URLhaus Database

You are currently viewing the URLhaus database entry for http://milehighffa.com/LLC/FM28641690877SEJEGA/Aug-06-2018-24920289895/PZFI-JELJA which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:39509
URL: http://milehighffa.com/LLC/FM28641690877SEJEGA/Aug-06-2018-24920289895/PZFI-JELJA
URL Status:Offline
Host: milehighffa.com
Date added:2018-08-07 10:26:20 UTC
Last online:2018-09-08 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2018-08-07 10:35:36 UTC to abuse{at}godaddy[dot]com)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-08-08WIRE 6898K.docdoc c1269eb11d66d23490dd2867111ec609db4508b4333d50d59c7c81cb1864981aVirustotal results 37.93% Heodo
2018-08-08PAY 5QBYC Aug-08-2018.docdoc f3d7db8b01d9f896d9a2599f1f569570c3bcae9f2149bbf084af44d4493ec523n/a Heodo
2018-08-08WIRE 058534CXTMIFQ Aug-08-2018.docdoc bdd46d06590aecaebf00b82502cf56d7a54dbc45a736d723a76ad54c702836c2n/a Heodo
2018-08-08PAYMENT 02JO.docdoc 7719ffce9acd3c3db888dc04273188fb87b1b3e5e1fafc65e8e47f61f56b254an/a Heodo
2018-08-08ACH 305814HUWVDBM.docdoc ed1d3ca332d76f9181d652f9a3dec9506876838bbf5507ea766390826d3f84f8Virustotal results 36.67% Heodo
2018-08-08WIRE 09LRHUHC Aug-08-2018.docdoc ca90ee3ceb6b5f53c97e5621978522340940c65ff05b26248b391c4971d098a9Virustotal results 36.07% Heodo
2018-08-08WIRE 4443135B Aug-08-2018.docdoc c951fb64b0ed7843809010aa5ed4abf8442b8e7facdc8b5110e619e6b772e92fn/a Heodo
2018-08-08PAYMENT 4000AFGNQ Aug-08-2018.docdoc 6ac0e66ce6079eb7c77aefa7af63fbde6d61f4a4ab2d44b7fa92d9ae3e871cfbVirustotal results 33.90% Heodo
2018-08-08ACH 366FW Aug-08-2018.docdoc e1c6a8a81e869ed96d6afeafb3eca1ed05e0eadefe60f7e0d45358a26885f509Virustotal results 34.43% Heodo
2018-08-08WIRE 4966ZNHN.docdoc 27d52b898c7bb9ea40d794f476fc469d659ffdf978596d223f8ea150245bead0n/a Heodo
2018-08-08ACH 2111VZ Aug-08-2018.docdoc 465392907ac0de1068a5b4cf9019e7a5a6d2f4b65c301c261842d62c332a42fbVirustotal results 34.43% Heodo
2018-08-08ACH 89P.docdoc bf87014dea400afed26d6ed04b29b61703fc51a488e8def669cb1c209725f78fVirustotal results 31.15% Heodo
2018-08-07WIRE 924592FZSBTVAW.docdoc 4dda9e18a7ee5a88d9b18cce544dd6d47b818f953e4d2969b8787035ebbe8465Virustotal results 32.79% Heodo
2018-08-07PAYMENT 3168HITR Aug-08-2018.docdoc f83ed0b8740d63b8e020df41c168e9a535b3af5bc537c1a4a56871ed63470e54Virustotal results 32.79% Heodo
2018-08-07PAY 314397CXVQJPUU Aug-08-2018.docdoc 4803a9181557f13c4b8452f9776a2f585175ff9d687b26fc1ac8b8fb5009b68fVirustotal results 34.43% Heodo
2018-08-07PAYMENT 06NGZ Aug-07-2018.docdoc f77954325642d368e0c7d2ecf4a16210ad820bd61c633ba618023a5920aadb18Virustotal results 32.79% Heodo
2018-08-07PAYMENT 806369KEMAC.docdoc b77569cf7ba95d471ad9607ff2bab4ffce00de094b82b5811d428cc735fa85d5Virustotal results 31.03% Heodo
2018-08-07WIRE 4WNS.docdoc 132534ec9dd880715de5450666aee52b2e577c99d1d468851e04a025dc31520cVirustotal results 32.20% Heodo
2018-08-07ACH 1SD.docdoc e633b6c6918dbf42fb5ebe1879d34721ab885240a7578c7e07e0b2f423a25f20n/a Heodo
2018-08-07ACH 7712805PHWQG.docdoc d93f93e5b81ba74a4e035b11fb4129fad5a036ebd0547d818d90e0e9752716b9Virustotal results 32.79% Heodo
2018-08-07PAYMENT 250737L Aug-07-2018.docdoc c396aba7e670b85a29cf91c259bf858b6f9f59685eb93b01b3ae67ce91c0468bVirustotal results 30.00% Heodo