Domain > bhi.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Whois

Property	Value
Name	Domain Admin
Organization	BHI Global, LLC
Email	domain-admin@black-hole.com
Address	7605 Corporate Way
Zip Code	55344
City	Eden Prairie
State	MN
Country	US
Phone	+1.6122082024
NameServer	ns2.bhi.com
Created	1991-06-19 04:00:00
Changed	2013-03-18 06:12:06
Expires	2019-06-18 00:00:00
Registrar	Moniker Online Servi

DNS Resolutions

Date	IP Address
2023-08-30	199.59.243.224 (ClassC)
2024-04-13	199.59.243.225 (ClassC)
2024-08-30	104.247.81.52 (ClassC)
2025-01-15	104.247.82.52 (ClassC)

HTTP/1.1 200 OKdate: Sun, 06 Aug 2023 15:24:54 GMTcontent-type: text/html; charsetutf-8content-length: 1026x-request-id: c67a40e9-fb90-4ef9-b563-6a0b879ddeedcache-control: no-store, max-age0accept-ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_DfidD2+rtxHm1SybaXNNGSt13rzjmkTcMuXXVjOkFxAiQjgJQWU++ex1DkW27GN9w6Mi3DmoEoC9ZG0HH7QTuw langen>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiYzY3YTQwZTktZmI5MC00ZWY5LWI1NjMtNmEwYjg3OWRkZWVkIiwicGFnZV90aW1lIjoxNjkxMzM1NDk0LCJwYWdlX3VybCI6Imh0dHA6Ly9iaGkuY29tLyIsInBhZ2VfbWV0aG9kIjoiR0VUIiwicGFnZV9yZXF1ZXN0Ijp7fSwicGFnZV9oZWFkZXJzIjp7InJlZmVyZXIiOlsiIl19LCJob3N0IjoiYmhpLmNvbSIsImlwIjoiNTIuNDAuMjM0LjEwNSJ9Cg;/script>script src/js/parking.2.106.5.js>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Sun, 06 Aug 2023 15:24:54 GMTContent-Type: text/html; charsetutf-8Content-Length: 1026X-Request-Id: 45bd5831-ba00-4c90-9d22-2e5011d76e7dCache-Control: no-store, max-age0Accept-Ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_DfidD2+rtxHm1SybaXNNGSt13rzjmkTcMuXXVjOkFxAiQjgJQWU++ex1DkW27GN9w6Mi3DmoEoC9ZG0HH7QTuw langen>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiNDViZDU4MzEtYmEwMC00YzkwLTlkMjItMmU1MDExZDc2ZTdkIiwicGFnZV90aW1lIjoxNjkxMzM1NDk1LCJwYWdlX3VybCI6Imh0dHBzOi8vYmhpLmNvbS8iLCJwYWdlX21ldGhvZCI6IkdFVCIsInBhZ2VfcmVxdWVzdCI6e30sInBhZ2VfaGVhZGVycyI6eyJyZWZlcmVyIjpbIiJdfSwiaG9zdCI6ImJoaS5jb20iLCJpcCI6IjUyLjQwLjIzNC4xMDUifQo;/script>script src/js/parking.2.106.5.js>/script>/body>/html>

Subdomains

Date	Domain	IP
NS2.BHI.COM	2024-01-13	199.59.243.225
ns2.bhi.com	2025-01-05	76.223.21.9
avupdate.bhi.com	2023-08-16	199.59.243.224
smtp-as.bhi.com	2015-06-03	216.185.192.32

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
2e568dcb408ed49a98f0fca23d157f40	[HW32.CDB.D876] [Heur.Win32.Veebee.1!O] [Worm.Vobfus.r4] [W32/Worm-AAEH.pf!2E568DCB408E] [Worm.Vobfus!d8HycLiwI7Y] [WS.Reputation.1] [Vobfus.QXEZ] [Trojan.Win32.Vobfus.cxbewb] [TrojWare.Win32.VB.ICOY] [Win32.HLLW.Autoruner2.11727] [Worm/Vobfus.erxc] [Mal/SillyFDC-AH] [Worm/Win32.Vobfus] [Worm.Vobfus.er.(kcloud)] [Worm:Win32/Vobfus.ZD] [TScope.Trojan.VB] [Trojan-Downloader.Win32.Beebone] [W32/Injector.VOX!tr] [Trojan.Win32.Injector.BBHU]

Domain > bhi.com

Is this malicious?

Files that talk to bhi.com

Whois

DNS Resolutions

Port 80

Port 443

Subdomains