Report - anz-myconnect.com/

Report Overview

Submitted URL
anz-myconnect.com/
IP
104.21.44.193
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-08 16:06:38
Access
public
Website Title
Login - ANZ Internet Banking
Final URL
anz-myconnect.com/intl/secure.php
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
24

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
anz-myconnect.com	unknown	unknown	No data	No data	6.3 kB	464 kB	172.67.203.64

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	anz-myconnect.com/	Australia and New Zealand Banking Group
2024-05-08	medium	anz-myconnect.com/	Australia and New Zealand Banking Group
2024-05-08	medium	anz-myconnect.com/intl/secure.php	Australia and New Zealand Banking Group
2024-05-08	medium	anz-myconnect.com/	Australia and New Zealand Banking Group
2024-05-08	medium	anz-myconnect.com/	Australia and New Zealand Banking Group
2024-05-08	medium	anz-myconnect.com/	Australia and New Zealand Banking Group
2024-05-08	medium	anz-myconnect.com/	Australia and New Zealand Banking Group
2024-05-08	medium	anz-myconnect.com/	Australia and New Zealand Banking Group
2024-05-08	medium	anz-myconnect.com/	Australia and New Zealand Banking Group
2024-05-08	medium	anz-myconnect.com/	Australia and New Zealand Banking Group
2024-05-08	medium	anz-myconnect.com/	Australia and New Zealand Banking Group
2024-05-08	medium	anz-myconnect.com/	Australia and New Zealand Banking Group

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	anz-myconnect.com/files/js/jquery.js	273 kB	2024-05-08	2024-05-08
Pretty URL anz-myconnect.com/files/js/jquery.js IP 172.67.203.64 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-08 11:43:31 Last Seen2024-05-08 18:06:44 Times Seen29 Hash ac13f1827dee5a019a8be10299ba8053 c53344ce70a37981f58fab50761caa7dc51d874b 6ae7b5c5ea7a25e7ef6981689572c282667d8782312c703a6593424b34ad4cf9 Loading...

	anz-myconnect.com/files/js/clientStatus.js	397 B	2023-07-19	2024-05-19
Pretty URL anz-myconnect.com/files/js/clientStatus.js IP 172.67.203.64 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-19 18:08:10 Last Seen2024-05-19 09:11:56 Times Seen1334 Hash cf74f2a0fe145c80d4b2b284a76c2d61 567890515298391bf79228237e92bd2180e52bf5 70b94b7d45c64d68c378083f4b7feb5b8b2b0d107a2775fbb9813e3ddadb85f2 Loading...

	anz-myconnect.com/files/js/login.js	722 B	2024-05-08	2024-05-08
Pretty URL anz-myconnect.com/files/js/login.js IP 172.67.203.64 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-08 11:43:31 Last Seen2024-05-08 18:06:44 Times Seen22 Hash c94824c5baa1be08822cc9e17eb2aadd 929c8221bdad74dab044413fb16ce6073061e810 a047df9f46910c8b81f1322e3870d4ba20ed15bd76786aa7a921082f8625f9ca Loading...

HTTP Transactions (12)

URL IP Response Size

anz-myconnect.com/files/js/clientStatus.js

172.67.203.64

200 OK

211 B

URL GET HTTP/3
anz-myconnect.com/files/js/clientStatus.js
IP
172.67.203.64:443
ASN
#13335 CLOUDFLARENET

Requested by
https://anz-myconnect.com/intl/secure.php
Certificate
IssuerGoogle Trust Services LLC
Subjectanz-myconnect.com
Fingerprint04:12:07:28:92:F0:6E:FD:0E:D6:48:9C:80:37:9D:D1:4C:B2:E9:80
ValidityWed, 08 May 2024 05:53:43 GMT - Tue, 06 Aug 2024 05:53:42 GMT

File type
ASCII text
Size
211 B (211 bytes)
Hash
cf74f2a0fe145c80d4b2b284a76c2d61
567890515298391bf79228237e92bd2180e52bf5
70b94b7d45c64d68c378083f4b7feb5b8b2b0d107a2775fbb9813e3ddadb85f2

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Australia and New Zealand Banking Group

