michaels-limo.com - suspicious URL scan, 16 Aug 2026
MalwareAnalyzer by Cyble scanned michaels-limo.com and returned a suspicious verdict (score 54). The page resolved to 107.180.117.129 on GoDaddy.com, LLC in US. The domain was registered 9126 days ago through GoDaddy.com, LLC. 1 domain and 1 IP were contacted. 13 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 16 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 54) · Confidence 60%
- Scanned URL:
https://michaels-limo.com/wp-content/plugins/formcraft/file-upload/server/content/files/1607ae6063add9---videnamavifuwapela.pdf - Domain: michaels-limo.com · IP: 107.180.117.129 · AS26496 · US
- Server: Apache
- HTTP status: 200 · application/pdf
- Registrar: GoDaddy.com, LLC · domain age 9126 days · created 2001-08-20
- Scan tier: fast · observed 2026-08-16 11:01:44 UTC
Malware communicating with this URL (13)
These samples were observed contacting or being served from michaels-limo.com. Each links to its full analysis.
- Phishing - referenced ·
4f754845d2250c5dfc528508852f7409· first seen 2026-08-16 - Phishing - referenced ·
7955b4e771863b96880a6c05e2eb38f3· first seen 2026-08-16 - Phishing - referenced ·
9d2d422f61335fdd5e31ec3b5f2bf7b3· first seen 2026-08-16 - Phishing - referenced ·
eaaa0e3877c56a409a32070263c7dcf2· first seen 2026-08-16 - Phishing - referenced ·
d82d47a354b986d67e23cf858a2fd150· first seen 2026-08-15 - Phishing - referenced ·
50d91a802bf590c18cabd887f117b384· first seen 2026-08-15 - Phishing - referenced ·
c927369342973435b7ef4090c22b8786· first seen 2026-08-15 - Phishing - referenced ·
bda2df7fd383e84fa1d24a8858875654· first seen 2026-08-15 - Phishing - referenced ·
d6524de84ee0552eb29ff244449b9bd6· first seen 2026-08-15 - Phishing - referenced ·
5a50c0ba04feb7d1ff5466ab85fa168b· first seen 2026-08-15 - Phishing - referenced ·
63eb50c869c6d4ec8cfbcd9d20d6a3f7· first seen 2026-08-15 - Phishing - referenced ·
72195c0a662d359c851b4bcc432495a1· first seen 2026-08-13 - Phishing - referenced ·
f3e60027f2d4eed9647552859cd61682· first seen 2026-08-13
Antivirus & YARA (1 of 47 engines)
- ClamAV (daily) [av]: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0 (served file)
Why this verdict
- Antivirus/YARA detection in page content: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0
- File download routed to the malware sandbox (1607ae6063add9---videnamavifuwapela.pdf)
Detected technologies
- Apache
Contacted infrastructure
- 107.180.117.129 - AS26496 GoDaddy.com, LLC (United States)
Files served by this page
- 1607ae6063add9---videnamavifuwapela.pdf ·
a292c76501c163b993af966364ca747d
Observed indicators
- michaels-limo.com
- 107.180.117.129
- https://michaels-limo.com/wp-content/plugins/formcraft/file-upload/server/content/files/1607ae6063add9---videnamavifuwapela.pdf
Other scans of michaels-limo.com (2)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 20 Aug 2026 - suspicious ·
https://michaels-limo.com/wp-content/plugins/formcraft/file-upload/server/content/files/1606c7836eb9 - 13 Aug 2026 - suspicious ·
https://michaels-limo.com/wp-content/plugins/formcraft/file-upload/server/content/files/16079e64eaf0
Questions about michaels-limo.com
- Is michaels-limo.com safe?
- No. MalwareAnalyzer scanned michaels-limo.com on 16 Aug 2026 and returned a suspicious verdict with a score of 54 out of 100. Treat it as hostile until it is re-checked.
- What malware is associated with michaels-limo.com?
- 13 analysed samples communicate with this URL, including Phishing.
- How was michaels-limo.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of michaels-limo.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan