URLhaus Database

You are currently viewing the URLhaus database entry for http://milehighffa.com/500TLSPIS/PAYROLL/Commercial which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:60122
URL: http://milehighffa.com/500TLSPIS/PAYROLL/Commercial
URL Status:Offline
Host: milehighffa.com
Date added:2018-09-25 05:05:06 UTC
Last online:2018-10-01 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: j00dan
Abuse complaint sent (?): Yes (2018-09-25 05:06:29 UTC to abuse{at}godaddy[dot]com)
Takedown time:6 days, 6 hours, 35 minutes Bad (down since 2018-10-01 11:41:58 UTC)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-09-26PAYROLL #49451OYO.docdoc d15d4c31a151fcc215c313a8f438f8b13e1bd28470609e66e2b6a44f710b7c3aVirustotal results 27.87% Heodo
2018-09-26SEP #593MWMQXQCH.docdoc efbaffd6fe68867534eaab637e7139d3823bb0c6f85cce39e3aec5f91060d15dn/a Heodo
2018-09-26PAY #9920QXW.docdoc f6070403e2cdc6e6970e48a9eebbb4d8110c885cf86760c5d722dc2650348d32n/a Heodo
2018-09-26PAY #23065EFESOK.docdoc f6c3709a39171eb8fc4c5bb19febbbce0f7e99914badad182e2ba629da016e37Virustotal results 27.12% Heodo
2018-09-26PAYMENT #07DCKQCDOU.docdoc 770ff0a81b80e8856e47edc41ddbd8706f95299aca56e07db43fcd9269cddab9Virustotal results 25.00% Heodo
2018-09-26PAYROLL #0687OJDAMSFA.docdoc 670b4cabc19e632907f7817268989bc392f432ac80526ec97345bc9b7a17e563Virustotal results 24.59% Heodo
2018-09-26SEP #57864NTBJR.docdoc e817365edf818b986e7ce64ffdf39b6d28996efe1a7f4c7f935b14e6cb2ef564n/a Heodo
2018-09-26PAYMENT #60717H.docdoc 4b662cb4d6a23b9f9cefeae5916507e7a4bef1c7018f4e2232bbe37059e09815n/a Heodo
2018-09-26PAYMENT #0967IMXTTXQ.docdoc 2adbb60c584b4a7e39d6b70cb1d8c46d239236814d048fe950665ec510d3fc9an/a Heodo
2018-09-26SEP #575CG.docdoc db2ba47fbe5f4ba86f6428069d4c4f6aabb270eb7edc8b810848016bddd62380Virustotal results 24.14% Heodo
2018-09-26PAYROLL #4YCAHF.docdoc ae1f0ba2a5b3e728112a6d2d90fac0971d86c58a46470e1faa9ca3bb7f1a89a9Virustotal results 35.00% Heodo
2018-09-26BIZ #50QUYAA.docdoc 580c61b5ae55fcb2e67d0df00131d48c415727e09780bbd3a26e078d6cf33d49n/a Heodo
2018-09-26SWIFT #3155RYF.docdoc 5c633f1305c3eb88d70c541d0a50cae810e991d91c213ff007c36ac532a2e49cn/a Heodo
2018-09-26PAY #3PAZ.docdoc a0cd9617fe6a559bc8c1060c5baa38c48b13c85e0ec4bb157637f69cc0c867c8n/a Heodo
2018-09-25BIZ #71YP.docdoc 0a188fb338563343842ee7c634f2241ebbaca28ee1630d9df43e6d27f8f765e2n/a Heodo
2018-09-25PAY #5GYPXJM.docdoc bf858761c298da7957e67f1f65e167c312d3e13cef3f89da7617aebb17875d38n/a Heodo
2018-09-25PAY #06HGNGVFKP.docdoc f9ea85d0bbcaa50b7725c8cd93bfdc8f6b1b6c741693dd541d8a1b9b3ee151e5Virustotal results 26.67% Heodo
2018-09-25PAY #472535DPMELN.docdoc e6048063142cbf76836ff584dead136ed7724ed97ab066bb97d9811a8282a6d3Virustotal results 28.81% Heodo
2018-09-25SWIFT #99993XZPVFKI.docdoc ad6910539d7a43efb2ded874a59dbbf5206fac6f450faa3db013adb9c7550590n/a Heodo
2018-09-25SEP #99DTXGLPZ.docdoc 6db563ccc931c797407071ce0c7ef73c881fcffa8c9fcfecb1519172964c3b93Virustotal results 23.33% Heodo
2018-09-25PAYROLL #8643DVLDPHQ.docdoc dd7cb23a85054f837254210fc2df865dfb7bcd9daf952ebfd125b045098a5edan/a Heodo
2018-09-25BIZ #793012ONGS.docdoc d7610008f1f0825a0d6e0eba01ac358d9f553c19db572c42622b2c2e520331a9n/a Heodo
2018-09-25SWIFT #0350FFTG.docdoc 7bc23335685fb4ab8955cde6aa243ce6a1b8171fb0e82c7e2ba659e3d9c13653n/a Heodo
2018-09-25SWIFT #2678XDGYPJGT.docdoc ca9fbd992b9db40347bba855fbd09115b91b05e1675e8bbe85632ff0d77b7c8eVirustotal results 31.15% Heodo
2018-09-25BIZ #2XWRNY.docdoc 3d6f7f78c0533aa5735cba924e05e94a6561e7cecd9d0fbdca4d6d5eaf062005n/a Heodo