HTTP Headers

GET /files/js/clientStatus.js HTTP/1.1
Host: anz-myconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anz-myconnect.com/intl/secure.php
Cookie: PHPSESSID=u6b15bauodui73sh8raim1jtt0; allowed=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:06:13 GMT
content-type: application/javascript
content-length: 211
last-modified: Mon, 06 May 2024 13:30:21 GMT
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
sec-fetch-site: same-origin
cache-control: max-age=14400
cf-cache-status: HIT
age: 119
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FRWCKXrXAx4LRSl21c6oLtXeTzVZfNHtD%2FtaubUJmGOKiTJvjqrwbh%2Bv7Ui5f%2Bs%2BYXP3%2BI%2Fy1GhPmN2bM6sJF3vX15mlgVgUTPb6kpyxwOFc9FAmSJP5nRxri4JYS4G2G8V9aA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880ab220c9fc0b31-OSL
alt-svc: h3=":443"; ma=86400

anz-myconnect.com/files/css/anz.css

172.67.203.64

200 OK

3.8 kB

URL GET HTTP/3
anz-myconnect.com/files/css/anz.css
IP
172.67.203.64:443
ASN
#13335 CLOUDFLARENET

Requested by
https://anz-myconnect.com/intl/secure.php
Certificate
IssuerGoogle Trust Services LLC
Subjectanz-myconnect.com
Fingerprint04:12:07:28:92:F0:6E:FD:0E:D6:48:9C:80:37:9D:D1:4C:B2:E9:80
ValidityWed, 08 May 2024 05:53:43 GMT - Tue, 06 Aug 2024 05:53:42 GMT

File type
ASCII text, with very long lines (344)
Size
3.8 kB (3769 bytes)
Hash
d1c6e0db697d10d8e3828dc0036a3da1
6bd98e2927b0f75da16870451a4c32bbf37bac07
109af90847986a8f690aee79c748a222f2b04fb9083dfc2bc8b6814344c1b781

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Australia and New Zealand Banking Group

HTTP Headers

GET /files/css/anz.css HTTP/1.1
Host: anz-myconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anz-myconnect.com/intl/secure.php
Cookie: PHPSESSID=u6b15bauodui73sh8raim1jtt0; allowed=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:06:13 GMT
content-type: text/css
content-length: 3769
last-modified: Mon, 06 May 2024 13:30:22 GMT
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
sec-fetch-site: same-origin
cache-control: max-age=14400
cf-cache-status: HIT
age: 119
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P%2F2FTFrVs9xmbVYdBslFWetaUQHaheP9VrJ3T8tk0FZzfpNO4QMkMCQgoohj9zh98NnnxDadP4hJrLTGSUMFInbEei6ooMgPEKcQW0kTjv%2BPQMnhQT2xPDdcVR3pJqHFx8%2F9kg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880ab220da020b31-OSL
alt-svc: h3=":443"; ma=86400

anz-myconnect.com/intl/secure.php

172.67.203.64

200 OK

3.7 kB

URL User Request GET HTTP/2
anz-myconnect.com/intl/secure.php
IP
172.67.203.64:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectanz-myconnect.com
Fingerprint04:12:07:28:92:F0:6E:FD:0E:D6:48:9C:80:37:9D:D1:4C:B2:E9:80
ValidityWed, 08 May 2024 05:53:43 GMT - Tue, 06 Aug 2024 05:53:42 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (531), with CRLF, LF line terminators
Size
3.7 kB (3659 bytes)
Hash
263592c876e64a23c60226cedfb580df
59c0e48c24f60e7e855767287d129a6c3b7ba36a
e3fdcede76fe29ee16ec9491a4dabbd684a38450fc43b666618e122d3090fd12

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Australia and New Zealand Banking Group

HTTP Headers

GET /intl/secure.php HTTP/1.1
Host: anz-myconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=u6b15bauodui73sh8raim1jtt0; allowed=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 08 May 2024 16:06:13 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
sec-fetch-site: same-origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fpHBR4VEPV4lTCbwP4g7lkdaiXVQo4jUfHpLUYmIqrvCOYT1EXWNe9RIvZwrzwlhyHQopsDWj3tBxb%2FoFnfzg1EGOGjSoAiCRwXb2igC9XEqcqr7CkoxvNmtpEBkATYpDRzP%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880ab21e4ec356c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

anz-myconnect.com/files/fonts/MYRIADPRO-SEMIBOLD.woff

172.67.203.64

200 OK

62 kB

URL GET HTTP/3
anz-myconnect.com/files/fonts/MYRIADPRO-SEMIBOLD.woff
IP
172.67.203.64:443
ASN
#13335 CLOUDFLARENET

