Domain > openbank.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to openbank.com

MD5	A/V
9aa81fa022c0b159758efa1bda4f9be1	[HW32.CDB.A20b] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dthd] [UnclassifiedMalware] [BackDoor.Slym.13011] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CBNK] [Win32.Backdoor.Hlux.Hwcu] [Trojan.Crypt3] [W32/Kryptik.BD!tr] [Crypt3.OHL] [Backdoor.Win32.Hlux.Ac]
1929530a1f2d6d48a87aac928220e460	[HW32.CDB.4199] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cwwgjj] [Kryptik.CCFN] [Backdoor.Win32.Hlux.crc] [Backdoor.Hlux!GJ0f5FTmyog] [UnclassifiedMalware] [BackDoor.Slym.14056] [Heuristic.LooksLike.Win32.Suspicious.E] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Trojan:Win32/Sisron] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GJB] [Trojan.Win32.Kryptik.BZWV] [Win32/Trojan.e55]
4be57c95dd1e77ba6b00af63f6c5d79a	[BackDoor.Slym.1498] [BDS/Kelihos.F.5092] [Win32.PSWTroj.Tepfer.hd.(kcloud)] [Backdoor:Win32/Kelihos.F] [Backdoor/Win32.Kelihos] [Backdoor.Win32.Kelihos] [W32/Kelihos.JI!tr]

Whois

Property	Value
Name	ACI Worldwide
Organization	ACI Worldwide
Email	InfrastructureServices@aciworldwide.com
Address	705 Westech Dr
Zip Code	30092
City	Norcross
State	GA
Country	US
Phone	+1.4049233500
Fax	+1.9999999999
NameServer	NS2.OPENBANK.COM
Created	1999-03-16 05:00:00
Changed	2015-02-05 20:45:33
Expires	2018-03-16 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2014-07-23	208.233.79.130 (ClassC)
2015-05-20	-
2019-04-06	13.33.140.173 (ClassC)
2019-04-26	52.222.222.115 (ClassC)
2019-04-26	52.222.222.146 (ClassC)
2019-04-26	52.222.222.197 (ClassC)
2019-06-19	52.84.134.184 (ClassC)
2019-06-19	52.84.134.83 (ClassC)
2019-06-19	54.230.89.184 (ClassC)
2019-06-19	54.230.89.201 (ClassC)
2019-06-19	54.230.89.23 (ClassC)
2019-09-19	13.226.42.53 (ClassC)
2020-04-09	13.225.198.10 (ClassC)
2020-04-09	13.225.198.21 (ClassC)
2020-05-10	13.249.71.129 (ClassC)
2020-05-10	13.249.71.50 (ClassC)
2020-09-01	13.33.163.17 (ClassC)
2020-10-04	99.86.100.110 (ClassC)
2021-01-14	54.192.66.123 (ClassC)
2021-05-11	13.226.178.98 (ClassC)
2021-05-11	13.226.178.99 (ClassC)
2021-05-31	13.225.61.83 (ClassC)
2021-06-04	13.249.75.35 (ClassC)
2021-07-10	13.225.221.23 (ClassC)
2021-07-17	13.225.66.114 (ClassC)
2021-07-17	13.225.66.55 (ClassC)
2021-07-17	13.225.66.77 (ClassC)
2022-09-07	18.160.37.107 (ClassC)
2024-03-28	108.138.246.87 (ClassC)
2025-01-12	52.84.162.55 (ClassC)
2025-03-03	52.84.162.91 (ClassC)
2025-03-10	18.67.0.51 (ClassC)
2025-03-11	18.67.0.117 (ClassC)
2025-04-23	99.84.66.83 (ClassC)
2025-04-30	99.84.66.85 (ClassC)
2025-06-02	52.84.162.7 (ClassC)
2025-06-08	99.84.66.92 (ClassC)
2025-09-13	99.84.66.54 (ClassC)
2025-11-10	18.161.6.17 (ClassC)
2025-12-27	18.161.6.91 (ClassC)
2026-01-15	18.161.6.77 (ClassC)

Subdomains

Date	Domain	IP
m.email.openbank.com	2026-01-08	54.154.44.71
t.email.openbank.com	2026-01-07	99.81.185.164
bcdn.openbank.com	2024-02-13	18.155.202.44
even.openbank.com	2024-12-29	52.223.16.43
wup.openbank.com	2025-11-20	20.71.8.211
tranxfer.openbank.com	2025-07-02	3.163.189.107
logs.openbank.com	2025-11-11	51.105.214.186
assets.openbank.com	2024-12-27	99.84.66.26
m.news.openbank.com	2024-08-09	46.51.194.181
www.openbank.com	2024-11-24	99.84.66.54

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]