Domain > uls-dc.org

More information on this domain is in AlienVault OTX

Files that talk to uls-dc.org

MD5	A/V
df5bbfd9d1be7d4dd6102fb3a56b54b6
2bc4baaef3768873bab72a25ef458261	[W32/Trojan.BVBE-0933] [Win32/Cutwail.OEdRTJB] [TrojanDownloader.Cutwail.r4] [Win32/Kryptik.CNZP] [W32/Cutwail.CNQX!tr.dldr] [Crypt3.AXSH] [Trojan-Downloader.Win32.Cutwail] [Trojan.Zbot.GL] [Downloader-FSH!2BC4BAAEF376] [Mal/Zbot-QL] [Downloader]
c31756e5b44214cecbfefb0000a878b7	[TrojanRansom.Crowti.B4] [Trojan.Cutwail!7hIl/YyoAoc] [W32/Trojan5.LAG] [Win32/Tnega.AWRU] [Trojan.Win32.Cutwail.edh] [Trojan.Win32.Cutwail.densll] [UnclassifiedMalware] [BehavesLike.Win32.Downloader.ch] [W32/Trojan.PMOS-9278] [TR/Crypt.ZPACK.96099] [TrojanDropper:Win32/Cutwail] [Trojan/Win32.Rootkit] [Trojan.Win32.Cutwail.aP] [Win32/Wigon.PH] [Win32.Trojan.Cutwail.Suxb] [Trojan.Win32.Cutwail] [W32/Kryptik.CKMF!tr] [SHeur4.CBNM] [Trj/WLT.A]
29bc940ee9a3eac0149ed07dd5753710	[W32.AndromPlwbahC.Trojan] [TrojanDownloader.Cutwail.r3] [Trojan.Injector!WWqNbSPGUtU] [Backdoor.Trojan] [Cutwail.DCN] [TROJ_SPNV.01KP14] [Trojan.Win32.Cutwail.fal] [Win32.Trojan.Cutwail.Htmq] [UnclassifiedMalware] [BackDoor.Andromeda.559] [BehavesLike.Win32.Dropper.nh] [Troj/MSIL-AZF] [W32/Backdoor.DYFX-3160] [Trojan/Win32.Cutwail] [TrojanDownloader:Win32/Cutwail] [RDN/Spybot.bfr!o] [TScope.Trojan.MSIL] [Trj/Chgt.N] [Trojan.Win32.Cutwail] [MSIL/GLQ!tr] [MSIL5.BVOW] [Trojan.Win32.Cutwail.ATJx]
5034f7cd251b642da2f1618048867831	[W32/Trojan.KPUW-7406] [TR/Crypt.ZPACK.109013] [Win32/Cutwail.SUJETQC] [Trojan.Cutwail.r4] [Win32/Kryptik.CNFT] [W32/Kryptik.CNFT!tr] [Crypt3.AVXJ] [Trojan.Win32.Cutwail] [Spyware.Password] [RDN/Downloader.a!to] [Mal/Wonton-AK]
de4219ca15f2a7063a52be4c35d85ee4	[W32/S-ca7f2159!Eldorado] [Win32/Tnega.AVUE] [Win32/Wigon.PH] [W32/Wigon.QAH!tr] [SHeur4.CBKD] [Trojan-Dropper.Win32.Cutwail] [Trojan.Win32.Cutwail.dzv] [Trojan.Krypt] [Downloader-FAKT!DE4219CA15F2] [Mal/Wonton-AK]
82d5e48e85c535f05f21f9db65509dce	[TR/Crypt.ZPACK.121625] [Win32/Kryptik.CNCB] [W32/Wigon.QBH!tr] [Crypt3.AWOE] [Trojan-PSW.Win32.Minari] [Trojan.Win32.Cutwail.ext] [Spyware.Password] [Downloader-FALF!82D5E48E85C5] [TrojanDownloader*Win32/Cutwail] [Mal/Wonton-AK]
6f9ffe65ca2d9d0b89fedcea82ec0010	[Trojan.Cutwail.r4] [Cutwail-FAGY!6F9FFE65CA2D] [Backdoor.Trojan] [Upatre.EP] [Win32/Cutwail.SAWfMVC] [Trojan.Win32.Cutwail.efg] [Trojan.Win32.Cutwail.dewakf] [Win32.Trojan.Cutwail.Wsup] [Mal/Zbot-QL] [Trojan.DownLoad.64914] [W32/Trojan.FHWO-0995] [TR/Cutwail.A.90] [Trojan/Win32.Cutwail] [Win32.Troj.Cutwail.e.(kcloud)] [Trojan.Cutwail] [Trojan.Win32.Cutwail.AQAS] [Trojan.Win32.Wigon] [W32/Cutwail.CKYL!tr] [SHeur4.CBUP] [Trj/Chgt.F]
1ca0abbf0a9d8c3ed52b6a29ae9ed9a7	[W32/Downloader.TKUG-6560] [TR/Dldr.Cutwail.150] [Win32/Kryptik.CNZP] [W32/Cutwail.DT!tr.dldr] [Trojan.Win32.Cutwail] [Downloader-FSH!1CA0ABBF0A9D] [TrojanDownloader*Win32/Cutwail] [Troj/DwnLdr-LYQ] [TrojanDownloader.Cutwail]
5a06654155acdc74a495a1cb2ce9d736	[W32/Trojan.FIJM-2685] [TR/Crypt.ZPACK.97536] [TrojanDownloader.Cutwail.rw4] [Win32/Kryptik.CNCB] [W32/Cutwail.CNCB!tr] [Crypt3.AWOE] [Trojan-PSW.Win32.Minari] [Trojan.Win32.Cutwail.euu] [Spyware.Password] [Downloader-FALF!5A06654155AC] [TrojanDownloader*Win32/Cutwail] [Mal/Wonton-AK]
