Report Overview
Visitedpublic
2025-10-08 08:37:57
Tags
Submit Tags
URL
mua-personassvv.vercel.app/monitoreo
Finishing URL
mua-personassvv.vercel.app/monitoreo
IP / ASN
216.198.79.67
Title
Bancolombia
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
2
Threat Detection Systems
6
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2025-10-05 | 477 B | 5.7 kB | 216.58.211.10 | |
ipinfo.io | 1327 | 2013-04-23 | 2013-12-16 | 2025-10-06 | 492 B | 762 B | 34.117.59.81 |   |
ajax.googleapis.com | 3691 | 2005-01-25 | 2012-05-22 | 2025-10-05 | 455 B | 90 kB | 142.250.74.138 | |
sapp2406.sirv.com | unknown | 2001-11-18 | 2024-09-22 | 2025-10-05 | 1.9 kB | 43 kB |  195.201.168.230 | |
mua-personassvv.vercel.app 26 alert(s) on this Host | unknown | 2020-01-28 | 2025-10-07 | 2025-10-07 | 2.9 kB | 54 kB | 216.198.79.131 |    |
api.ipify.org | 8166 | 2014-01-05 | 2014-10-06 | 2025-10-05 | 508 B | 271 B |  104.26.13.205 |  |
Google Cloud CDN (CDN)
Cloud CDN uses Google's global edge network to serve content closer to users.Google Cloud (IaaS)
Google Cloud is a suite of cloud computing services.Vercel (PaaS)
Vercel is a cloud platform for static frontends and serverless functions.Google Hosted Libraries (CDN)
Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.jQuery:3.5.1 (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | 172.18.0.8 | 104.26.13.205 | ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI | |
| medium | 172.18.0.8 | 34.117.59.81 | ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | mua-personassvv.vercel.app/monitoreo | malware | Detects file containing Telegram Bot API |
| OpenPhish | mua-personassvv.vercel.app | phishing | Phishing - Bancolombia |
| Cloudflare DNS | mua-personassvv.vercel.app | malicious | Sinkholed |
| OpenDNS | mua-personassvv.vercel.app | phishing | Phishing Block |
| DNS0 Zero | mua-personassvv.vercel.app | malicious | Sinkholed |
| OpenPhish | mua-personassvv.vercel.app/monitoreo | phishing | Phishing - Bancolombia |
JavaScript (8)
No JavaScripts
HTTP Transactions (14)
| URL | IP | Response | Size |
|---|