Help RSS API Feed Maltego Contact                        

Domain > citigroup.com

More information on this domain is in AlienVault OTX

Is this malicious?
Most users have voted this as not malicious

Files that talk to citigroup.com
MD5A/V
d42c1a59b111316f7481770349e653db[HW32.CDB.87f3] [Malware.Packer.OCD]
ebbf2139fa265c6896be78fe8bbd44f7
b34430b8e494c41f86c5aa47b002a212[Crypt2.AZDS]
ddeca0855c9bb584c270ff6c5f0521c2[Artemis!DDECA0855C9B] [WS.Reputation.1] [Backdoor.Win32.Pushdo.qij] [UnclassifiedMalware] [TR/Dldr.Cutwail.4] [TrojanDownloader:Win32/Cutwail] [Win32/Wigon.PH] [W32/Kryptik.AX!tr] [Trj/CI.A]
c7bf064346fafe4fc55b43abcfe96b00[HW32.CDB.E6f3] [Backdoor.Kelihos.r3] [Backdoor.Hlux!zUFIktBYK3s] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djfw] [Trojan.Win32.S.PSW-Tepfer.835600.AM] [UnclassifiedMalware] [BackDoor.Slym.14049] [Mal/Kelihos-A] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [W32/Trojan.QQUO-1304] [Backdoor.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt3.HUC] [Trojan.Win32.Kryptik.BZIX]
1de1e523afa41804295a043807d1641e
64d63f2465d931818539beff1ca66a34[Crypt2.AATE] [TR/Rogue.1134088]
df902d85a5aebee35007be327e9f54d2[HW32.CDB.7c9b] [Malware.Packer.FFS] [Mal/FakeAV-UF] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Symmi]
165f5084043893cc35334b568d0f6ec0[HW32.CDB.73df] [Packed.Win32.Katusha.3!O] [Win32.Malware!Drop] [Backdoor.Hlux!tc7SLh6zR0c] [WS.Reputation.1] [Kryptik.CCFN] [UnclassifiedMalware] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CBNK] [Backdoor.Win32.Kelihos] [W32/Kryptik.BD!tr] [Crypt_s.GPC] [Backdoor.Win32.Hlux.aBgj] [Win32/Trojan.337]
2263766e2732eb5e6eb78b5d35423883[Crypt2.BTUL] [TrojanDownloader*Win32/Cutwail.BS]
888cf6888e476ab89daef8385b7ae881[HW32.CDB.B8e4] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcinh] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djfk] [Backdoor.Hlux!Jm3TflIszzA] [Mal/Kelihos-A] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GHF] [Trojan.Win32.Kryptik.BZIX]
4ca7d150cc798011d5cb7d4c5be89f41[HW32.CDB.7b74] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcisy] [Backdoor.Win32.Hlux.diqm] [Backdoor.Hlux!ISaeAq95IMk] [TrojWare.Win32.Kryptik.BLUU] [BackDoor.Slym.14044] [TR/Kryptik.oeons] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GGV] [Trojan.Win32.Kryptik.BZDO]
