URLhaus Database

You are currently viewing the URLhaus database entry for http://milehighffa.com/0GB/com/Personal which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:49407
URL: http://milehighffa.com/0GB/com/Personal
URL Status:Offline
Host: milehighffa.com
Date added:2018-08-30 06:37:32 UTC
Last online:2018-09-14 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2018-09-07 11:40:50 UTC to abuse{at}godaddy[dot]com)
Takedown time:7 days, 9 hours, 27 minutes Bad (down since 2018-09-14 21:08:24 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-08-31BIZ #907PA.docdoc a0e641a4d4a7b640e5b3da4a1496d6ed72e979ced7af5ec88b0fe6649888f05aVirustotal results 33.90% Heodo
2018-08-31PAYROLL #5969XOOFLY.docdoc 79765635b755992b9035560d4e00b550c3690c4a75d4e022b5998f11db4db738Virustotal results 42.62% Heodo
2018-08-31SWIFT #04795MYFSHSW.docdoc 8f42e8029ea6ab00d08e940285fb29ab142f427f8354b9452eb6878fc0e0937dn/a Heodo
2018-08-31BIZ #08TOXKPFG.docdoc 3a2ce04a9398657962a31a6e53e5762b754fd7bfd675a34ed40bf5817c15964cn/a Heodo
2018-08-31SWIFT #99CVSNXJW.docdoc 9c6afa6fb5fa3d6e7c07392a29b93c2c623f7628c9d420b1239e516df1187d51Virustotal results 36.07% Heodo
2018-08-31PAYROLL #6NGEKM.docdoc 10fc055776f5b4ecffaffb70217d201f1ae8ee8fb25b71cca582f58c98ae2a70Virustotal results 34.43% Heodo
2018-08-30SEP #974823SNO.docdoc 783b831fb2d080ecd97e5d4753632dc477556e9fb6d6059a00d1ae84b3b910ebVirustotal results 31.15% Heodo
2018-08-30BIZ #4LCAGZL.docdoc 176442914b0e63af7880d00c8a02febd3d9add954519c2f065f8bbaa5cdef838Virustotal results 32.79% Heodo
2018-08-30PAYMENT #91188LZQQ.docdoc 915d8e5c18b8ba4bdd5708485e5d7b834089fa8076655b341d5c621ed975e74eVirustotal results 32.79% Heodo
2018-08-30PAYROLL #331KPX.docdoc 499e366d052b2456375a48c68d71b5fab9013834be17ad8c4972b514d1f090d5Virustotal results 32.79% Heodo
2018-08-30PAY #7240238OQ.docdoc 2a0df4d0005fa84de6cd6ccbb337de5ec045e1e7a86bd79607089b3a2eb84723Virustotal results 32.20% Heodo
2018-08-30PAYROLL #0AHBMWDH.docdoc b25f7a6d85c230a92f0849263c5e734f43a00da97acbf8fa3ab0fafeb4489c78Virustotal results 33.90% Heodo
2018-08-30PAY #1836J.docdoc b1f78b1f323a98708f4b888cff40ab0ed3c86dd4b2ef7c43205ac95ad8cfc2b6Virustotal results 36.21% Heodo
2018-08-30SEP #2719782IJMOMYCG.docdoc 6acf75a4e27f2a8b0f505a991480274abffbfeb2a1b8e11f84189044dd589e31Virustotal results 33.90% Heodo
2018-08-30PAY #07364K.docdoc 4e40e4192ae7c3b24110cf3c1f5c754f60dcef4c345d1e1dd38abec9a73e82e1Virustotal results 35.00% Heodo
2018-08-30BIZ #4RLKBVDAG.docdoc 42528364bda9c560f2b4bdc7fb33fdebecf93c4f4bef316c8b15ce202a495b97Virustotal results 33.90% Heodo