Requested by
https://anz-myconnect.com/intl/secure.php
Certificate
IssuerGoogle Trust Services LLC
Subjectanz-myconnect.com
Fingerprint04:12:07:28:92:F0:6E:FD:0E:D6:48:9C:80:37:9D:D1:4C:B2:E9:80
ValidityWed, 08 May 2024 05:53:43 GMT - Tue, 06 Aug 2024 05:53:42 GMT

File type
Web Open Font Format, CFF, length 62448, version 0.0
Size
62 kB (62448 bytes)
Hash
6fd5c55d90e96c8af1041794ab70f5f2
be1da7322f84fd756f8437d32500bee9b5877dd7
8f6b883d93b2767c0d04efeeeb65ac92a170c1d966fefc635586d233e5f318cc

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Australia and New Zealand Banking Group

HTTP Headers

GET /files/fonts/MYRIADPRO-SEMIBOLD.woff HTTP/1.1
Host: anz-myconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://anz-myconnect.com/files/css/anz.css
Cookie: PHPSESSID=u6b15bauodui73sh8raim1jtt0; allowed=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:06:14 GMT
content-type: font/woff
content-length: 62448
last-modified: Mon, 06 May 2024 13:30:20 GMT
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
sec-fetch-site: same-origin
cache-control: max-age=14400
cf-cache-status: HIT
age: 118
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LLx6OxdqNEp5s0TwZZLLa1q34p6wK7kIqby8WnZxAYClimRlDaGFZn9qyfv0dwOIv0eD%2B99HswhmRSHKyybWlABac%2B3U7VMA1vRzjM87pThOp1Lqdfi%2B79ENhqW59XyD6BzlpA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ab221ab8d0b31-OSL
alt-svc: h3=":443"; ma=86400

anz-myconnect.com/files/fonts/myriadpro-regular.woff

172.67.203.64

200 OK

62 kB

URL GET HTTP/3
anz-myconnect.com/files/fonts/myriadpro-regular.woff
IP
172.67.203.64:443
ASN
#13335 CLOUDFLARENET

Requested by
https://anz-myconnect.com/intl/secure.php
Certificate
IssuerGoogle Trust Services LLC
Subjectanz-myconnect.com
Fingerprint04:12:07:28:92:F0:6E:FD:0E:D6:48:9C:80:37:9D:D1:4C:B2:E9:80
ValidityWed, 08 May 2024 05:53:43 GMT - Tue, 06 Aug 2024 05:53:42 GMT

File type
Web Open Font Format, CFF, length 61848, version 0.0
Size
62 kB (61848 bytes)
Hash
39338481a9b2c3753b61115062caf9b4
de5b33c5a516a7be6551fdba73e1f2715b98db2f
19b0448c23352d3e85e3f42e9a157a40242b0a36d907e078f7e82d1b8c8c1f8f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Australia and New Zealand Banking Group

HTTP Headers

GET /files/fonts/myriadpro-regular.woff HTTP/1.1
Host: anz-myconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://anz-myconnect.com/files/css/anz.css
Cookie: PHPSESSID=u6b15bauodui73sh8raim1jtt0; allowed=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:06:14 GMT
content-type: font/woff
content-length: 61848
last-modified: Mon, 06 May 2024 13:30:20 GMT
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
sec-fetch-site: same-origin
cache-control: max-age=14400
cf-cache-status: HIT
age: 119
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cv6pu8JDHu2qKBEOI7NhnCjEky6H2IIHozTWVuO4Nr06i%2F316xYFPmyfioceQtA7kGG45sAdYVT8S2Q56zqv0WIF6%2BBDFtedzHghXi4uc%2FZNf8xmRieSlHhKHdxbt0SbDRi9uw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ab221ab8b0b31-OSL
alt-svc: h3=":443"; ma=86400

anz-myconnect.com/files/incl/action.php?type=clientStatus

172.67.203.64

200 OK

7.5 kB

URL GET HTTP/3
anz-myconnect.com/files/incl/action.php?type=clientStatus
IP
172.67.203.64:443
ASN
#13335 CLOUDFLARENET

Requested by
https://anz-myconnect.com/intl/secure.php
Certificate
IssuerGoogle Trust Services LLC
Subjectanz-myconnect.com
Fingerprint04:12:07:28:92:F0:6E:FD:0E:D6:48:9C:80:37:9D:D1:4C:B2:E9:80
ValidityWed, 08 May 2024 05:53:43 GMT - Tue, 06 Aug 2024 05:53:42 GMT

File type
data
Size
7.5 kB (7517 bytes)
Hash
e8b79d237f6841ece1692b13bcaf077c
868b03ceecf25c904f468a2db6731c6c2c9015cf
93122cca19981bd40939c1fd0b9c96ee0defb9c3c7d1a568dc4f321cbd761ff4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Australia and New Zealand Banking Group

HTTP Headers

GET /files/incl/action.php?type=clientStatus HTTP/1.1
Host: anz-myconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://anz-myconnect.com/intl/secure.php
Cookie: PHPSESSID=u6b15bauodui73sh8raim1jtt0; allowed=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 16:06:17 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
sec-fetch-site: same-origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n3%2BjgzdPAmBHEXv9wfOg8mRnosIKuKTrAARax2iTqMiyegLLWNe3M%2BF%2Bg0pYjXpOvQ078Y%2FuQz3av0%2FkwCc1%2BO%2FMaoigmbD%2FY7z1UQwGheL2SMuHo560YIPw%2BywoBcmtRyHKyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880ab2341b7c0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

anz-myconnect.com/intl/favicon.ico

172.67.203.64

404 Not Found

11 kB

URL GET HTTP/3
anz-myconnect.com/intl/favicon.ico
IP
172.67.203.64:443
ASN
#13335 CLOUDFLARENET

Requested by
https://anz-myconnect.com/intl/secure.php
Certificate
IssuerGoogle Trust Services LLC
Subjectanz-myconnect.com
Fingerprint04:12:07:28:92:F0:6E:FD:0E:D6:48:9C:80:37:9D:D1:4C:B2:E9:80
ValidityWed, 08 May 2024 05:53:43 GMT - Tue, 06 Aug 2024 05:53:42 GMT

File type
HTML document, ASCII text
Size
11 kB (11340 bytes)
Hash
62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Australia and New Zealand Banking Group

HTTP Headers

GET /intl/favicon.ico HTTP/1.1
Host: anz-myconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anz-myconnect.com/intl/secure.php
Cookie: PHPSESSID=u6b15bauodui73sh8raim1jtt0; allowed=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 404 Not Found
date: Wed, 08 May 2024 16:06:14 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: HIT
age: 118
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W%2BFkb8stQzX987F0om%2BU2BG56B3snDH2xXMSYpdO8YBAiNIO4qOHbf5HybnlBNC891ylj8vi%2Bu0tqx63Q6uUnxWN7JzqQUnChwx8LrpKdCpUUXyfVUNBqDH1G8tnnVKQG8w52Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ab221dbc90b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

anz-myconnect.com/files/js/jquery.js

172.67.203.64

200 OK

273 kB

URL GET HTTP/3
anz-myconnect.com/files/js/jquery.js
IP
172.67.203.64:443
ASN
#13335 CLOUDFLARENET

Requested by
https://anz-myconnect.com/intl/secure.php
Certificate
IssuerGoogle Trust Services LLC
Subjectanz-myconnect.com
Fingerprint04:12:07:28:92:F0:6E:FD:0E:D6:48:9C:80:37:9D:D1:4C:B2:E9:80
ValidityWed, 08 May 2024 05:53:43 GMT - Tue, 06 Aug 2024 05:53:42 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
273 kB (272615 bytes)
Hash
ac13f1827dee5a019a8be10299ba8053
c53344ce70a37981f58fab50761caa7dc51d874b
6ae7b5c5ea7a25e7ef6981689572c282667d8782312c703a6593424b34ad4cf9

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Australia and New Zealand Banking Group

HTTP Headers

GET /files/js/jquery.js HTTP/1.1
Host: anz-myconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anz-myconnect.com/intl/secure.php
Cookie: PHPSESSID=u6b15bauodui73sh8raim1jtt0; allowed=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 16:06:13 GMT
content-type: application/javascript
last-modified: Mon, 06 May 2024 13:30:21 GMT
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
sec-fetch-site: same-origin
cache-control: max-age=14400
cf-cache-status: HIT
age: 119
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f7DruqHYHLtFstuYDe09z1AvFZecyBvOhakN3Bg15xyP7EXOAq5lXkxsmJrtrVuFZt%2Bdyh5iDq%2F%2BD1Jc%2BbkvxdcbuRj9vnd%2F7KqRDFE0TZyrODLAlhG0qkrLYo2gQpK%2FYPfqTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880ab220c9f40b31-OSL
alt-svc: h3=":443"; ma=86400

anz-myconnect.com/files/img/anz-logo.1.0.0.svg

172.67.203.64

200 OK

4.0 kB

URL GET HTTP/3
anz-myconnect.com/files/img/anz-logo.1.0.0.svg
IP
172.67.203.64:443
ASN
#13335 CLOUDFLARENET

Requested by
https://anz-myconnect.com/intl/secure.php
Certificate
IssuerGoogle Trust Services LLC
Subjectanz-myconnect.com
Fingerprint04:12:07:28:92:F0:6E:FD:0E:D6:48:9C:80:37:9D:D1:4C:B2:E9:80
ValidityWed, 08 May 2024 05:53:43 GMT - Tue, 06 Aug 2024 05:53:42 GMT

File type
SVG Scalable Vector Graphics image
Size
4.0 kB (4027 bytes)
Hash
da3b07d6c67b2b5b57b13e05307a5688
7622a44037e74148febe9e1eedcf782b90407415
02dd8677ba85a6e3932c734ded971041568246e9f9230533da4ed8abb24657f6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Australia and New Zealand Banking Group

HTTP Headers

GET /files/img/anz-logo.1.0.0.svg HTTP/1.1
Host: anz-myconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anz-myconnect.com/intl/secure.php
Cookie: PHPSESSID=u6b15bauodui73sh8raim1jtt0; allowed=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 16:06:13 GMT
content-type: image/svg+xml
last-modified: Mon, 06 May 2024 13:30:22 GMT
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
sec-fetch-site: same-origin
cache-control: max-age=14400
cf-cache-status: HIT
age: 119
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h6zIEI%2B9YEJo7%2FAdghqFm8Jjow8OybiHGX5NM4GKOKF27Y2AVQ%2BU%2Bdl%2BCcVy3nqOX%2BuJWiOPgKdEZ8xr7vY1ApfZ%2FAxLNj21r7Ct19bdSsYW9M8wdFHSbJGMOsSapRBl%2BmMfWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ab220da040b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

anz-myconnect.com/files/js/login.js

172.67.203.64

200 OK

722 B

URL GET HTTP/3
anz-myconnect.com/files/js/login.js
IP
172.67.203.64:443
ASN
#13335 CLOUDFLARENET

Requested by
https://anz-myconnect.com/intl/secure.php
Certificate
IssuerGoogle Trust Services LLC
Subjectanz-myconnect.com
Fingerprint04:12:07:28:92:F0:6E:FD:0E:D6:48:9C:80:37:9D:D1:4C:B2:E9:80
ValidityWed, 08 May 2024 05:53:43 GMT - Tue, 06 Aug 2024 05:53:42 GMT

File type
JavaScript source, ASCII text, with very long lines (758), with no line terminators
Size
722 B (722 bytes)
Hash
bf8780a7a6f8865bd2246f348696b7f2
a7b1f71ae71ec4f92b7b33cafa9517070d511ec1
4b8d3490495f60b7d1bda7a55b09ccf00506a66e17bead63362eb27df7372dcd

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Australia and New Zealand Banking Group

