Domain > citibanamexlibraplus.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-08-26	18.64.236.94 (ClassC)
2022-10-29	18.160.60.120 (ClassC)
2023-10-13	3.162.3.102 (ClassC)
2023-10-13	3.162.3.30 (ClassC)
2024-08-20	3.166.160.6 (ClassC)
2024-09-24	204.246.191.116 (ClassC)
2025-01-15	3.160.5.23 (ClassC)
2025-01-15	3.160.5.118 (ClassC)
2025-01-21	204.246.191.15 (ClassC)
2025-02-11	13.224.14.103 (ClassC)
2025-02-28	18.65.229.77 (ClassC)
2025-03-29	204.246.191.128 (ClassC)
2025-08-17	18.161.6.92 (ClassC)
2025-10-21	3.169.173.61 (ClassC)
2026-01-03	3.169.173.22 (ClassC)

HTTP/1.1 200 OKContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveDate: Tue, 24 Sep 2024 20:36:20 GMTServer: ApacheStrict-Transport-Security: max-age63072000; include

!DOCTYPE html>html langes>head>  meta http-equivContent-Type contenttext/html; charsetutf-8;IEedge/>  meta nameviewport contentwidthdevice-width, user-scalableno>	title>Libra Plus/title>			!-- Global site tag (gtag.js) - Google Analytics -->		script async srchttps://www.googletagmanager.com/gtag/js?idUA-171435100-9>/script>		script>		window.dataLayer  window.dataLayer || ;		function gtag(){dataLayer.push(arguments);}		gtag(js, new Date());		gtag(config, UA-171435100-9);		/script>			!-- Global site tag (gtag.js) - Google Analytics -->			script async srchttps://www.googletagmanager.com/gtag/js?idG-BXMDX3XPZ7>/script>		script>		window.dataLayer  window.dataLayer || ;		function gtag(){dataLayer.push(arguments);}		gtag(js, new Date());		gtag(config, G-BXMDX3XPZ7);		/script>		link relstylesheet typetext/css hrefcss/bootstrap.min.css>link relstylesheet typetext/css hrefcss/index.css?v1.0>link relstylesheet typetext/css hrefcss/generales.css?v1.0>script srchttps://www.google.com/recaptcha/api.js async defer>/script>/head>body>      style typetext/css>  .BACKGROUND {    width: 100%;    height: 50px;    margin: 0 0 0px;    padding: 10px 60px 14px;    background-color: #056dae;  } /style>script>  var urlInicio  https://www.citibanamexlibra.com/;/script>div classBACKGROUND>  a classcursor idinicio href/>    img src./img/citi-libra.png idbrand classimg-footer >  /a>/div>div classd-block d-sm-none d-sm-block d-md-none>	nav classnavbar navbar-light bg-light shadow>		span classnavbar-brand back-form font-weight-bold float-left col-7>Resumen/span>	    			h6 classback-form font-weight-bold float-right>$218.00.°°br>small classfont-weight-bold>mensuales br> I.V.A incluido*/small>/h6>				button classnavbar-toggler typebutton data-togglecollapse data-target#navbarNav aria-controlsnavbarNav aria-expandedfalse aria-labelToggle navigation>			span classback-form font-weight-bold>>/span>		/button>		div classcollapse navbar-collapse idnavbarNav>			ul classnavbar-nav>				li classnav-item active>					div classresumen>						span classtext-mu

Subdomains

Date	Domain	IP
www.citibanamexlibraplus.com	2025-03-02	204.246.191.116

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > citibanamexlibraplus.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains