Help RSS API Feed Maltego Contact                        

Domain > ubs.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.
More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to ubs.com
MD5A/V
d42c1a59b111316f7481770349e653db[HW32.CDB.87f3] [Malware.Packer.OCD]
db5b440f6419090cd9567f3b33fd3ced[Malware.Packer.HGX1] [BackDoor.SlymENT.1498] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.AXUE!tr]
833009a54c295a72ad64ab0941f482fe[Suspicious.Cloud.5] [Kryptik.CCFN] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [TR/Crypt.EPACK.9220] [Heuristic.BehavesLike.Win32.Suspicious-BAY.K] [Mal/FakeAV-UF] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GIF] [Trojan.Win32.Kryptik.BZOO]
b36385662ebdaf40bc3d28f90b6a4751[Spyware.Zbot.USBV] [Trojan] [BackDoor.SlymENT.1498] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Foreign]
18e659efd6bd23972f0a9a6a9ecae920[HW32.CDB.9c4f] [Trojan.Win32.Kryptik.cxapgj] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dmyv] [Backdoor.Hlux!x5Q6ZTEiRSs] [BackDoor.Slym.13348] [Mal/FakeAV-UF] [Trojan[Backdoor]/Win32.Hlux] [VirTool:Win32/Obfuscator.WT] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Win32.SuspectCrc] [W32/Kryptik.BWUN!tr] [Crypt3.LQN] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]
709622547c3e4b44144047282940995b[HW32.CDB.9120] [Packed.Win32.Katusha.1!O] [Backdoor.Hlux!iLXsQOxcJ2A] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dprt] [TrojWare.Win32.Kryptik.CAUP] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CAXO] [Backdoor.Win32.Kelihos] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.AP]
c7bf064346fafe4fc55b43abcfe96b00[HW32.CDB.E6f3] [Backdoor.Kelihos.r3] [Backdoor.Hlux!zUFIktBYK3s] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djfw] [Trojan.Win32.S.PSW-Tepfer.835600.AM] [UnclassifiedMalware] [BackDoor.Slym.14049] [Mal/Kelihos-A] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [W32/Trojan.QQUO-1304] [Backdoor.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt3.HUC] [Trojan.Win32.Kryptik.BZIX]
1cc0cfa5485d814b67ace50cb0a5b100[HW32.CDB.E978] [Kryptik.CDQY] [UnclassifiedMalware] [Trojan.Packed.26527] [Backdoor:Win32/Kelihos] [W32/Trojan.KUPJ-3598] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GKU]
df902d85a5aebee35007be327e9f54d2[HW32.CDB.7c9b] [Malware.Packer.FFS] [Mal/FakeAV-UF] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Symmi]
1929530a1f2d6d48a87aac928220e460[HW32.CDB.4199] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cwwgjj] [Kryptik.CCFN] [Backdoor.Win32.Hlux.crc] [Backdoor.Hlux!GJ0f5FTmyog] [UnclassifiedMalware] [BackDoor.Slym.14056] [Heuristic.LooksLike.Win32.Suspicious.E] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Trojan:Win32/Sisron] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GJB] [Trojan.Win32.Kryptik.BZWV] [Win32/Trojan.e55]
165f5084043893cc35334b568d0f6ec0[HW32.CDB.73df] [Packed.Win32.Katusha.3!O] [Win32.Malware!Drop] [Backdoor.Hlux!tc7SLh6zR0c] [WS.Reputation.1] [Kryptik.CCFN] [UnclassifiedMalware] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CBNK] [Backdoor.Win32.Kelihos] [W32/Kryptik.BD!tr] [Crypt_s.GPC] [Backdoor.Win32.Hlux.aBgj] [Win32/Trojan.337]
37b9070bfbc74ee584b01de29d129911[HW32.CDB.Ec9a] [Heur.Trojan.Hlux]
2cea2302f3f5c4280a6990e4e1965a60[Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxceyl] [Kryptik.CCFN] [TROJ_SPNR.36DM14] [Backdoor.Win32.Hlux.djbj] [Backdoor.Hlux!4usFCOdA3iI] [Trojan.Win32.S.PSW-Tepfer.835600.DB] [Mal/Kelihos-A] [TrojWare.Win32.Kryptik.BLUU] [Trojan.PWS.Stealer.12891] [TR/Kryptik.oeons] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Win32.Kryptik.BZDO] [Trojan.Crypt_s] [W32/Hlux.BZDO!tr.bdr] [Crypt_s.GGV] [Win32/Trojan.fec]
1be1d71fb76a46afa15fc4ee16ac1d11[HW32.CDB.39c9] [Backdoor.Hlux.r3] [RDN/q2z-art6.s_318383!a] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dnzz] [Backdoor.Hlux!eaxFLDBT/AM] [Mal/FakeAV-UF] [BackDoor.Slym.13348] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[Backdoor]/Win32.Hlux] [VirTool:Win32/Obfuscator.WT] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Trojan.Win32.Kryptik.CASL]
5ee74c52944265c5a84f878040e02331[HW32.CDB.27c8] [Trojan.Win32.Hlux.cxadam] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dlza] [Backdoor.Hlux!t6Evi7JomQk] [TrojWare.Win32.Kryptik.CASU] [BackDoor.Slym.13362] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Mal/FakeAV-UF] [Trojan[Backdoor]/Win32.Hlux] [VirTool:Win32/Obfuscator.WT] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Backdoor.Win32.Hlux.AHTW] [Win32/Kryptik.CASL] [Win32.Backdoor.Hlux.Tbjb] [Backdoor.Win32.Kelihos] [W32/Hlux.CASL!tr.bdr]
25cf73e0b67cf888331dfb7d5e7a1276[HW32.CDB.9123] [Backdoor.Hlux.r3] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dmxm] [Backdoor.Hlux!H8o7dSngIrQ] [Mal/FakeAV-UF] [UnclassifiedMalware] [BackDoor.Slym.13348] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Trojan.Crypt3] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GMK] [Trojan.Win32.Kryptik.CASL]
75147b8dd7796762a48bd315293f0817[FakeSecTool-FCI!75147B8DD779] [Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.BDPK!tr] [Crypt_s.EPS]
9178327bacccfcfecea87948acbfe510[HW32.CDB.7c44] [TrojanPSW.Tepfer.r3] [Trojan.Win32.Kryptik.cxaoho] [WS.Reputation.1] [Kryptik.CCFN] [Trojan-PSW.Win32.Tepfer.twuw] [Trojan.PWS.Tepfer!pez0E7sggU8] [Trojan.Packed.26544] [Heuristic.LooksLike.Win32.Suspicious.E] [Mal/FakeAV-UF] [Trojan[PSW]/Win32.Tepfer] [Trojan:Win32/Dynamer!ac] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Tepfer.CASU!tr.pws] [Crypt_s.GMK] [Trojan.Win32.Kryptik.CASU] [Win32/Trojan.e76]
4b93f892d9249b70508ee222e37ee1c6[HW32.CDB.E823] [TrojanPSW.Tepfer.r3] [Trojan.Win32.Kryptik.cxbvtz] [WS.Reputation.1] [Kryptik.CCFN] [Trojan-PSW.Win32.Tepfer.txbj] [Trojan.PWS.Tepfer!TcJrQOwJyhs] [Mal/FakeAV-UF] [BackDoor.Slym.13348] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[PSW]/Win32.Tepfer] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Win32.Kryptik.CAUP] [Trojan.Crypt_s] [W32/Tepfer.CAUP!tr.pws] [Crypt_s.GMK]
6502921b8928a37df0f0f412d10a7486[HW32.CDB.0650] [Malware.Packer.FFS] [Trojan/Win32.Symmi]

Whois
PropertyValue
Email hostmaster@ubs.com
NameServer MERCURY.UBS.COM
Created 1993-02-15 00:00:00
Changed 2012-09-21 00:00:00
Expires 2022-02-16 00:00:00
Registrar MARKMONITOR INC.

