https://static.s123-cdn-static.com/uploads/4472488/normal_5ff40a588f571.pdf
Classification: Malicious
https://static.s123-cdn-static.com/uploads/4472488/normal_5ff40a588f571.pdf is a phishing URL. 1,337 sightings from Threat Observatory, last seen 2026-10-18.
Current activity
- Offline — no longer resolving. Last online 2026-10-18 05:54:23.
- Malware distribution — This indicator is distributing malware.
- Phishing — Hosts a phishing site and is intrinsically malicious.
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in AR, CO and CR, across education, energy, manufacturing and retail networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Phishing.artifact | Maltiverse Threat Observatory | 2025-06-17 19:44:25 | 2026-10-18 05:21:17 | country_code:ar country_code:co country_code:cr industry:education-and-nonprofits industry:energy-and-utilities industry:manufacturing industry:retail-and-hospitality malicious-activity malware |
URL information
- Hostname
- static.s123-cdn-static.com
- Domain
- s123-cdn-static.com
- TLD
- com
- SHA-256
a510944fc388ace45016cfa578b1094ef28baf08ff8e816b6f69e1fba8ca9190- First indexed
- 2025-10-01 07:48:59
- Last updated
- 2026-10-18 05:54:23
- Last online
- 2026-10-18 05:54:23