Report Overview

  1. Submitted URL

    b1a3sr19.4pu.com/login.php?online_id=a0b6f65bb5bd916b29364ca76&country=&iso=

  2. IP

    34.174.239.19

    ASN

    #15169 GOOGLE

  3. Submitted

    2022-12-01 17:35:20

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    DynDNS domain detected

    Phishing - Citizens Bank

    Phishing - Citizens Bank

Detections

  1. urlquery

    19

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    14

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ocsps.ssl.com145170001-01-01T00:00:00Z0001-01-01T00:00:00Z
accdn.lpsnmedia.net34100001-01-01T00:00:00Z0001-01-01T00:00:00Z
pdx-col.eum-appdynamics.com48160001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.sca1b.amazontrust.com10150001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.sectigo.com4870001-01-01T00:00:00Z0001-01-01T00:00:00Z
lpcdn.lpsnmedia.net35010001-01-01T00:00:00Z0001-01-01T00:00:00Z
va.v.liveperson.net39060001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
b1a3sr19.4pu.comunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.entrust.net12080001-01-01T00:00:00Z0001-01-01T00:00:00Z
www4.citizensbankonline.com1590920001-01-01T00:00:00Z0001-01-01T00:00:00Z
nebula-cdn.kampyle.com37390001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdn.appdynamics.com32660001-01-01T00:00:00Z0001-01-01T00:00:00Z
dpm.demdex.net2040001-01-01T00:00:00Z0001-01-01T00:00:00Z
citizensbank.demdex.net687810001-01-01T00:00:00Z0001-01-01T00:00:00Z
udc-neb.kampyle.com30390001-01-01T00:00:00Z0001-01-01T00:00:00Z
report.citizen.glassboxdigital.io690730001-01-01T00:00:00Z0001-01-01T00:00:00Z
nexus.ensighten.com27860001-01-01T00:00:00Z0001-01-01T00:00:00Z
www3.citizensbankonline.com1259230001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
lptag.liveperson.net33930001-01-01T00:00:00Z0001-01-01T00:00:00Z
cdn.glassboxcdn.com110450001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumb1a3sr19.4pu.com/efs/efs/jsp-ns/pm_fp.jsPhishing
mediumb1a3sr19.4pu.com/efs/hhf/js/citizensHeaderFooter-citizensns42588.jsPhishing
mediumb1a3sr19.4pu.com/content/930e113327rn2365aa3b7b98b0447e8dPhishing
mediumb1a3sr19.4pu.com/efs/efs/jsp-ns/scripts/common.jsPhishing
mediumb1a3sr19.4pu.com/efs/hhf/js/citizensHeaderFooter-citizensns42588.jsPhishing
mediumb1a3sr19.4pu.com/content/930e113327rn2365aa3b7b98b0447e8dPhishing
mediumb1a3sr19.4pu.com/efs/efs/jsp-ns/scripts/common.jsPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (39)

HTTP Transactions (99)