DNS Resolutions
DateIP Address
2014-03-24193.5.110.18 (ClassC)
2014-06-06216.219.78.177 (ClassC)
2014-06-24193.5.104.131 (ClassC)
2014-06-2480.74.134.185 (ClassC)
2014-06-25216.219.78.84 (ClassC)
2014-10-30193.5.104.211 (ClassC)
2014-11-05216.219.78.166 (ClassC)
2014-11-08194.116.197.156 (ClassC)
2014-11-1080.190.147.11 (ClassC)
2014-11-14216.219.78.214 (ClassC)
2014-11-18193.5.104.139 (ClassC)
2015-03-03193.5.105.142 (ClassC)
2015-03-03193.5.105.145 (ClassC)
2015-03-03216.219.78.173 (ClassC)
2015-03-03193.5.105.222 (ClassC)
2024-12-28193.134.111.71 (ClassC)

Port 80

Port 443

Subdomains
DateDomainIP
ebanking-de1.ubs.com2024-07-2294.154.166.62
mobile-ch1.ubs.com2024-10-1494.154.166.213
ebanking-ch1.ubs.com2024-11-0594.154.166.38
mobs-ch1.ubs.com2024-12-1894.154.164.79
access-ch1.ubs.com2024-11-1394.154.166.166
twint1.ubs.com2024-10-0694.154.164.99
ebanking-de2.ubs.com2024-04-2594.154.166.62
mobile-ch2.ubs.com2024-11-1394.154.166.213
ebanking-ch2.ubs.com2024-11-0594.154.166.39
twint2.ubs.com2024-05-1494.154.166.97
mobile-ch3.ubs.com2024-09-1394.154.164.213
ebanking-ch3.ubs.com2024-08-2094.154.164.39
mobp-ch3.ubs.com2024-09-1394.154.166.75
mobs-ch3.ubs.com2024-09-1394.154.166.79
access-ch3.ubs.com2024-11-1394.154.166.168
connect-ch3.ubs.com2024-09-1394.154.164.94
mobile-ch4.ubs.com2024-11-1394.154.166.215
ebanking-ch4.ubs.com2024-12-1494.154.164.38
mobp-ch4.ubs.com2024-12-2694.154.166.76
mokp-ch4.ubs.com2024-09-1394.154.164.134
mobs-ch4.ubs.com2024-01-0994.154.164.78
moks-ch4.ubs.com2024-07-0994.154.166.132
connect-ch4.ubs.com2024-09-1394.154.164.94
isga.ubs.com2024-11-25165.222.57.217
ols-alpha.ubs.com2024-11-25161.239.244.199
ols-beta.ubs.com2024-12-15161.239.244.199
keyinvest-za.ubs.com2024-12-26193.239.17.133
lsam.ibb.ubs.com2024-11-24193.134.111.71
emidas.ibb.ubs.com2024-10-14151.191.185.48
emidas-radianz.ibb.ubs.com2024-08-09151.191.185.112
myhub.ubs.com2024-09-1420.4.206.72
financialservicesinc.ubs.com2024-11-25161.239.82.205
dci-prod.ubs.com2024-09-2120.203.217.54
onesource.ubs.com2024-12-26161.239.82.230
keyinvest-de.ubs.com2024-11-26193.239.17.137
analytics.adviceadvantage.ubs.com2024-11-24104.16.184.227
clientmobile.ubs.com2024-12-19161.239.244.199
secure.ubs.com2024-12-1494.154.164.175
fuse.ubs.com2023-08-0454.220.27.245
zertifikate.ubs.com2024-11-16193.239.17.137
mag.ubs.com2024-12-08161.239.229.204
young.ubs.com2024-09-18212.71.109.234
safe-ch.ubs.com2024-04-2594.154.166.156
mobile-ch.ubs.com2024-09-1394.154.164.212
ebanking-ch.ubs.com2024-11-2194.154.166.38
moks-ch.ubs.com2024-01-0994.154.164.130
access-ch.ubs.com2024-09-2194.154.164.166
connect-ch.ubs.com2023-08-0494.154.164.93
keyinvest-ch.ubs.com2024-11-26193.239.17.136
financialservicesinc-ngni.ubs.com2024-11-25161.239.82.205
secure-events-ngni.ubs.com2024-11-25161.239.82.206
notification-global.ubs.com2024-12-2494.154.164.233
international.ubs.com2024-11-25161.239.244.199
ehc-onesourcesso-eol.ubs.com2024-11-25161.239.82.235
xyz-onesourcesso-eol.ubs.com2024-11-25161.239.82.234
