URLhaus Database

You are currently viewing the URLhaus database entry for http://milehighffa.com/LLC/FM28641690877SEJEGA/Aug-06-2018-24920289895/PZFI-JELJA/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:39731
URL: http://milehighffa.com/LLC/FM28641690877SEJEGA/Aug-06-2018-24920289895/PZFI-JELJA/
URL Status:Offline
Host: milehighffa.com
Date added:2018-08-08 05:06:50 UTC
Last online:2018-09-08 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: p5yb34m
Abuse complaint sent (?): Yes (2018-08-08 05:21:35 UTC to abuse{at}godaddy[dot]com)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-08-08WIRE 6898K.docdoc c1269eb11d66d23490dd2867111ec609db4508b4333d50d59c7c81cb1864981aVirustotal results 37.93% Heodo
2018-08-08WIRE 058534CXTMIFQ Aug-08-2018.docdoc bdd46d06590aecaebf00b82502cf56d7a54dbc45a736d723a76ad54c702836c2n/a Heodo
2018-08-08PAYMENT 02JO.docdoc 7719ffce9acd3c3db888dc04273188fb87b1b3e5e1fafc65e8e47f61f56b254aVirustotal results 36.07% Heodo
2018-08-08ACH 305814HUWVDBM.docdoc ed1d3ca332d76f9181d652f9a3dec9506876838bbf5507ea766390826d3f84f8Virustotal results 36.67% Heodo
2018-08-08PAYMENT 26WOXBU.docdoc d484083ae9cd61eb460c9dce2e09a805c15760e6b7f0f96f0863df24aef86b32Virustotal results 36.07% Heodo
2018-08-08WIRE 00814RBDNLYA Aug-08-2018.docdoc acdac580c302a29395abea36481e53b8cb623fc2787df3065c7b0a48abbf8b11Virustotal results 34.43% Heodo
2018-08-08ACH 06U Aug-08-2018.docdoc aedfdb4ee0961b847d3168b5cc8cb983a1b1f0ff75d79c648a2e82c4f227186aVirustotal results 34.43% Heodo
2018-08-08PAYMENT 4000AFGNQ Aug-08-2018.docdoc 6ac0e66ce6079eb7c77aefa7af63fbde6d61f4a4ab2d44b7fa92d9ae3e871cfbn/a Heodo
2018-08-08ACH 366FW Aug-08-2018.docdoc e1c6a8a81e869ed96d6afeafb3eca1ed05e0eadefe60f7e0d45358a26885f509Virustotal results 34.43% Heodo
2018-08-08PAYMENT 28ZBJFB Aug-08-2018.docdoc c648ba1bd831c5589e069ac9d1e10d6fdd51359d9f195878dc1d98a7110b74b0Virustotal results 35.59% Heodo