HTTP Headers

GET /files/js/login.js HTTP/1.1
Host: anz-myconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anz-myconnect.com/intl/secure.php
Cookie: PHPSESSID=u6b15bauodui73sh8raim1jtt0; allowed=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 16:06:13 GMT
content-type: application/javascript
content-length: 364
last-modified: Mon, 06 May 2024 13:30:21 GMT
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
sec-fetch-site: same-origin
cache-control: max-age=14400
cf-cache-status: HIT
age: 119
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZD%2FFW8EvjmX8MjeAcmb2aNedcs00y1MZE6UqDtxel9UOCMjyZO7e%2BPlRqZS7v5YTePyIR9RYRyN5lIiijMZE1z1SJBiDbwadGfYvVl8W%2Bk8Yo3sy9JLkgxGNJRoxfxqSchrvqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880ab220da060b31-OSL
alt-svc: h3=":443"; ma=86400

anz-myconnect.com/files/img/ib-login-support.1.0.0.svg

172.67.203.64

200 OK

11 kB

URL GET HTTP/3
anz-myconnect.com/files/img/ib-login-support.1.0.0.svg
IP
172.67.203.64:443
ASN
#13335 CLOUDFLARENET

Requested by
https://anz-myconnect.com/intl/secure.php
Certificate
IssuerGoogle Trust Services LLC
Subjectanz-myconnect.com
Fingerprint04:12:07:28:92:F0:6E:FD:0E:D6:48:9C:80:37:9D:D1:4C:B2:E9:80
ValidityWed, 08 May 2024 05:53:43 GMT - Tue, 06 Aug 2024 05:53:42 GMT

File type
SVG Scalable Vector Graphics image
Size
11 kB (11037 bytes)
Hash
7161e4c581f1ab3712186d8482ad712e
407c7f0ba6ff7a0957af9f7e208ac4592e6a2db8
0f2f421d03f0dd094f5eeea11c1b78898bb8c38cdc6a9859627617bbb4db363e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Australia and New Zealand Banking Group

HTTP Headers

GET /files/img/ib-login-support.1.0.0.svg HTTP/1.1
Host: anz-myconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://anz-myconnect.com/intl/secure.php
Cookie: PHPSESSID=u6b15bauodui73sh8raim1jtt0; allowed=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 16:06:13 GMT
content-type: image/svg+xml
last-modified: Mon, 06 May 2024 13:30:22 GMT
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
sec-fetch-site: same-origin
cache-control: max-age=14400
cf-cache-status: HIT
age: 119
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jotnlvka8STqUzC1K0qW66TKBzAqrY%2BKcOG8BjbHPlXLpi%2BGGZr%2Bo6ap4qKbxXvIwccSo8FQV9SoXlFftEfczcMEVp0WrQYavvacdpEUHQxFmh5eJMmz78KTEoQPz4JseHtrrw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ab220da0c0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

anz-myconnect.com/

172.67.203.64

302 Found

15 kB

URL User Request GET HTTP/2
anz-myconnect.com/
IP
172.67.203.64:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectanz-myconnect.com
Fingerprint04:12:07:28:92:F0:6E:FD:0E:D6:48:9C:80:37:9D:D1:4C:B2:E9:80
ValidityWed, 08 May 2024 05:53:43 GMT - Tue, 06 Aug 2024 05:53:42 GMT

File type

Size
15 kB (14911 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Australia and New Zealand Banking Group

HTTP Headers

GET / HTTP/1.1
Host: anz-myconnect.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Wed, 08 May 2024 16:06:13 GMT
content-type: text/html; charset=UTF-8
location: intl/secure.php
set-cookie: PHPSESSID=u6b15bauodui73sh8raim1jtt0; path=/
allowed=1; expires=Wed, 08-May-2024 16:26:13 GMT; Max-Age=1200; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-content-type-options: nosniff
x-frame-options: sameorigin
x-xss-protection: 1; mode=block
sec-fetch-site: same-origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xCeThE12NuWI0XJ5UpuepmvfTH1eygKiM0yNyCy9RQZ5L%2FUTeQIRVvfETuoh0%2Bdz%2FFVpAcIArrYKZdH0BCwku5IWdQ5JTNw3VUBH511mkx8LC0mHOD5giH6dqv0vkCIEz%2FvKcw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880ab2112a9356c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (12)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN