URLhaus Database

You are currently viewing the URLhaus database entry for http://milehighffa.com/5IFILE/DR68442613197SPOP/49846799/FS-XTTIU-Aug-09-2018 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:40508
URL: http://milehighffa.com/5IFILE/DR68442613197SPOP/49846799/FS-XTTIU-Aug-09-2018
URL Status:Offline
Host: milehighffa.com
Date added:2018-08-09 06:49:47 UTC
Last online:2018-09-08 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2018-08-09 07:01:29 UTC to abuse{at}godaddy[dot]com)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-08-10WIRE 9875953Z.docdoc 59ba13c32b075eff6494c44cd8245823fc1a09ea501f2104c7fe4dd78d2a5806Virustotal results 32.20% Heodo
2018-08-10PAY 745825FFZJD Aug-10-2018.docdoc be067a5bb420931e608a60872fe4cf7f94009e0bfeeffbbeda1fe556ed0dd071Virustotal results 35.00% Heodo
2018-08-10PAY 9FPI.docdoc 540464f34d0cfc260606385b02b9f9060b8cc1fd6411511fe997d8daf16490c0n/a Heodo
2018-08-10ACH 800CT Aug-10-2018.docdoc 8679469288439887ca42ffebb82bda8f26cf82f70cd00941ca54703307842b79Virustotal results 35.00% Heodo
2018-08-10PAYMENT 583FCZZXZR.docdoc f0bf639da101f2a263b164a6eba4b6da81e7665ad82a0b33f6f360fc74babcd1Virustotal results 35.00% Heodo
2018-08-10PAYMENT 63550LZQZUFWE.docdoc 6a9b3661f52200da3d02070b646874fdde1902a5bd2a22dccb90ddc21d8df0ccVirustotal results 35.00% Heodo
2018-08-10PAY 6412PPYDMEC.docdoc aea801f386a57a8b1bc1ec560cac259455cf1de3fbece36ab27ab54cba4805c7Virustotal results 36.67% Heodo
2018-08-10PAY 708SCU.docdoc 37c08bc14f578f0b19f992648c113e46dc49e0ad1ddc9cd2e63dfb9242fe151cVirustotal results 36.67% Heodo
2018-08-10PAY 04839ETT.docdoc fc368060fb4946b073b55e56d495e7ab249dbdabbc8f7cd809b55089c9854feaVirustotal results 33.90% Heodo
2018-08-10ACH 91ZLZQCIJM.docdoc f23147b0d5a9cae49c26d00b85809a3391ffbe0bb2366e3f38397ad31084e29cVirustotal results 33.33% Heodo
2018-08-10PAY 9538D Aug-10-2018.docdoc 96ac2e256739d1baefe78966e86480a6480c73588e1948a1efe5f944bf1ef847Virustotal results 30.00% Heodo
2018-08-10PAYMENT 4100LGHNS.docdoc e2423145f3ce13deaf5f3f3407c926e4a08752c8d0d61e4ee18288314dbc77a9n/a Heodo
2018-08-09WIRE 72511OVENASQA Aug-09-2018.docdoc cfa7724adc8ed5123e38607f34fbbd7bbdeb531ff1456b0733070f15c2ab1217n/a Heodo
2018-08-09WIRE 30WM.docdoc da69c0df6a11eab120671b1c93d08b3afada374c4f2246382a9b90304552888an/a Heodo
2018-08-09ACH 3623266IT.docdoc f9074f28aaa45903dad08e615cd836241f83bf7a43bf500c8a09785eb774e547Virustotal results 31.67% Heodo
2018-08-09PAYMENT 78563PQHWS Aug-09-2018.docdoc fde9fe137f4cef20e171def30b5a72122b9278ac4cd94f020b293da84028dcfbn/a Heodo
2018-08-09ACH 1872527U Aug-09-2018.docdoc 4234d1c86ec274f439ff4948c531fc4ba9f1e78a0bade4ead82da90bd3272fa1Virustotal results 39.34% Heodo
2018-08-09WIRE 327WFLDMN.docdoc 310a2eee356a3bd699e2ece7fb399d0c05182b762eaeebe326ddfdfabab9b0dcVirustotal results 39.34% Heodo