URLIPResponseSize
r3.o.lencr.org/
23.36.77.32200 OK503 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK939 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
b1a3sr19.4pu.com/login.php?online_id=a0b6f65bb5bd916b29364ca76&country=&iso=
34.174.239.19200 OK27 kB
nexus.ensighten.com/citizensbank/olbprod/Bootstrap.js
54.230.111.35200 OK32 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
www3.citizensbankonline.com/efs/efs/jsp-ns/inc/css/jquery-ui-1.10.3.custom.min.css
104.110.3.220200 OK3.1 kB
www3.citizensbankonline.com/efs/efs/jsp-ns/scripts/main.js
104.110.3.220200 OK4.0 kB
www3.citizensbankonline.com/efs/efs/jsp-ns/scripts/plugins.js
104.110.3.220200 OK39 kB
b1a3sr19.4pu.com/efs/efs/jsp-ns/pm_fp.js
34.174.239.19404 Not Found315 B
www3.citizensbankonline.com/efs/efs/jsp-ns/scripts/placeholders.min.js
104.110.3.220200 OK1.4 kB
www3.citizensbankonline.com/efs/hhf/img/CTZ_Green-01.png
104.110.3.220200 OK5.3 kB
www3.citizensbankonline.com/efs/efs/jsp-ns/inc/css/ad-containers.css
104.110.3.220200 OK1.2 kB
www4.citizensbankonline.com/akam/11/7c3ed55c
104.110.3.220404 Not Found9 B
www3.citizensbankonline.com/efs/efs/jsp-ns/inc/css/normalize.css
104.110.3.220200 OK2.3 kB
www3.citizensbankonline.com/efs/efs/jsp-ns/inc/css/main.css
104.110.3.220200 OK10 kB
www3.citizensbankonline.com/efs/efs/jsp-ns/scripts/modernizr-2.6.2.min.js
104.110.3.220200 OK5.5 kB
www3.citizensbankonline.com/efs/efs/jsp-ns/inc/css/flows.css
104.110.3.220200 OK2.0 kB
b1a3sr19.4pu.com/efs/hhf/js/citizensHeaderFooter-citizensns42588.js
34.174.239.19404 Not Found315 B
b1a3sr19.4pu.com/content/930e113327rn2365aa3b7b98b0447e8d
34.174.239.19404 Not Found315 B
www3.citizensbankonline.com/efs/efs/jsp-ns/inc/css/font/citizen_roman.woff
104.110.3.220200 OK32 kB
www3.citizensbankonline.com/efs/efs/js/tealeaf.js
104.110.3.220404 Not Found9.9 kB
www3.citizensbankonline.com/efs/efs/jsp-ns/scripts/jquery-1.9.1.min.js
104.110.3.220200 OK29 kB
b1a3sr19.4pu.com/efs/efs/jsp-ns/scripts/common.js
34.174.239.19404 Not Found315 B
www4.citizensbankonline.com/akam/11/7c3ed55c
104.110.3.220404 Not Found9 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK329 B
www3.citizensbankonline.com/efs/efs/js/tealeaf.js
104.110.3.220404 Not Found9.9 kB
www3.citizensbankonline.com/efs/efs/grafx/icon-secure.png
104.110.3.220200 OK292 B
www3.citizensbankonline.com/efs/efs/grafx/flows-tooltip.png
104.110.3.220200 OK364 B
www3.citizensbankonline.com/efs/efs/grafx/arrow-button-white.png
104.110.3.220200 OK1.0 kB
www3.citizensbankonline.com/efs/efs/grafx/arrow-down-blue.png
104.110.3.220200 OK1.1 kB
www3.citizensbankonline.com/efs/efs/grafx/arrow-right-orange.png
104.110.3.220200 OK165 B
www3.citizensbankonline.com/efs/efs/jsp-ns/inc/css/font/citizen_bold.woff
104.110.3.220200 OK29 kB
www3.citizensbankonline.com/efs/efs/jsp-ns/inc/css/font/citiolb_icons.woff
104.110.3.220200 OK18 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
b1a3sr19.4pu.com/efs/hhf/js/citizensHeaderFooter-citizensns42588.js
34.174.239.19404 Not Found315 B
www3.citizensbankonline.com/efs/efs/jsp-ns/inc/css/font/citizen_book.woff
