URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: mygrocerbox.com
Domain registrar:Public Domain Registry -
Domain registration date:2020-11-19 22:58:24 UTC
Spamhaus DBL :Abused domain (malware)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Control D HaGeZi :Not blocked
Firstseen:2021-08-25 04:25:07 UTC
Total malware sites :2
Online malware sites :1 (50%)
Offline Malware sites :1 (50%)
Newest active malware site :2021-08-25 04:25:09 UTC
Oldest active malware site :2021-08-25 04:25:09 UTC (Age: 4 years, 9 months, 26 days, 12 hours, 16 minutes)
A record(s) observed :4

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-04-21 04:41:03 15.197.240.20acf3b736b777428f5.awsglobalaccelerator.comNot listedAS16509 AMAZON-02- USyes
2025-04-28 16:36:24 103.150.186.46Not listedAS133643 EWEBGURU-AS- USno
2021-08-25 04:25:09 162.251.80.17162-251-80-17.unifiedlayer.comNot listedAS46606 UNIFIEDLAYER-AS-1- USno

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-08-25 04:55:05https://mygrocerbox.com/poised.php?Offline JAMESWT_MHT
2021-08-25 04:25:09https://mygrocerbox.com/poised.phpOnlinedoc hancitor ext html Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-04-22 13:52:526dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023html