Domain > banking.hellobank.it

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-03-10	23.79.212.153 (ClassC)
2023-12-23	104.96.163.137 (ClassC)
2024-01-06	23.56.99.58 (ClassC)
2024-03-21	184.30.150.215 (ClassC)
2024-08-26	23.192.230.77 (ClassC)
2024-11-18	23.41.4.72 (ClassC)
2024-12-21	23.41.4.74 (ClassC)
2024-12-26	23.41.4.81 (ClassC)

HTTP/1.1 200 OKContent-Length: 1961Content-Type: text/htmlp3p: CPNON CUR OTPi OUR NOR UNICache-Control: no-cachetam-error-code: 0x00000000Pragma: no-cacheDate: Fri, 25 Aug 2023 23:16:15 GMTConnection:

!DOCTYPE html>HTML>	HEAD>		META HTTP-EQUIVPragma CONTENTno-cache>		META HTTP-EQUIVPragma-directive CONTENTno-cache>		META HTTP-EQUIVCache-Control CONTENTno-cache>		META HTTP-EQUIVcache-directive CONTENTno-cache>		META HTTP-EQUIVExpires CONTENT0>		script typetext/javascript src/local/jquery-1.9.1.min.js>/script>		script typetext/javascript src/local/jquery.cookie.js>/script>		SCRIPT LanguageJavaScript>      		// Functions      		function Right(str, n){         		if (n  0)            		return ;         		else if (n > String(str).length)            		return str;        		else {            		var iLen  String(str).length;           			 return String(str).substring(iLen, iLen - n);         		}      		}      		function log(msg){      			if(typeof window.console ! undefined && typeof window.console.info ! undefined){      				console.info(msg);      			}      		}     		// Variables      		var errorstring;      		var errorcode;      		var req/;          var loginPageURI  /it/login;      		var newuriroot/hb-login/form/login?requiredDAC4;  			log(errorstring   + errorstring);  			log(errorcode   + errorcode);  			log(requestedurl   + req);			// AUTHWAS error.			// Dont use the last 4 digits of ERROR_CODE macro, use ERROR instead !!!			if (errorstring.substring(0,22)  Unknown message number) {				var authwas_errorcode  Right(errorstring, 3);				log(authwas_errorcode   + authwas_errorcode)				window.location.href  newuriroot + &errorCode + authwas_errorcode;			}			else {  // INTERNAL error				if ( X ! X) {					window.location.href  newuriroot + &errorCode + errorcode;				}				else { // NO error					$.cookie(requiredDAC, 4, { path: /});					 window.top.location.href  loginPageURI;				}			}               /SCRIPT>   /HEAD>         BODY>/BODY>/HTML>

Subdomains

Date	Domain	IP
www.banking.hellobank.it	2023-12-23	23.192.230.143

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > banking.hellobank.it

Is this malicious?

DNS Resolutions

Port 443

Subdomains