Domain > www.uolhost.com.br

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to www.uolhost.com.br

MD5	A/V
a71649576b03f67b6c5630577df2e5da	[TrojanSpy.Bancos] [Adware] [Trojan/Spy.Delf.ozp] [Trojan.Win32.DownLoader5.kmxex] [not-a-virus:AdWare.Win32.BHO.aouj] [Adware.BHO!iYfpqtdANcg] [UnclassifiedMalware] [Trojan.DownLoader5.44031] [TR/Zusy.378.2] [Adware/BHO.dmz] [TrojanSpy:Win32/Banker.AFJ] [AdWare.BHO.aotq] [Trojan.Spy.Bancos!446E] [Trojan-Spy.Win32.Bancos] [W32/Banker.B!tr.pws] [PSW.Banker6.QZL]
4c81c2c586c03d2b4b560abd750e142d	[Trojan.Banker] [Trojan/Downloader.VB.ahdj] [Trojan.Win32.VB.dykte] [TROJ_DLVB.SMII] [TrojWare.Win32.TrojanDownloader.VB.PMEA] [Trojan.DownLoad3.25721] [Win32.TrojDownloader.VB.ah.(kcloud)] [Trojan:Win32/VB.AFO] [Trojan-Downloader.Win32.VB] [W32/VB.ACWE!tr.dldr] [PSW.Banker5.CCUS]
0016f0c3e68d4f9917bcf95beb2ca27c	[W32.Clodb3b.Trojan.ed4a] [Trojan.Spy.Banker.WG] [Trojan/W32.Packer.157184.I] [Trojan.Pakes.anb] [PWS-Banker] [Trojan/Spy.Banker.wg] [Trojan.Win32.Dadobra.bjzznq] [W32/Trojan.ABL] [Downloader] [Banker.FWR] [TROJ_DLOADER.YT] [Trojan.Win32.Pakes.anb] [TrojWare.Win32.TrojanDownloader.Dadobra.ES] [Trojan.PWS.Banker.993] [TR/Dldr.Dadobra.FM] [TrojanDownloader.Dadobra.pa] [Trojan/Win32.Pakes] [Win32.Troj.Unknown.c.(kcloud)] [TrojanDownloader:Win32/Dadobra.BM] [Trojan.Win32.A.Pakes.157184.H] [Trojan/Win32.Dadobra] [W32/Trojan.QCWX-0481] [Virus.Win32.Heur.l] [TrojanDownloader.Dadobra] [Trj/Banker.AOA] [Win32/TrojanDownloader.Dadobra.ES] [Trojan.Win32.Pakes] [Win32/DH{Lg8lV04}] [Trojan.Win32.Pakes.Am] [HEU]
5bd1486244f8212356e3d6306c748f86	[W32.Clod7f2.Trojan.1089] [Trojan.PWS.Banker.599] [Trojan-Spy/W32.Banker.186880.D] [TrojanDownloader.Dadobra.am] [Trojan/Downloader.Dadobra.am] [Trojan.Win32.Dadobra.ddtd] [W32/Downloader.GRV] [Downloader] [Obfuscated_FA] [TROJ_DELF.KNM] [Trojan-Downloader.Win32.Dadobra.am] [Trojan.PWS.Banker.599] [Trojan.DL.Dadobra!d+rBTCK/aXk] [Trojan.PWS.Banker.599] [TrojWare.Win32.Downloader.Dadobra.A] [Trojan.PWS.Banker.599] [Trojan.PWS.Banker.599] [TROJ_DELF.KNM] [Mal/Behav-130] [TrojanDownloader.Dadobra.aad] [Trojan[Downloader]/Win32.Dadobra] [Win32.Troj.Dadobra.am.(kcloud)] [TrojanDownloader:Win32/Dadobra] [Trojan.Win32.A.Downloader.186880.BC[UPX]] [Trojan.PWS.Banker.599] [W32/Downloader.WLPR-3554] [Trojan/Win32.Dadobra] [TrojanDownloader.Delf] [PE:Trojan.DL.Dadobra.a]
35ea9b77d1fd7ce604a81369029950c3
87fbc46b399b66f5f6fdd71c9efc602d

Whois

Property	Value
Email	cert@cert.br

DNS Resolutions

Date	IP Address
2013-04-01	200.147.97.25 (ClassC)
2013-04-01	200.147.34.208 (ClassC)
2013-04-01	200.147.34.209 (ClassC)
2013-04-01	200.147.97.24 (ClassC)
2013-08-31	200.221.64.46 (ClassC)
2013-10-17	200.147.68.9 (ClassC)
2013-10-17	200.221.64.46 (ClassC)
2015-12-10	200.221.64.51 (ClassC)
2018-12-10	200.147.68.21 (ClassC)
2019-02-06	200.221.64.35 (ClassC)
2024-01-10	200.147.36.84 (ClassC)
2024-02-28	200.147.4.76 (ClassC)
2024-11-24	99.84.66.100 (ClassC)
2024-12-23	3.163.189.63 (ClassC)
2025-05-14	204.246.191.89 (ClassC)
2025-06-26	18.64.207.112 (ClassC)
2025-07-04	108.156.120.10 (ClassC)
2025-07-20	204.246.191.79 (ClassC)
2025-07-30	204.246.191.119 (ClassC)
2025-08-06	204.246.191.73 (ClassC)

Port 80

Subdomains

Date	Domain	IP
webmail.uolhost.com.br	2025-06-15	200.147.99.196
email.uolhost.com.br	2025-04-04	200.147.66.3
logocln.uolhost.com.br	2025-08-03	200.147.100.45
www.uolhost.com.br	2013-08-31	200.221.64.46

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]