c1c8613009aad40906aa8704742d307b	[W32/Downloader.XUIB-6449] [TR/Dldr.Cutwail.bh] [Win32/Kryptik.CMKK] [W32/Kryptik.CMKK!tr] [Inject2.AXKY] [Trojan.Win32.Cutwail] [Downloader-FSH!C1C8613009AA] [Mal/Wonton-AK]
d10f7dbfe313cc3da60a457cf916891e	[TR/Injector.113152] [Win32/Kryptik.CMXG] [W32/Wigon.QBH!tr] [Crypt3.AUOQ] [Trojan.Win32.Cutwail] [Trojan.Win32.Cutwail.esh] [TrojanDownloader*Win32/Cutwail]
7c886a5cb0461367c261e51d6fc31eac	[Trojan.Cutwail.r4] [Trojan.Win32.Cutwail.dewakf] [W32/Trojan.BOUS-8639] [WS.Reputation.1] [Upatre.EP] [Trojan.Win32.Cutwail.efg] [Trojan.Wigon!VhrZ/CJ7vyw] [Mal/Zbot-QL] [UnclassifiedMalware] [BehavesLike.Win32.PWSZbot.ch] [W32/Cutwail.AD] [TR/Cutwail.A.90] [Trojan/Win32.Cutwail] [Win32.Troj.Cutwail.e.(kcloud)] [Trj/Chgt.F] [Win32/Wigon.PH] [Win32.Trojan.Cutwail.Akfo] [Trojan.Win32.Wigon] [W32/Cutwail.EFG!tr] [SHeur4.CBUP] [Trojan.Win32.Cutwail.aaG]
43ecca93ef7a62d5d951d53aacf68ee8	[W32/S-aacdcc64!Eldorado] [TR/Graftor.155083] [Win32/Kryptik.CKYL] [W32/Kryptik.CQDN!tr] [Crypt3.ANZR] [Trojan.Win32.Wigon] [Downloader-FSH!43ECCA93EF7A] [Mal/Zbot-QL] [Trojan.Cutwail]
44a0ff964a217b4a1b6d52b7942532f4	[W32/Trojan.VWBV-1108] [TR/Crypt.Xpack.130725] [Win32/Kryptik.CMKK] [W32/Kryptik.CMKK!tr] [Crypt3.AREM] [Trojan.Win32.Cutwail] [Downloader-FALF!44A0FF964A21] [TrojanDownloader*Win32/Cutwail] [Mal/Wonton-AK]
6bac966dc202776020fe04927529487a	[Win32/Kryptik.CMHL] [W32/Wigon.QAH!tr] [Trojan.Win32.Cutwail] [Trojan.Win32.Cutwail.eqn] [Trojan.Downloader] [Downloader-FSH!6BAC966DC202] [TrojanDownloader*Win32/Cutwail] [Mal/Zbot-QL]
8727ef66804b351d705f50c56a616980	[TR/Cutwail.11878414] [Win32/Kryptik.CNDC] [W32/Kryptik.CMKK!tr] [Crypt3.ASQN] [Trojan.Win32.Cutwail] [Trojan.Win32.Cutwail.erj] [Spyware.Password] [Downloader-FALF!8727EF66804B] [TrojanDownloader*Win32/Cutwail] [Mal/Zbot-QL]
9ab0a68d8ad9e102ccd7fd0a067ecd9d	[W32.HfsAutoA.BDEF] [Trojan.Crypt.NKN] [W32/Trojan3.MQR] [Backdoor.Win32.Androm.fptk] [Trojan.Win32.Andromeda.djycfa] [Virus.Win32.Heur.c] [PE:Malware.XPACK-HIE/Heur!1.9C48] [BackDoor.Andromeda.404] [BehavesLike.Win32.PWSZbot.cc] [Mal/VB-AOE] [W32/Trojan.MZKU-6435] [Trojan/Win32.Androm] [Trojan.Win32.Injector.bBQXM] [Backdoor.Win32.Androm] [VBCrypt.IOJ]
a5592d73d5fc0a06905bd30c1f9224c8	[W32/Trojan.KMAR-2500] [TR/Crypt.Xpack.97540] [Win32/Tnega.AWPB] [Trojan.Cutwail.r3] [Win32/Wigon.PH] [W32/Cutwail.ERN!tr] [Trojan.Win32.Cutwail] [Trojan.Win32.Cutwail.ern] [Trojan.Downloader] [Downloader-FALF!A5592D73D5FC] [TrojanDownloader*Win32/Cutwail] [Mal/Zbot-QL] [Backdoor.Trojan] [TROJ_CU.2F84C1F8]
90ba8b4cd89a5fd23bb0c3f17a759ba5	[Trojan.Inject.r3] [Trojan.Injector!xSxmY/oTY4I] [Trojan.Win32.Inject.tfmg] [Trojan.Win32.Inject.dhtgak] [Win32.Trojan.Inject.Hssg] [UnclassifiedMalware] [Trojan.DownLoad.64914] [Trojan.Inject.Win32.108354] [BehavesLike.Win32.Dropper.nh] [Troj/Msil-ANY] [W32/Trojan.GRSK-5893] [Trojan/Win32.Inject] [TrojanDownloader:Win32/Cutwail] [Win-Trojan/MDA.630F094C] [RDN/Spybot.bfr!o] [Trojan.Inject] [Trj/Chgt.J] [Evilware.Outbreak] [W32/Inject.TFMG!tr] [MSIL5.APAS] [Trojan.Win32.Inject.aJp] [Win32/Trojan.9d7]

Whois

Property	Value
Name	Cheryl White
Organization	ULS
Email	cwhite@uls-dc.org
Address	2201 I street
Zip Code	20002
City	washington
State	dc
Country	US
Phone	+1.2025474747
NameServer	ns2.domaindiscover.com
Created	2005-02-09 16:49:31
Changed	2014-01-27 21:29:58
Expires	2016-02-09 16:49:31
Registrar	TierraNet Inc. dba D

DNS Resolutions

Date	IP Address
2014-08-27	216.104.182.58 (ClassC)
2017-05-19	216.147.66.65 (ClassC)
2018-06-05	50.76.14.45 (ClassC)
2021-02-18	184.106.115.60 (ClassC)
2022-01-10	3.223.17.14 (ClassC)
2024-04-22	52.54.13.231 (ClassC)
2025-10-26	99.83.190.102 (ClassC)
2026-01-28	75.2.70.75 (ClassC)

Port 80

HTTP/1.1 200 OKCache-Control: privateContent-Type: text/html; charsetutf-8X-MiniProfiler-Ids: 9bf3a4d4-702b-4786-9eb5-e7c4a8e4d4d3Date: Tue, 23 Jul 2019 05:28:53 GMTContent-Length: 29263

!DOCTYPE HTML>html classno-js langen>head>    !-- Basic Page Needs   -->    meta http-equivContent-Type contenttext/html; charsetutf-8>    title>University Legal Services for the District of Columbia/title>    meta namedescription content>    meta namekeywords content>    meta nameauthor content>    !-- Mobile Specific Metas   -->    meta nameviewport contentwidthdevice-width, user-scalableno, initial-scale1.0, minimum-scale1.0, maximum-scale1.0>    meta nameformat-detection contenttelephoneno>    !-- CSS   -->    link href/css/bootstrap.css?v1 relstylesheet typetext/css>    link href/css/bootstrap-theme.css relstylesheet typetext/css>    link href/css/style.css?v3.9 relstylesheet />    link href/vendor/prettyphoto/css/prettyPhoto.css relstylesheet typetext/css>    link href/vendor/magnific-popup/magnific-popup.css relstylesheet typetext/css>    !-- MAGINIFIC LIGHTBOX -->    link href/vendor/rs-plugin/css/settings.css mediascreen relstylesheet typetext/css>    !-- REVOLUTION SLIDER -->    link href/vendor/rs-plugin/css/navstylechange.css mediascreen relstylesheet typetext/css>    !-- REVOLUTION SLIDER -->    !--if lte IE 9>link relstylesheet typetext/css href/css/ie.css mediascreen />!endif-->    link href/css/custom.css relstylesheet typetext/css>    !-- CUSTOM STYLESHEET FOR STYLING -->    !-- Color Style -->    link href/colors/color1.css?v1 relstylesheet typetext/css>     !-- SCRIPTS   -->    script src/js/modernizr.js>/script>    !-- Modernizr -->    /head>body>    !--if lt IE 7>	p classchromeframe>You are using an outdated browser. a hrefhttp://browsehappy.com/>Upgrade your browser today/a> or a hrefhttp://www.google.com/chromeframe/?redirecttrue>install Google Chrome Frame/a> to better experience this site./p>!endif-->    div classbody>        !-- Start Site Header -->        div classsite-header>            div classtop-header>                div classcontainer>                    div classrow>                        div classcol-md-9>                             h1 classlogo>                        a hre

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > uls-dc.org

Is this malicious?

Files that talk to uls-dc.org

Whois

DNS Resolutions

Port 80