onesourcedt-eol.ubs.com2024-11-25161.239.82.230
m.ubs.com2023-08-26104.100.74.203
medium.ubs.com2015-03-2054.231.12.212
keyinvest-ch-en.ubs.com2024-11-26193.239.17.136
p0-ebanking-ch1.falcon.ubs.com2024-09-1094.154.166.39
p7-ebanking-de2.falcon.ubs.com2024-04-2594.154.166.62
p0-ebanking-ch2.falcon.ubs.com2024-10-1494.154.166.39
p0-ebanking-ch3.falcon.ubs.com2024-09-1394.154.164.39
p0-twint3.falcon.ubs.com2024-08-0794.154.166.99
p0-ebanking-ch4.falcon.ubs.com2024-10-1094.154.164.38
f35.falcon.ubs.com2024-10-05151.191.185.67
ols-alpha.falcon.ubs.com2024-12-15161.239.244.199
p0-secure.falcon.ubs.com2024-11-2294.154.164.175
isgang.falcon.ubs.com2024-11-25165.222.181.209
magng.falcon.ubs.com2024-11-25161.239.229.204
p0-ebanking-ch.falcon.ubs.com2024-09-1294.154.166.39
emidas.falcon.ubs.com2024-10-05151.191.185.48
p0-ebics.falcon.ubs.com2024-12-0694.154.166.109
p0-chat.falcon.ubs.com2024-09-2894.154.166.201
neo.ubs.com2024-12-27151.191.185.67
uk1-neo.ubs.com2024-12-26139.149.27.67
us1-neo.ubs.com2024-12-14151.191.185.67
uk2-neo.ubs.com2024-12-26139.149.133.33
hkg-neo.ubs.com2024-12-14202.1.98.33
about-neo.ubs.com2015-05-1146.234.113.53
tky-neo.ubs.com2024-12-14202.1.67.11
uk1-eap.ubs.com2024-11-06139.149.27.67
ols-alpha-wmap.ubs.com2024-11-25161.239.244.199
ols-beta-wmap.ubs.com2024-12-26161.239.244.199
clientmobile-wmap.ubs.com2024-12-19161.239.244.199
international-wmap.ubs.com2024-12-26161.239.244.199
onlineservices-wmap.ubs.com2024-11-25161.239.244.199
financialwellness-wmap.ubs.com2024-12-19161.239.244.199
privatebank-us-wmap.ubs.com2024-12-26161.239.244.199
clientmobile-prov-wmap.ubs.com2024-12-19161.239.244.199
shop.ubs.com2023-08-2623.198.156.184
keyinvest-ch-fr.ubs.com2024-12-26193.239.17.136
keyinvest-fr.ubs.com2024-11-26193.239.17.148
scan2dmr.ubs.com2024-07-1020.203.216.106
ptr.ubs.com2024-12-08193.134.111.71
emidas.ubs.com2024-10-14151.191.185.48
jobs.ubs.com2023-11-0220.14.233.87
eujobs.ubs.com2024-12-2620.82.222.206
etracs.ubs.com2024-11-26193.239.17.135
ebics.ubs.com2024-12-0694.154.166.109
analytics.ubs.com2023-08-0463.140.36.121
onlineservices.ubs.com2024-12-27161.239.244.199
us-cashservices.ubs.com2024-04-2523.37.218.115
microsites.ubs.com2024-12-14212.71.109.234
stage-microsites.ubs.com2024-12-14212.71.109.234
financialwellness.ubs.com2024-12-26161.239.244.199
secure-events.ubs.com2024-12-25161.239.82.206
privatebank-us.ubs.com2024-11-25161.239.244.199
URANUS.UBS.COM2024-12-26156.115.14.70
chat.ubs.com2024-12-0694.154.166.201
onesourcedt.ubs.com2024-12-26161.239.82.230
keyinvest-it.ubs.com2024-12-16193.239.17.160
tt.ubs.com2024-10-0763.140.37.33
investments-au.ubs.com2014-12-0337.235.107.12
keyinvest-eu.ubs.com2024-11-26193.239.17.148
clientmobile-prov.ubs.com2024-12-19161.239.244.199
www.ubs.com2023-08-26104.100.74.203
MERCURY.UBS.COM2024-08-21155.145.206.75
mhm-proxy.ubs.com2024-09-1420.4.206.82
emidas-radianz.ubs.com2024-09-05151.191.185.112
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information