520bhl.com
Classification: Malicious
520bhl.com is a malicious hostname. 252 sightings from Threat Observatory and Maltiverse (Malicious.PDF, Trojan.pdf), last seen 2026-10-07.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 12:39:02.
- Stores phishing content — Phishing resources are hosted here.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Compromised verdict | Maltiverse | 2026-10-07 08:28:30 | 2026-10-07 08:28:30 | compromised | |
| Malicious.PDF | Maltiverse Threat Observatory | 2025-07-26 02:21:34 | 2026-06-02 14:21:36 | ||
| Phishing.artifact | Maltiverse Threat Observatory | 2025-08-10 16:21:43 | 2026-06-02 14:21:36 | ||
| Phishing.artifact.pdf | Maltiverse Threat Observatory | 2025-08-02 07:21:38 | 2026-06-02 14:21:36 | ||
| Trojan.generic | Maltiverse Threat Observatory | 2025-07-29 16:21:37 | 2026-06-02 14:21:36 | ||
| Trojan.pdf | Maltiverse Threat Observatory | 2025-07-25 07:21:35 | 2026-06-02 14:21:36 | ||
| Trojan.phishing.pdf | Maltiverse Threat Observatory | 2025-08-04 07:21:38 | 2026-06-02 14:21:36 | ||
| Malicious behavior | Maltiverse Threat Observatory | 2026-01-16 18:21:39 | 2026-05-27 08:21:37 | ||
| Exploit.babaka.PDF | Maltiverse Threat Observatory | 2025-09-05 07:21:33 | 2026-05-06 07:21:40 | ||
| PDF.maliciousmalware | Maltiverse Threat Observatory | 2025-08-17 19:21:39 | 2026-05-06 07:21:40 |
IP addresses resolved by this hostname
- 162.241.24.114 (2026-10-17 12:39:02)
Whois information
- Domain
- 520bhl.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS1.BLUEHOST.COM, NS2.BLUEHOST.COM
- Registrant
- GoDaddy.com, LLC
- Contact email
- [email protected]
- Domain created
- 2018-02-01 23:06:28
- Domain expires
- 2027-02-01 23:06:28
- First indexed
- 2026-06-02 15:15:53
- Last updated
- 2026-10-17 12:39:02