware sites :	0 (0%)
Offline Malware sites :	9 (100%)
A record(s) observed :	7

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-06-11 07:52:47	104.21.5.162		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2025-06-11 07:52:47	172.67.133.158		Not listed	AS13335 CLOUDFLARENET	n/a	yes
2025-04-27 12:22:15	122.155.21.150	cloud-linux-08.chaiyohosting.com	Not listed	AS9335 NTPCL-AS-AP	TH	no
2025-11-19 18:15:25	134.119.176.22		Not listed	AS29066 VELIANET-AS	FR	no
2025-11-20 04:46:31	134.119.176.27		Not listed	AS29066 VELIANET-AS	FR	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-04-16 01:05:12	http://jsrmach.com/wp-admin/locacem2.1.exe	Offline	32 exe Formbook	zbetcheckin
2023-04-14 15:13:12	http://jsrmach.com/wp-admin/dcrossw.exe	Offline	exe rat RemcosRAT	abuse_ch
2023-04-02 07:58:11	http://jsrmach.com/wp-admin/sarkof2.1.exe	Offline	AgentTesla exe	abuse_ch
2023-03-22 19:17:12	http://jsrmach.com/wp-admin/rocheleb4.1.exe	Offline	exe Formbook	abuse_ch
2023-03-16 04:45:08	http://jsrmach.com/wp-admin/macsplin3.1.exe	Offline	32 AveMariaRAT exe	zbetcheckin
2023-03-16 04:16:11	http://jsrmach.com/wp-admin/sekontary2.1.exe	Offline	32 AveMariaRAT exe	zbetcheckin
2023-03-15 15:55:16	http://jsrmach.com/wp-admin/parmashdy3.1.exe	Offline	exe Formbook	abuse_ch
2023-03-15 15:38:11	http://jsrmach.com/wp-admin/pankotro3.1.exe	Offline	AveMariaRAT exe rat	abuse_ch
2023-03-14 05:57:11	http://jsrmach.com/wp-admin/gcoder.exe	Offline	exe Formbook	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-04-16 01:05:12	b32ed7458086ae3a05007a54d6660b9ce6382bd82af78c2c56f856ea6f2d95a3	exe		Formbook
2023-04-14 15:13:11	678d3d4b1057a230e358c3b9b88eb2b5e7611e448427788cc6474ae9a0c19404	exe		RemcosRAT
2023-04-02 07:58:10	057aab2a096d3eb60389b2a679c5e328da91507d6bf3cf018152f36829bffe54	exe		AgentTesla
2023-03-22 19:17:11	85259a321d6b1d54bae58397546222f0cf4584467240f0cbcdb7445577b66510	exe		Formbook
2023-03-16 04:45:08	5a39f9dbd5c6cee8dce9d113c484d794045d72f3258e1959d34c14e673803260	exe		AveMariaRAT
2023-03-16 04:16:11	84cc7b5b7b1cd8448cf5529f493a6882016e75c85da54baa30e95fe32452f780	exe		AveMariaRAT
2023-03-15 15:55:16	c81c83ab1925106c70d6393edc0fcc117a4cb12ac96383ad28ceabe54c12fb4f	exe		Formbook
2023-03-15 15:38:11	92e54cb5fb1d4e2c874f09b5c10a617dc00d845970c094e426683d6989c5a182	exe		AveMariaRAT
2023-03-14 05:57:11	e2f96798a7d58ac8a06c39d4459336c8fddafec67fe12cda3c9d4e497702601f	exe		Formbook