75147b8dd7796762a48bd315293f0817[FakeSecTool-FCI!75147B8DD779] [Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.BDPK!tr] [Crypt_s.EPS]
9178327bacccfcfecea87948acbfe510[HW32.CDB.7c44] [TrojanPSW.Tepfer.r3] [Trojan.Win32.Kryptik.cxaoho] [WS.Reputation.1] [Kryptik.CCFN] [Trojan-PSW.Win32.Tepfer.twuw] [Trojan.PWS.Tepfer!pez0E7sggU8] [Trojan.Packed.26544] [Heuristic.LooksLike.Win32.Suspicious.E] [Mal/FakeAV-UF] [Trojan[PSW]/Win32.Tepfer] [Trojan:Win32/Dynamer!ac] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Tepfer.CASU!tr.pws] [Crypt_s.GMK] [Trojan.Win32.Kryptik.CASU] [Win32/Trojan.e76]
e5b85688fcbb1c799ee2e233fb531297[TrojanDownloader.Cutwail] [RDN/Downloader.a!mv] [Trojan.Inject.RRE] [Riskware] [W32.Pilleuz] [Win32/Cutwail.CGbKVWC] [BKDR_PUSHDO.FT] [Backdoor.Win32.Pushdo.qnv] [Backdoor.Pushdo!XnUVfC93BRo] [UnclassifiedMalware] [BackDoor.Bulknet.958] [BDS/Pushdo.qnv] [Backdoor/Pushdo.aew] [Win32.Hack.Pushdo.q.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [W32/Backdoor.YDLC-0133] [Backdoor.Pushdo] [Malware.Pilleuz!rem] [Trojan-Downloader.Win32.Cutwail] [W32/Pushdo.YOY!tr]
ea21595001334cf75d1f82adadaefb20
8835f7fb6071ec49aaac1e7a87231c81[HW32.CDB.56ce] [Backdoor.Hlux.r3] [Backdoor.Hlux!1YBsnlQ+0io] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dllz] [Trojan.Win32.Kryptik.cxcjig] [Trojan.Packed.26544] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Trojan.Win32.Kryptik.CASU] [Win32/Trojan.337]
b4f310f5cc7b9cd68d919d50a8415974[HW32.Laneul.zqwg] [Trojan/W32.Jorik.40448.U] [TrojanDownloader.Cutwail] [Trojan] [Trojan.Win32.Jorik.byfbdv] [W32.Pilleuz] [Win32/Cutwail.RfLHODC] [TROJ_SPNR.0BGS13] [Trojan.Win32.Jorik.Cutwail.prm] [Trojan.Cutwail!Vn3uTMMB5CM] [UnclassifiedMalware] [BackDoor.Bulknet.958] [TR/Graftor.103216] [Win32.Troj.Undef.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Client-SMTP.40448.A] [Dropper/Win32.Vidro] [BScope.Trojan.Pushdo] [Malware.Pilleuz!rem] [Trojan-Downloader.Win32.Cutwail] [W32/Pushdo.YOY!tr] [SHeur4.BNRB] [Trj/CI.A] [TrojanDownloader*Win32/Cutwail.BS]
1623be5a046aa215162665c5067332e0[HW32.CDB.Db63] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [Trojan-PSW.Win32.Tepfer.tybm] [Trojan.PWS.Tepfer!sA6n+JUlMF8] [UnclassifiedMalware] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [W32/Trojan.YSDP-3009] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt_s.GNC] [Trojan.Win32.InfoStealer.aRBP]
680438c58773658c1905d58c040f78d4[VirTool*Win32/Injector.CL]

