Report Overview

  1. Submitted URL

    www.u1924695.cp.regruhosting.ru/

  2. IP

    31.31.198.206

    ASN

    #197695 Domain names registrar REG.RU, Ltd

  3. Submitted

    2023-02-02 23:32:16

    Access

  4. Website Title

  5. Final URL

  6. urlquery detections

    Phishing - Bancolombia

Detections

  1. urlquery

    23

  2. Network Intrusion Detection

    1

  3. Threat Detection Systems

    72

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
www.u1924695.cp.regruhosting.ruunknown2023-02-02T11:25:06Z2023-02-02T20:57:44Z
images-cdn.info5281562020-06-20T01:31:03Z2023-03-12T18:03:54Z
ocsp.godaddy.com6982012-05-20T21:28:57Z2023-03-13T05:12:19Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
medium 31.31.198.206Client IP

Threat Detection Systems

OpenPhish
SeverityIndicatorAlert
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia
mediumwww.u1924695.cp.regruhosting.ru/Bancolombia

PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumwww.u1924695.cp.regruhosting.ru/Phishing
mediumwww.u1924695.cp.regruhosting.ru/mua/js/jquery.cookie.jsPhishing
mediumwww.u1924695.cp.regruhosting.ru/mua/js/patterns/validations.jsPhishing
mediumwww.u1924695.cp.regruhosting.ru/mua/js/patterns/jquery.validate-1.11.1.jsPhishing
mediumwww.u1924695.cp.regruhosting.ru/mua/js/jquery-3.6.0.min.jsPhishing
mediumwww.u1924695.cp.regruhosting.ru/mua/js/patterns/jquery-validations.jsPhishing
mediumwww.u1924695.cp.regruhosting.ru/mua/js/patterns/blockKeys.jsPhishing
mediumwww.u1924695.cp.regruhosting.ru/mua/js/bluebird.min.jsPhishing
mediumwww.u1924695.cp.regruhosting.ru/mua/js/jquery.jclock-min.jsPhishing
mediumwww.u1924695.cp.regruhosting.ru/mua/js/app.jsPhishing
mediumwww.u1924695.cp.regruhosting.ru/mua/js/jquery-ui.jsPhishing
mediumwww.u1924695.cp.regruhosting.ru/mua/images/logo.svgPhishing
mediumwww.u1924695.cp.regruhosting.ru/mua/fonts/opensans/OpenSans-Regular.ttfPhishing
mediumwww.u1924695.cp.regruhosting.ru/mua/fonts/opensans/CIBFontSans-Light.ttfPhishing
mediumwww.u1924695.cp.regruhosting.ru/mua/fonts/iconfont/icon_font_bc.ttf?61jkgiPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (14)

HTTP Transactions (43)

URLIPResponseSize
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
www.u1924695.cp.regruhosting.ru/
31.31.198.206200 OK3.2 kB
www.u1924695.cp.regruhosting.ru/mua/js/jquery.cookie.js
31.31.198.206200 OK1.4 kB
www.u1924695.cp.regruhosting.ru/mua/js/patterns/validations.js
31.31.198.206200 OK2.1 kB
www.u1924695.cp.regruhosting.ru/mua/js/patterns/jquery.validate-1.11.1.js
31.31.198.206200 OK7.0 kB
www.u1924695.cp.regruhosting.ru/mua/css/styles.css
31.31.198.206200 OK16 kB
www.u1924695.cp.regruhosting.ru/mua/js/jquery-3.6.0.min.js
31.31.198.206200 OK31 kB
www.u1924695.cp.regruhosting.ru/mua/css/bootstrap.css
31.31.198.206200 OK18 kB
www.u1924695.cp.regruhosting.ru/mua/js/patterns/jquery-validations.js
31.31.198.206200 OK269 B
www.u1924695.cp.regruhosting.ru/mua/js/patterns/blockKeys.js
31.31.198.206200 OK117 B
www.u1924695.cp.regruhosting.ru/mua/js/bluebird.min.js
31.31.198.206200 OK23 kB
www.u1924695.cp.regruhosting.ru/mua/css/jquery-ui.css
31.31.198.206200 OK6.1 kB
www.u1924695.cp.regruhosting.ru/mua/css/ui.css
31.31.198.206200 OK3.0 kB
www.u1924695.cp.regruhosting.ru/mua/js/jquery.jclock-min.js
31.31.198.206200 OK1.4 kB
www.u1924695.cp.regruhosting.ru/mua/js/app.js
31.31.198.206200 OK658 B
www.u1924695.cp.regruhosting.ru/mua/js/jquery-ui.js
31.31.198.206200 OK61 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
www.u1924695.cp.regruhosting.ru/mua/images/imgPublicidadnuevo.jpg
31.31.198.206200 OK48 kB
www.u1924695.cp.regruhosting.ru/mua/images/logo.svg
31.31.198.206200 OK2.7 kB
www.u1924695.cp.regruhosting.ru/mua/fonts/opensans/OpenSans-Regular.ttf
31.31.198.206200 OK217 kB
www.u1924695.cp.regruhosting.ru/mua/fonts/opensans/CIBFontSans-Light.ttf
31.31.198.206200 OK111 kB
www.u1924695.cp.regruhosting.ru/mua/fonts/iconfont/icon_font_bc.ttf?61jkgi
31.31.198.206200 OK32 kB
r3.o.lencr.org/
23.33.119.27200 OK503 B
www.u1924695.cp.regruhosting.ru/favicon.ico
31.31.198.206200 OK4.3 kB
images-cdn.info/444/image.gif
54.86.140.52301 Moved Permanently169 B
push.services.mozilla.com/
35.165.41.15101 Switching Protocols0 B
ocsp.godaddy.com/
192.124.249.23200 OK1.8 kB
images-cdn.info/444/image.gif
54.86.140.52200 OK43 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
r3.o.lencr.org/
23.33.119.27200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F396748b7-25c0-4112-960c-9c86d5ad28f9.jpeg
34.120.237.76200 OK7.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4c16006-34b0-45cb-bb9f-46fe6dd44e3c.jpeg
34.120.237.76200 OK13 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fff49ad64-ed0c-4270-8972-02b93a55c3b8.jpeg
34.120.237.76200 OK12 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e690e4c-e16d-49e9-ac12-24a092d6a60c.jpeg
34.120.237.76200 OK8.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fde7081-1c8d-41df-98c8-c063731c6202.jpeg
34.120.237.76200 OK3.4 kB