104.110.3.220200 OK32 kB
www3.citizensbankonline.com/efs/efs/jsp-ns/inc/css/font/citizen_extrabold.woff
104.110.3.220200 OK28 kB
b1a3sr19.4pu.com/content/930e113327rn2365aa3b7b98b0447e8d
34.174.239.19404 Not Found315 B
push.services.mozilla.com/
34.223.160.237101 Switching Protocols0 B
b1a3sr19.4pu.com/efs/efs/jsp-ns/scripts/common.js
34.174.239.19404 Not Found315 B
www3.citizensbankonline.com/efs/efs/web-ui/img/mobile-desktop-icons/icon-hires.png
104.110.3.220200 OK14 kB
www3.citizensbankonline.com/efs/efs/web-ui/img/mobile-desktop-icons/icon-normal.png
104.110.3.220200 OK11 kB
nexus.ensighten.com/citizensbank/olbprod/serverComponent.php?namespace=Bootstrapper&staticJsPath=nexus.ensighten.com/citizensbank/olbprod/code/&publishedOn=Wed%20Oct%2026%2015:44:19%20GMT%202022&ClientID=397&PageID=http%3A%2F%2Fb1a3sr19.4pu.com%2Flogin.php%3Fonline_id%3Da0b6f65bb5bd916b29364ca76%26country%3D%26iso%3D
54.230.111.35200 OK397 B
nexus.ensighten.com/citizensbank/olbprod/code/536077c15f077befae99755e07dfbfad.js?conditionId0=421909
54.230.111.35200 OK4.5 kB
nexus.ensighten.com/citizensbank/olbprod/code/28663fdb1da63e0b261fc581f8084619.js?conditionId0=4921117
54.230.111.35200 OK31 kB
cdn.appdynamics.com/adrum/adrum-latest.js?
143.204.55.39200 OK40 kB
ocsp.digicert.com/
93.184.220.29200 OK471 B
dpm.demdex.net/id?d_visid_ver=5.0.1&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=4C3B0C3755C3822E7F000101%40AdobeOrg&d_nsid=0&d_mid=25729123471941480090854545253683714556&d_blob=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&ts=1669916109416
63.32.214.122200 OK1.3 kB
citizensbank.demdex.net/dest5.html?d_nsid=0
54.154.29.158200 OK2.8 kB
lptag.liveperson.net/tag/tag.js?site=89632304
178.249.97.23200 OK7.6 kB
cdn.appdynamics.com/adrum-ext.c74f9315ac2eb17a0d3c4975c3deb222.js
143.204.55.39200 OK20 kB
cdn.glassboxcdn.com/citizen/OLB/p/detector-dom.min.js?
104.18.15.22301 Moved Permanently167 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc2b4ec6-0955-4089-983c-0abf7fd13bf2.jpeg
34.120.237.76200 OK9.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83cd87b8-4041-419b-ab34-9f8e5a326f4b.jpeg
34.120.237.76200 OK13 kB
nebula-cdn.kampyle.com/wu/356861/onsite/embed.js
151.101.1.175200 OK516 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F600016d1-5abb-4a6c-996a-933a8d4bc6df.jpeg
34.120.237.76200 OK8.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F051e025a-c892-4a7d-8a1d-95f6d77ebb3c.jpeg
34.120.237.76200 OK4.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
34.120.237.76200 OK9.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb0e1339e-3c63-4033-8b5b-e21137509777.jpeg
34.120.237.76200 OK16 kB
ocsp.digicert.com/
93.184.220.29200 OK279 B
nebula-cdn.kampyle.com/us/wu/356861/onsite/generic1668649406636.js
151.101.1.175301 Moved Permanently0 B
nebula-cdn.kampyle.com/us/wu/356861/onsite/generic1668649406636.js
151.101.1.175200 OK115 kB
ocsps.ssl.com/
52.6.97.148200 OK1.8 kB
ocsp.sectigo.com/
172.64.155.188200 OK471 B
