Domain > banking.hellobank.it

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-02-09	184.31.198.148 (ClassC)
2022-03-10	23.79.212.153 (ClassC)
2022-05-29	23.44.201.137 (ClassC)
2023-12-07	104.71.218.123 (ClassC)
2023-12-12	23.1.33.15 (ClassC)
2023-12-23	104.96.163.137 (ClassC)
2024-01-06	23.56.99.58 (ClassC)
2024-03-21	184.30.150.215 (ClassC)
2024-04-10	23.47.195.83 (ClassC)
2024-05-18	23.35.71.65 (ClassC)
2024-05-18	23.35.71.83 (ClassC)
2024-05-24	23.220.161.206 (ClassC)
2024-08-26	23.192.230.77 (ClassC)
2024-10-10	23.205.255.136 (ClassC)
2024-11-11	23.218.224.21 (ClassC)
2024-11-18	23.41.4.72 (ClassC)
2025-04-21	23.202.47.67 (ClassC)
2025-09-26	23.45.46.35 (ClassC)
2025-10-16	23.41.4.14 (ClassC)
2025-12-30	23.41.4.74 (ClassC)
2026-02-23	23.41.4.81 (ClassC)

HTTP/1.1 200 OKContent-Length: 1961Content-Type: text/htmlp3p: CPNON CUR OTPi OUR NOR UNICache-Control: no-cachetam-error-code: 0x00000000Pragma: no-cacheDate: Fri, 25 Aug 2023 23:16:15 GMTConnection:

!DOCTYPE html>HTML>	HEAD>		META HTTP-EQUIVPragma CONTENTno-cache>		META HTTP-EQUIVPragma-directive CONTENTno-cache>		META HTTP-EQUIVCache-Control CONTENTno-cache>		META HTTP-EQUIVcache-directive CONTENTno-cache>		META HTTP-EQUIVExpires CONTENT0>		script typetext/javascript src/local/jquery-1.9.1.min.js>/script>		script typetext/javascript src/local/jquery.cookie.js>/script>		SCRIPT LanguageJavaScript>      		// Functions      		function Right(str, n){         		if (n  0)            		return ;         		else if (n > String(str).length)            		return str;        		else {            		var iLen  String(str).length;           			 return String(str).substring(iLen, iLen - n);         		}      		}      		function log(msg){      			if(typeof window.console ! undefined && typeof window.console.info ! undefined){      				console.info(msg);      			}      		}     		// Variables      		var errorstring;      		var errorcode;      		var req/;          var loginPageURI  /it/login;      		var newuriroot/hb-login/form/login?requiredDAC4;  			log(errorstring   + errorstring);  			log(errorcode   + errorcode);  			log(requestedurl   + req);			// AUTHWAS error.			// Dont use the last 4 digits of ERROR_CODE macro, use ERROR instead !!!			if (errorstring.substring(0,22)  Unknown message number) {				var authwas_errorcode  Right(errorstring, 3);				log(authwas_errorcode   + authwas_errorcode)				window.location.href  newuriroot + &errorCode + authwas_errorcode;			}			else {  // INTERNAL error				if ( X ! X) {					window.location.href  newuriroot + &errorCode + errorcode;				}				else { // NO error					$.cookie(requiredDAC, 4, { path: /});					 window.top.location.href  loginPageURI;				}			}               /SCRIPT>   /HEAD>         BODY>/BODY>/HTML>

Subdomains

Date	Domain	IP
www.banking.hellobank.it	2023-12-23	23.192.230.143

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > banking.hellobank.it

Is this malicious?

DNS Resolutions

Port 443

Subdomains