*.mybluehost.me

Phishing C&C Download Exfiltration

Attackers can use a customized subdomain of mybluehost.me to host their phishing websites.

Attackers can use a customized subdomain of mybluehost.me as their C&C server.

Attackers can add upload functionalities hosted on *.mybluehost.me and exfiltrate data on there.

Malicious tools can be stored on *.mybluehost.me and downloaded when required.

https://www.joesandbox.com/analysis/302028/0/html