udc-neb.kampyle.com/egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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
35.241.45.82200 OK0 B
ocsp.sectigo.com/
172.64.155.188200 OK471 B
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK471 B
ocsp.sectigo.com/
172.64.155.188200 OK471 B
ocsp.sectigo.com/
172.64.155.188200 OK471 B
ocsp.sectigo.com/
172.64.155.188200 OK471 B
report.citizen.glassboxdigital.io/glassbox/reporting/A1F924CD-F1F0-C445-9923-C6EA4A9913FD/cls_report?_cls_s=fa2e9b7d-2b4c-4bb3-96cf-459ff5d1467b%3A0&_cls_v=85db0089-4128-4df3-82fd-d4420266857b&pv=2&f_cls_s=true
54.235.78.87200 OK429 B
report.citizen.glassboxdigital.io/glassbox/reporting/A1F924CD-F1F0-C445-9923-C6EA4A9913FD/cls_report?clsjsv=6.6.04B137&_cls_s=fa2e9b7d-2b4c-4bb3-96cf-459ff5d1467b:0&_cls_v=85db0089-4128-4df3-82fd-d4420266857b&pid=7e0b467c-a62d-4fc4-b499-e5a7c61d5586&sn=1&cfg&pv=2&aid=
54.235.78.87200 OK429 B
lpcdn.lpsnmedia.net/le_secure_storage/3.19.0.0-release_5079/storage.secure.min.html?loc=http%3A%2F%2Fb1a3sr19.4pu.com&site=89632304&env=prod&isCrossDomain=true
178.249.97.98200 OK16 kB
ocsp.sectigo.com/
172.64.155.188200 OK471 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
accdn.lpsnmedia.net/api/account/89632304/configuration/le-campaigns/zones?fields=id&fields=zoneValue&cb=lpZonesStaticCB
178.249.97.99200 OK0 B
va.v.liveperson.net/api/js/89632304?sid=nVDk0RAqS_yZc3xzKa4VEw&cb=lpCb23957x69619&t=sp&ts=1669916111972&pid=4618128341&tid=2548554841&vid=QwODI4NTBkNDcxMjc2YTc5&pt=Online%20Login%20%7C%20Citizens&u=http%3A%2F%2Fb1a3sr19.4pu.com%2Flogin.php%3Fonline_id%3Da0b6f65bb5bd916b29364ca76%26country%3D%26iso%3D&df=0&os=0&identities=%5B%7B%22iss%22%3A%22LivePerson%22%2C%22acr%22%3A%220%22%7D%2C%7B%22iss%22%3A%22LivePerson%22%2C%22acr%22%3A%220%22%2C%22sub%22%3A%2222ff160e-b256-4917-bf16-0eb25659170f%22%2C%22account%22%3A%2289632304%22%7D%5D
208.89.12.87200 OK0 B
lpcdn.lpsnmedia.net/le_secure_storage/3.19.0.0-release_5079/storage.secure.min.js?loc=http%3A%2F%2Fb1a3sr19.4pu.com&site=89632304&force=1&env=prod&isCrossDomain=true
178.249.97.98200 OK0 B
lpcdn.lpsnmedia.net/le_unified_window/10.23.0.0-release_5549/desktopEmbedded.js?version=10.23.0.0-release_5549
178.249.97.98200 OK0 B
pdx-col.eum-appdynamics.com/eumcollector/beacons/browser/v1/AD-AAB-AAN-PKK/adrum
34.211.174.193200 OK0 B
lptag.liveperson.net/lptag/api/account/89632304/configuration/applications/taglets/.jsonp?v=2.0&df=0&b=3
178.249.97.23200 OK0 B
lpcdn.lpsnmedia.net/le_unified_window/10.23.0.0-release_5549/UMSClientAPI.min.js?version=10.23.0.0-release_5549
178.249.97.98200 OK0 B
lpcdn.lpsnmedia.net/le_unified_window/10.23.0.0-release_5549/lpChatV3.min.js?version=10.23.0.0-release_5549
178.249.97.98200 OK0 B
va.v.liveperson.net/api/js/89632304?sid=nVDk0RAqS_yZc3xzKa4VEw&cb=lpCb96022x55650&t=pl&ts=1669916111999&pid=4618128341&tid=2548554841&vid=QwODI4NTBkNDcxMjc2YTc5
208.89.12.87200 OK0 B
cdn.glassboxcdn.com/citizen/OLB/p/detector-dom.min.js?
104.18.15.22200 OK0 B
lpcdn.lpsnmedia.net/le_unified_window/10.23.0.0-release_5549/surveylogicinstance.min.js?version=10.23.0.0-release_5549
178.249.97.98200 OK0 B