Domain > bankingcollnew.hellobank.it

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-11-12	23.194.127.169 (ClassC)
2023-12-12	23.1.33.15 (ClassC)
2023-12-23	104.96.163.133 (ClassC)
2024-01-11	69.192.139.220 (ClassC)
2024-01-12	23.35.71.65 (ClassC)
2024-01-12	23.35.71.83 (ClassC)
2024-03-22	23.41.4.84 (ClassC)
2024-11-08	23.215.55.164 (ClassC)
2026-02-07	23.41.4.81 (ClassC)
2026-03-07	23.41.4.74 (ClassC)

HTTP/1.1 200 OKContent-Length: 1961Content-Type: text/htmlp3p: CPNON CUR OTPi OUR NOR UNICache-Control: no-cachetam-error-code: 0x00000000Pragma: no-cacheDate: Sat, 23 Dec 2023 23:11:04 GMTConnection:

!DOCTYPE html>HTML>	HEAD>		META HTTP-EQUIVPragma CONTENTno-cache>		META HTTP-EQUIVPragma-directive CONTENTno-cache>		META HTTP-EQUIVCache-Control CONTENTno-cache>		META HTTP-EQUIVcache-directive CONTENTno-cache>		META HTTP-EQUIVExpires CONTENT0>		script typetext/javascript src/local/jquery-1.9.1.min.js>/script>		script typetext/javascript src/local/jquery.cookie.js>/script>		SCRIPT LanguageJavaScript>      		// Functions      		function Right(str, n){         		if (n  0)            		return ;         		else if (n > String(str).length)            		return str;        		else {            		var iLen  String(str).length;           			 return String(str).substring(iLen, iLen - n);         		}      		}      		function log(msg){      			if(typeof window.console ! undefined && typeof window.console.info ! undefined){      				console.info(msg);      			}      		}     		// Variables      		var errorstring;      		var errorcode;      		var req/;          var loginPageURI  /it/login;      		var newuriroot/hb-login/form/login?requiredDAC4;  			log(errorstring   + errorstring);  			log(errorcode   + errorcode);  			log(requestedurl   + req);			// AUTHWAS error.			// Dont use the last 4 digits of ERROR_CODE macro, use ERROR instead !!!			if (errorstring.substring(0,22)  Unknown message number) {				var authwas_errorcode  Right(errorstring, 3);				log(authwas_errorcode   + authwas_errorcode)				window.location.href  newuriroot + &errorCode + authwas_errorcode;			}			else {  // INTERNAL error				if ( X ! X) {					window.location.href  newuriroot + &errorCode + errorcode;				}				else { // NO error					$.cookie(requiredDAC, 4, { path: /});					 window.top.location.href  loginPageURI;				}			}               /SCRIPT>   /HEAD>         BODY>/BODY>/HTML>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > bankingcollnew.hellobank.it

Is this malicious?

DNS Resolutions

Port 443