Domain > centroin.com.br

More information on this domain is in AlienVault OTX

Files that talk to centroin.com.br

MD5	A/V
5ee74c52944265c5a84f878040e02331	[HW32.CDB.27c8] [Trojan.Win32.Hlux.cxadam] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dlza] [Backdoor.Hlux!t6Evi7JomQk] [TrojWare.Win32.Kryptik.CASU] [BackDoor.Slym.13362] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Mal/FakeAV-UF] [Trojan[Backdoor]/Win32.Hlux] [VirTool:Win32/Obfuscator.WT] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Backdoor.Win32.Hlux.AHTW] [Win32/Kryptik.CASL] [Win32.Backdoor.Hlux.Tbjb] [Backdoor.Win32.Kelihos] [W32/Hlux.CASL!tr.bdr]
535fcf3b756180a3b0d57d6cfd397ff1
1623be5a046aa215162665c5067332e0	[HW32.CDB.Db63] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [Trojan-PSW.Win32.Tepfer.tybm] [Trojan.PWS.Tepfer!sA6n+JUlMF8] [UnclassifiedMalware] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [W32/Trojan.YSDP-3009] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt_s.GNC] [Trojan.Win32.InfoStealer.aRBP]
2625ca957f30c6fb439d6fb819b96e96	[HW32.CDB.0b76] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [Trojan.Win32.S.PSW-Tepfer.829456.AK] [UnclassifiedMalware] [Trojan.Packed.26581] [Win32.Malware!Drop] [Win32.Troj.Undef.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [W32/Trojan.ZDOX-3335] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BD!tr] [Crypt_s.GNC]
a480649c0695ca403c2650c2f5ec4796	[HW32.CDB.6149] [Packed.Win32.Katusha.1!O] [Trojan.FakeAV] [Kryptik.CCFN] [Win32/Kelihos.QbYCJQ] [Backdoor.Win32.Hlux.dqiv] [Backdoor.Hlux!zx6Z3QU4CJg] [Backdoor.Win32.Hlux.DUHE] [Trojan.Packed.26581] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [W32/Trojan.TGXU-8116] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.Backdoor.Hlux.Lmai] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.bCBCJ]
18e1ec2d3092fa3be2c970ce91ef31a0	[HW32.CDB.4548] [RDN/q2z-art6.s_318383!a] [Trojan.Win32.Slym.cxaqmr] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dnxw] [BackDoor.Slym.13348] [Mal/FakeAV-UF] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [W32/Hlux.BWUN!tr.bdr] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]
aa8bce86b54809bdebb6b9180fd28faa	[HW32.CDB.9ff1] [Backdoor.Kelihos] [Malware.Packer.OCD] [Trojan.PWS.Tepfer!tVAsqipwB5g] [Kryptik.CCFN] [Win32/Kelihos.UKQTbT] [Trojan-PSW.Win32.Tepfer.tokc] [Trojan.Win32.Kryptik.cvttkj] [Trojan.Win32.A.PSW-Tepfer.845328.DE] [Mal/Kelihos-A] [UnclassifiedMalware] [BackDoor.Slym.13304] [TR/Crypt.EPACK.53971] [Trojan[PSW]/Win32.Tepfer] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/FakeAv.BWUN!tr] [Crypt_s.GCT] [Trojan.Win32.InfoStealer.aNw] [Win32/Trojan.967]

DNS Resolutions

Date	IP Address
2014-07-16	200.225.63.219 (ClassC)
2024-11-05	209.208.78.42 (ClassC)

Port 443

HTTP/1.1 302 FoundDate: Wed, 22 May 2024 19:00:15 GMTServer: Apache/2.4.29 (Ubuntu)Set-Cookie: PHPSESSIDrn79h3d77g6hekvo2u5opgdkqv; path/Expires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store,

!DOCTYPE html>	html langpt-br>	head>		meta charsetutf-8>		meta http-equivX-UA-Compatible contentIEedge>		meta contentwidthdevice-width, initial-scale1, maximum-scale1, user-scalableyes nameviewport>		title>CentroIn/title>        link relshortcut icon hreffavicon.ico >        !-- FONTS -->		link hrefhttps://fonts.googleapis.com/css?familyRoboto relstylesheet typetext/css>		link hrefhttps://fonts.googleapis.com/css?familyLora:400,700,400italic,700italic relstylesheet typetext/css>		link hrefhttps://fonts.googleapis.com/css?familyMontserrat:400,700 relstylesheet typetext/css>		link hrefhttps://fonts.googleapis.com/css?familyPlay relstylesheet>		link hrefhttps://fonts.googleapis.com/css?familyPoiret+One relstylesheet>		link hrefhttps://fonts.googleapis.com/css?familyReem+Kufi relstylesheet>		link hrefhttps://fonts.googleapis.com/css?familyNova+Flat relstylesheet>        !-- RECAPTCHA v2 -->        script srchttps://www.google.com/recaptcha/api.js>/script>        !-- STYLESHEETS -->		link hrefhttps://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css relstylesheet integritysha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u crossoriginanonymous>			!-- HTML5 Shim and Respond.js for IE8 support -->		!--if lt IE 9>		script srchttps://oss.maxcdn.com/html5shiv/3.7.3/html5shiv.min.js>/script>		script srchttps://s3.amazonaws.com/nwapi/nwmatcher/nwmatcher-1.2.5-min.js>/script>		script srchttps://html5base.googlecode.com/svn-history/r38/trunk/js/selectivizr-1.0.3b.js>/script>		script srchttps://oss.maxcdn.com/libs/respond.js/1.4.2/respond.min.js>/script>		!endif-->		!--if gte IE 9>		style typetext/css>gradient {filter: none;}/style>		!endif-->        style>            /* minified animate.css */            .animated{-webkit-animation-duration:1s;animation-duration:1s;-webkit-animation-fill-mode:both;animation-fill-mode:both}.animated.infinite{-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.animated.hinge{-webkit-animation-duration:2s;animation-duration:2s}.animated.f

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > centroin.com.br

Is this malicious?

Files that talk to centroin.com.br

DNS Resolutions

Port 80

Port 443