Report Overview

  1. Submitted URL

    connection.igue.com.sa/login.php?online_id=64b1c1091125373841c36b86d&country=&iso=

  2. IP

    199.79.62.146

    ASN

    #394695 PUBLIC-DOMAIN-REGISTRY

  3. Submitted

    2023-01-04 17:58:41

    Access

  4. Website Title

  5. Final URL

  6. urlquery detections

    Phishing - M&T Bank

Detections

  1. urlquery

    1

  2. Network Intrusion Detection

    8

  3. Threat Detection Systems

    14

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ocsp.entrust.net12080001-01-01T00:00:00Z0001-01-01T00:00:00Z
resources.mtb.com1440110001-01-01T00:00:00Z0001-01-01T00:00:00Z
nexus.ensighten.com27860001-01-01T00:00:00Z0001-01-01T00:00:00Z
asset.mtb.com2463970001-01-01T00:00:00Z0001-01-01T00:00:00Z
r3.o.lencr.org3440001-01-01T00:00:00Z0001-01-01T00:00:00Z
contile.services.mozilla.com11140001-01-01T00:00:00Z0001-01-01T00:00:00Z
content-signature-2.cdn.mozilla.net11520001-01-01T00:00:00Z0001-01-01T00:00:00Z
ocsp.digicert.com860001-01-01T00:00:00Z0001-01-01T00:00:00Z
push.services.mozilla.com21400001-01-01T00:00:00Z0001-01-01T00:00:00Z
img-getpocket.cdn.mozilla.net16310001-01-01T00:00:00Z0001-01-01T00:00:00Z
connection.igue.com.saunknown0001-01-01T00:00:00Z0001-01-01T00:00:00Z
firefox.settings.services.mozilla.com8670001-01-01T00:00:00Z0001-01-01T00:00:00Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
high 199.79.62.146Client IP
medium 199.79.62.146Client IP
medium 199.79.62.146Client IP
medium 199.79.62.146Client IP
medium 199.79.62.146Client IP
medium 199.79.62.146Client IP
medium 199.79.62.146Client IP
medium 199.79.62.146Client IP

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumconnection.igue.com.sa/TSPD/0856addebbab2000ba949201dad9f67efc42df64f349dd0cbd91a24e357d5af05b11616b8df1b84b?type=9Phishing
mediumconnection.igue.com.sa/TSPD/0856addebbab2000ba949201dad9f67efc42df64f349dd0cbd91a24e357d5af05b11616b8df1b84b?type=17Phishing
mediumconnection.igue.com.sa/Assets/scripts/Login/Index.jsPhishing
mediumconnection.igue.com.sa/ruxitagentjs_ICA2SVfhjqrux_10205201218101503.jsPhishing
mediumconnection.igue.com.sa/TSPD/0856addebbab2000ba949201dad9f67efc42df64f349dd0cbd91a24e357d5af05b11616b8df1b84b?type=17Phishing
mediumconnection.igue.com.sa/ruxitagentjs_ICA2SVfhjqrux_10205201218101503.jsPhishing
mediumconnection.igue.com.sa/Assets/scripts/Login/Index.jsPhishing

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


JavaScript (3)

HTTP Transactions (45)

URLIPResponseSize
connection.igue.com.sa/login.php?online_id=64b1c1091125373841c36b86d&country=&iso=
199.79.62.146200 OK5.3 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
connection.igue.com.sa/TSPD/0856addebbab2000ba949201dad9f67efc42df64f349dd0cbd91a24e357d5af05b11616b8df1b84b?type=9
199.79.62.146404 Not Found358 B
connection.igue.com.sa/TSPD/0856addebbab2000ba949201dad9f67efc42df64f349dd0cbd91a24e357d5af05b11616b8df1b84b?type=17
199.79.62.146404 Not Found358 B
connection.igue.com.sa/Assets/scripts/Login/Index.js
199.79.62.146404 Not Found358 B
connection.igue.com.sa/ruxitagentjs_ICA2SVfhjqrux_10205201218101503.js
199.79.62.146404 Not Found358 B
connection.igue.com.sa/TSPD/0856addebbab2000ba949201dad9f67efc42df64f349dd0cbd91a24e357d5af05b11616b8df1b84b?type=17
199.79.62.146404 Not Found358 B
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
connection.igue.com.sa/ruxitagentjs_ICA2SVfhjqrux_10205201218101503.js
199.79.62.146404 Not Found358 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
resources.mtb.com/r/simple-layout-responsive/css.mtb?v=08132020140516
24.75.29.77200 OK35 kB
nexus.ensighten.com/mtbank/OE-Prod/Bootstrap.js
54.230.111.63200 OK15 B
resources.mtb.com/Assets/img/mtb-equalhousinglender.svg
24.75.29.77200 OK230 B
resources.mtb.com/Assets/img/mtb-entrust.svg
24.75.29.77200 OK1.3 kB
resources.mtb.com/Assets/img/mtb-logo.svg
24.75.29.77200 OK2.0 kB
push.services.mozilla.com/
52.42.185.162101 Switching Protocols0 B
resources.mtb.com/r/simple-layout-responsive/js.mtb?v=08132020140516
24.75.29.77200 OK104 kB
connection.igue.com.sa/Assets/scripts/Login/Index.js
199.79.62.146404 Not Found358 B
resources.mtb.com/assets/fonts/mandtpg-iconfont.woff
24.75.29.77200 OK4.8 kB
resources.mtb.com/assets/fonts/mandtbaltoweb-book.woff
24.75.29.77200 OK68 kB
resources.mtb.com/assets/fonts/mandtbaltoweb-medium.woff
24.75.29.77200 OK64 kB
ocsp.entrust.net/
104.110.10.32200 OK1.6 kB
asset.mtb.com/Documents/html/homepage/favicon.ico
143.204.55.21200 OK15 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68ecb4b1-cd89-45e3-ae9d-b225ccd2e379.jpeg
34.120.237.76200 OK6.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03ececd-3935-4a1b-ae41-45a5aea9ebe3.jpeg
34.120.237.76200 OK5.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ff2360c-5204-4d20-b397-821a4c4421e7.jpeg
34.120.237.76200 OK12 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8476606b-7383-49cb-8c93-76705bedbbb8.webp
34.120.237.76200 OK8.1 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F005ed78b-d6b9-459e-b8fd-42ab6577e4f3.jpeg
34.120.237.76200 OK6.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e6c2763-3047-4d8a-adab-82148ff57727.jpeg
34.120.237.76200 OK7.7 kB