DomainMediumSignal 41/100
bancohost.com.br
First Seen
Jul 16, 2022
Last Seen
Jun 8, 2026
Found in 4 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
41%
Signal Score
41 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
4 reports41% confidence
4
Source reports
41%
Confidence score
Category tags
account discoveryaccount profilingaccount takeoveractive scanattachment basedattachment based attackattachment based phishingattack vectorbecbec attackbec phishingbrand impersonationbrute forcebusiness email compromisecommunication protocolcredential accesscredential harvestingcredential phishingcredential stuffingcredential theftcredential_harvestingcredential_phishingdata exfiltrationdata store exposureexploitation activityfinancefraudhttp scannerhttpsidentity & access exploitationindicatorinfrastructure acquisitionreconnaissanceinitial accessinjection activitylinklink injectionlink manipulationlink redirectionmalicious attachmentmalicious linkmalicious linksmalicious softwaremalicious urlsmalicious_attachmentmalicious_urlmalwaremalware deliverymalware distributionmalware phishingnetworkphishingphishing activityphishing attackphishing indicatorsphishing-databaseprocess injectionransomwareresearchedscamscams & fraudsecurity awarenesssecurity operationssmtpsocial engineeringspearphishingt1036t1055t1071.001t1078t1078.003t1078.004t1189t1190t1192t1204t1204.001t1204.002t1486t1499.002t1534t1535t1552t1565t1566t1566.001t1566.002t1566.003t1566.004t1567t1567.001t1587.001t1590.001t1598t1598.003threat actorthreat detectionthreat indicatorsthreat intelligencethreat_intelligencetor nodeweb securityweb trafficwebsite phishing
Activity Timeline
Jun 8Jun 8
Threat Activity Heatmap
· Peak: 2026-06-08LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
41
SIGNAL
Signal Score
41%
Confidence
4
Reports
First seenJul 16, 2022
Last seenJun 8, 2026
VirusTotal
Not checked
WHOIS
- description
- LTNA Cyber provides additional enrichment for domain and URL indicators, including RIR and DNS intelligence, domain registration context, routing verification, BGP stream visibility, and GeoIP/ISP attribution. Learn more: https://ltna.com.au/cyber
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 3 years ago · Last seen 6 days ago
Appeared in 4 threat reports