Whois
PropertyValue
NameDomain Administration
Organization CitiBank, N.A.
Email domain.admin@citi.com
Address Sort 1710
Zip Code 10043
City New York
State NY
Country US
Phone +1.7182480307
Fax +1.7188012650
NameServer ns1.nsroot1.com
Created 1998-04-06 04:00:00
Changed 2014-04-05 00:55:07
Expires 2020-04-05 00:00:00
Registrar CSC CORPORATE DOMAIN

DNS Resolutions
DateIP Address
2013-10-12192.193.103.222 (ClassC)
2014-03-24192.193.219.58 (ClassC)
2014-06-24192.193.103.145 (ClassC)
2015-01-06192.193.219.58 (ClassC)
2024-01-27192.193.102.175 (ClassC)
2024-02-21192.193.218.130 (ClassC)
2025-04-13104.94.222.171 (ClassC)
2025-04-28104.96.178.165 (ClassC)

Port 80

Port 443

Subdomains
DateDomainIP
citigroupsoa.citigroup.com2025-04-11192.193.103.70
logintotalcomponline.citigroup.com2024-12-1223.44.175.149
issuerservices.icg.citigroup.com2024-12-2023.41.4.79
issuerservicesuat.icg.citigroup.com2024-11-0423.54.19.67
uat.tradeimaging.citigroup.com2023-08-2523.195.238.213
www.tradeimaging.citigroup.com2023-08-26104.86.242.137
assessments.training.citigroup.com2025-04-13192.193.218.107
uat.tradeprocessing.citigroup.com2024-03-1692.122.15.168
www.tradeprocessing.citigroup.com2023-08-26104.86.242.137
blog.citigroup.com2023-08-26104.100.168.155
uat.blog.citigroup.com2024-08-1023.55.167.34
assessments.trainingstg.citigroup.com2025-03-31192.193.174.101
uat.banksearch.citigroup.com2024-12-1223.44.175.101
log7.citibank.citigroup.com2025-04-2313.89.105.232
document7.citibank.citigroup.com2025-04-1752.154.174.214
www7.citibank.citigroup.com2025-04-1352.154.174.214
businessaccessstg.citibank.citigroup.com2024-07-30184.25.231.243
businessaccess.citibank.citigroup.com2023-08-16104.86.251.159
businessaccessuat.citibank.citigroup.com2024-02-2923.198.108.162
securefileshare.legal.citigroup.com2024-07-2134.196.66.117
contentdelivery.technologyservices.internal.citigroup.com2024-07-3023.48.18.74
ebillpayer.brazil.citigroup.com2024-08-16104.96.163.141
site01.wifiauthentication.citigroup.com2025-04-13192.0.2.1
site11.wifiauthentication.citigroup.com2025-04-17192.0.2.1
site02.wifiauthentication.citigroup.com2025-04-16192.0.2.1
site04.wifiauthentication.citigroup.com2025-04-23192.0.2.1
site14.wifiauthentication.citigroup.com2025-04-14192.0.2.1
financialeducation.citigroup.com2024-11-1823.40.41.58
curriculum.financialeducation.citigroup.com2024-12-0323.216.145.161
uat1.directsalesautomation.citigroup.com2025-04-0223.55.111.136
citizenship.citigroup.com2024-04-1923.213.175.146
securemailcenter.citigroup.com2025-04-17192.193.154.4
csc2.transactionservices.citigroup.com2024-01-3123.35.98.25
csc.transactionservices.citigroup.com2024-07-2423.213.175.179
citidirectunitmatching.transactionservices.citigroup.com2023-12-0323.209.116.50
penangtrademeeting.transactionservices.citigroup.com2024-12-2823.219.78.170
email.transactionservices.citigroup.com2025-01-088.23.247.244
www.newsroom.transactionservices.citigroup.com2025-04-05104.100.168.99
e-payments.transactionservices.citigroup.com2024-07-2723.55.168.136
tradelearningtoolkit.transactionservices.citigroup.com2025-02-2123.38.194.60
www.transactionservices.citigroup.com2021-03-28104.114.79.146
debtxportal.issuerservices.citigroup.com2024-03-17104.100.75.23
debtxportaluat.issuerservices.citigroup.com2023-08-25104.86.229.155
contentdelivery.technologyservices.citigroup.com2024-07-3023.48.18.74
www.securities.citigroup.com2025-03-2423.46.228.80
careers.citigroup.com2024-07-1223.44.175.148
emea.careers.citigroup.com2023-12-02104.86.183.26
www.careers.citigroup.com2023-08-26104.100.168.195
image.news.citigroup.com2024-08-2923.192.230.155
uat.citigroup.com2024-02-1723.44.175.188
contentdelivery.technologyservices.internal.uat.citigroup.com2024-07-30184.26.148.33
contentdelivery.technologyservices.uat.citigroup.com2024-07-30184.26.148.33
koreacitidirectuat.citigroup.com2024-03-0523.196.192.171
citiselect.citigroup.com2024-10-0123.38.194.60
www.citiselect.citigroup.com2024-09-0923.32.75.132
email.citidirect.citigroup.com2024-12-1467.134.222.254
koreacitidirect.citigroup.com2023-08-2523.37.215.97
thirdpartyassessment.citigroup.com2024-11-2523.44.175.150
www.agencyandtrust.citigroup.com2025-04-0523.213.175.179
contentdelivery.technologyservices.internal.dev.citigroup.com2024-08-3023.198.170.29
contentdelivery.technologyservices.dev.citigroup.com2023-08-2523.222.159.185
www.citigroup.com2023-08-2523.222.159.164
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information