Report Overview

  1. Submitted URL

    u1956605.cp.regruhosting.ru/sucarsal/

  2. IP

    31.31.198.226

    ASN

    #197695 Domain names registrar REG.RU, Ltd

  3. Submitted

    2023-03-02 05:23:33

    Access

  4. Website Title

  5. Final URL

  6. urlquery detections

    Phishing - Bancolombia

Detections

  1. urlquery

    24

  2. Network Intrusion Detection

    1

  3. Threat Detection Systems

    74

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z
u1956605.cp.regruhosting.ruunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.godaddy.com6980001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
images-cdn.info5281560001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
medium 31.31.198.226Client IP

Threat Detection Systems

OpenPhish
SeverityIndicatorAlert
mediumu1956605.cp.regruhosting.ru/sucarsal/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia
mediumu1956605.cp.regruhosting.ru/Bancolombia

PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumu1956605.cp.regruhosting.ru/sucarsal/Phishing
mediumu1956605.cp.regruhosting.ru/sucarsal/mua/js/patterns/validations.jsPhishing
mediumu1956605.cp.regruhosting.ru/sucarsal/mua/js/jquery.cookie.jsPhishing
mediumu1956605.cp.regruhosting.ru/sucarsal/mua/js/patterns/jquery.validate-1.11.1.jsPhishing
mediumu1956605.cp.regruhosting.ru/sucarsal/mua/js/jquery-3.6.0.min.jsPhishing
mediumu1956605.cp.regruhosting.ru/sucarsal/mua/js/patterns/jquery-validations.jsPhishing
mediumu1956605.cp.regruhosting.ru/sucarsal/mua/js/patterns/blockKeys.jsPhishing
mediumu1956605.cp.regruhosting.ru/sucarsal/mua/js/bluebird.min.jsPhishing
mediumu1956605.cp.regruhosting.ru/sucarsal/mua/js/app.jsPhishing
mediumu1956605.cp.regruhosting.ru/sucarsal/mua/js/jquery.jclock-min.jsPhishing
mediumu1956605.cp.regruhosting.ru/sucarsal/mua/js/jquery-ui.jsPhishing
mediumu1956605.cp.regruhosting.ru/sucarsal/mua/images/logo.svgPhishing
mediumu1956605.cp.regruhosting.ru/sucarsal/mua/fonts/iconfont/icon_font_bc.ttf?61jkgiPhishing
mediumu1956605.cp.regruhosting.ru/sucarsal/mua/fonts/opensans/CIBFontSans-Light.ttfPhishing
mediumu1956605.cp.regruhosting.ru/sucarsal/mua/fonts/opensans/OpenSans-Regular.ttfPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (14)

HTTP Transactions (44)

URLIPResponseSize
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
34.160.144.191200 OK5.3 kB
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
u1956605.cp.regruhosting.ru/sucarsal/
31.31.198.226200 OK3.1 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
u1956605.cp.regruhosting.ru/sucarsal/mua/css/styles.css
31.31.198.226200 OK16 kB
u1956605.cp.regruhosting.ru/sucarsal/mua/js/patterns/validations.js
31.31.198.226200 OK2.1 kB
u1956605.cp.regruhosting.ru/sucarsal/mua/js/jquery.cookie.js
31.31.198.226200 OK1.4 kB
u1956605.cp.regruhosting.ru/sucarsal/mua/js/patterns/jquery.validate-1.11.1.js
31.31.198.226200 OK7.0 kB
u1956605.cp.regruhosting.ru/sucarsal/mua/css/bootstrap.css
31.31.198.226200 OK18 kB
u1956605.cp.regruhosting.ru/sucarsal/mua/js/jquery-3.6.0.min.js
31.31.198.226200 OK31 kB
u1956605.cp.regruhosting.ru/sucarsal/mua/js/patterns/jquery-validations.js
31.31.198.226200 OK269 B
push.services.mozilla.com/
52.88.113.219101 Switching Protocols0 B
u1956605.cp.regruhosting.ru/sucarsal/mua/js/patterns/blockKeys.js
31.31.198.226200 OK117 B
u1956605.cp.regruhosting.ru/sucarsal/mua/css/jquery-ui.css
31.31.198.226200 OK6.1 kB
u1956605.cp.regruhosting.ru/sucarsal/mua/css/ui.css
31.31.198.226200 OK3.0 kB
u1956605.cp.regruhosting.ru/sucarsal/mua/js/bluebird.min.js
31.31.198.226200 OK23 kB
u1956605.cp.regruhosting.ru/sucarsal/mua/js/app.js
31.31.198.226200 OK658 B
u1956605.cp.regruhosting.ru/sucarsal/mua/js/jquery.jclock-min.js
31.31.198.226200 OK1.4 kB
u1956605.cp.regruhosting.ru/sucarsal/mua/js/jquery-ui.js
31.31.198.226200 OK61 kB
u1956605.cp.regruhosting.ru/sucarsal/mua/images/imgPublicidadnuevo.jpg
31.31.198.226200 OK48 kB
u1956605.cp.regruhosting.ru/sucarsal/mua/images/logo.svg
31.31.198.226200 OK2.7 kB
u1956605.cp.regruhosting.ru/sucarsal/mua/images/icons/icon-user.png
31.31.198.226200 OK447 B
u1956605.cp.regruhosting.ru/sucarsal/mua/fonts/iconfont/icon_font_bc.ttf?61jkgi
31.31.198.226200 OK32 kB
u1956605.cp.regruhosting.ru/sucarsal/mua/fonts/opensans/CIBFontSans-Light.ttf
31.31.198.226200 OK111 kB
images-cdn.info/444/image.gif
54.86.140.52301 Moved Permanently169 B
u1956605.cp.regruhosting.ru/sucarsal/mua/fonts/opensans/OpenSans-Regular.ttf
31.31.198.226200 OK217 kB
u1956605.cp.regruhosting.ru/sucarsal/favicon.ico
31.31.198.226200 OK4.3 kB
ocsp.godaddy.com/
192.124.249.22200 OK1.8 kB
images-cdn.info/444/image.gif
54.86.140.52200 OK43 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc34d6996-c4fc-4cbc-ba70-7f3c3465a52b.jpeg
34.120.237.76200 OK6.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb97e8f2e-6da0-4f8b-b12c-1af676e3e4da.jpeg
34.120.237.76200 OK9.1 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9b42a7e-1e38-459c-a114-2a621310e947.jpeg
34.120.237.76200 OK7.9 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F749c9bae-5b66-459e-8826-3e69595a8135.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9af2f1d-e839-4f99-b9a9-9c955e5173cf.jpeg
34.120.237.76200 OK10 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F40f58d1b-99a5-4996-9a38-1445bfeac632.jpeg
34.120.237.76200 OK10 kB