Report - tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/

Report Overview

Submitted URL
tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
IP
54.37.43.133
ASN
#16276 OVH SAS
Submitted
2024-04-19 11:21:45
Access
public
Website Title
Authentication
Final URL
tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Tags
truist_bank financial phishing
urlquery detections
Phishing - Truist Bank

Detections

urlquery
19
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
edge.truist.com	unknown	2000-02-28	2023-01-12	2024-02-19	589 B	1.4 kB	63.140.62.17
tecmug.com	unknown	2019-11-02	2018-11-30	2024-04-16	12 kB	2.6 MB	54.37.43.133
assets.adobedtm.com	512	2013-11-22	2014-01-28	2024-04-18	1.4 kB	90 kB	23.38.200.237
dias.bank.truist.com	66751	2000-02-28	2021-03-10	2024-03-17	419 B	309 kB	104.69.222.209

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_AudienceManagement.min.js	25 kB	2023-03-07	2024-04-19
Pretty URL assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_AudienceManagement.min.js IP 23.38.200.237 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:03:29 Last Seen2024-04-19 19:50:30 Times Seen2864 Hash 26a8cd142b539700557eb4710c3d56bd 46452cb34f2c181ebe255c96c9ea9522f1537500 4858af0bdd1175d3f6c795eb053e7cae348ecb67f0633020d7d925c7672de871 Loading...

	assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js	34 kB	2023-03-07	2024-04-29
Pretty URL assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js IP 23.38.200.237 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:09 Last Seen2024-04-29 16:16:46 Times Seen2936 Hash d860c16ac938f7d839f0ec158d02d0f0 8710f81ed151233677f7e32b229cb35293dd6840 9219086b4f2c3bf77854b2e06ccd97ad32b9b7a140e65ff8b974a3bae6c7854c Loading...

	tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/runtime-es2015.b42f771083c62623ca4b.js	3.0 kB	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/runtime-es2015.b42f771083c62623ca4b.js IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen250 Hash c3cc45c45cc6d02130185e156bdb0f3f 5538e1668b135b7a954feeb4f5b3ed9a3f45c1e4 4a5dad158ef558ddedec3fdea1fc4aa8c87e4c93c69917b49b70b0fc5c5865f0 Loading...

	tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/scripts.a6cfc653854b6a67eb99.js	163 kB	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/scripts.a6cfc653854b6a67eb99.js IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen410 Hash c8d8210d5672cf4d4339c0744cfe3ea5 e7f89e4d8b8c76299fad9f7780c3eac8aa2fee46 46bd9cdad39cff9c0678c3e4bb59b2a194819aab312ede8bffeaf21206d7b73d Loading...

	tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/assets/js/dbc-min.js?v=1	1.0 kB	2023-03-08	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/assets/js/dbc-min.js?v=1 IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 12:47:06 Last Seen2024-04-19 19:50:30 Times Seen250 Hash b11f34c50275765a9b3a0acbe1bd75aa 6103a85e4b0cf9fdca904a5793fb8af8c7a6dcea 3a646c145be3980978aaa0740511189e7d4aaac97f7731321fddb3a3e52f1a35 Loading...

	tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/common-es2015.65e41840a2e71267fb04.js	887 B	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/common-es2015.65e41840a2e71267fb04.js IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen244 Hash 66497efc9f852d01178790523a0e23b6 79d016eefbbf9062f2946caa51574d9113eb4403 15bbc2b17708969e47a359d9c730c5035ee6167e42ff7344765ee94f833b668c Loading...

	tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/login-login-module-es2015.c8daa61cd67d2ba350cd.js	72 kB	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/login-login-module-es2015.c8daa61cd67d2ba350cd.js IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen415 Hash 2dd153e82de7d0cd15d9c294076c6d55 71ee55be17d96d75fb2c5969da0ca97d7b841cc2 e8130747319c4651f5e87b9d3901cc28a66b1372cc0ed73655cb086d1dae8144 Loading...

	tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/polyfills-es2015.28ce1eb91785797b28b8.js	37 kB	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/polyfills-es2015.28ce1eb91785797b28b8.js IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen412 Hash c8a47766604dd83f8025db57372c3f04 e2338d3ac0a4c9e5f3beb4df96da09c2b4566344 757ac073de32f9df2febd7b8a9fbfa79706a590e09cbccf550f3604ed88a8f7d Loading...

	tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/main-es2015.b81e0513991ddbc6f59b.js	2.0 MB	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/main-es2015.b81e0513991ddbc6f59b.js IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen237 Hash 3154d3c4aba316e80b2f5beed32e4ef4 aaf56158f57dc4e77b706ce1e62d76cf87a724c6 ee3eabebc663f17dccbcde12f6a15c482a432fadcc34087db9877f02742c4dff Loading...

	tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/	32 kB	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/ IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen211 Hash 6b3c391152b7a316459373c827c2835a 5e357b1fbe5620448532104006400fc41eaf6be4 95e50e623f13f5d4155343eba207aaeaea82edbb213a5bb251ca8fed16f4c79c Loading...

	assets.adobedtm.com/550322ae7d69/6277ebbccd21/launch-866a03735382.min.js	234 kB	2024-02-02	2024-04-19
Pretty URL assets.adobedtm.com/550322ae7d69/6277ebbccd21/launch-866a03735382.min.js IP 23.38.200.237 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-02 03:29:07 Last Seen2024-04-19 19:50:30 Times Seen90 Hash 50ae1852aa9c906c3faff1b48f7605e1 e492bd5dc51cfbcff95d24fdf7eb357f5865f3fa 8b07e2f546bad3bfcb4f51d68c8054c49ab26377e796e7298b4bed7a5d6150db Loading...

	dias.bank.truist.com/ui/scripts/truist_common.js	309 kB	2024-04-19	2024-04-19
Pretty URL dias.bank.truist.com/ui/scripts/truist_common.js IP 104.69.222.209 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-19 13:21:46 Last Seen2024-04-19 13:21:47 Times Seen2 Hash afbaea4700a9e5307a4f9262cd784444 07b553b838c4a079e2139bcebdb29d2334f102a1 479a50f3640a115c3727e1f6c8cc9fa98d762ea25c363b69b85f79297ce42527 Loading...

HTTP Transactions (21)

URL IP Response Size

tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/assets/logos/trulogo_horz-trupurple.png

54.37.43.133

200 OK

4.4 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/assets/logos/trulogo_horz-trupurple.png
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
PNG image data, 365 x 86, 8-bit/color RGBA, non-interlaced
Size
4.4 kB (4376 bytes)
Hash
fe2af793fe57fcace53f91cfed335a8e
250d1d12ba58cade61d74f7f61dbc90bf2556bda
d2e2e20fc9729fb0389392bde5a8fd1b4cb390dd8689ce7a1c3fe83cc91b0d52

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/assets/logos/trulogo_horz-trupurple.png HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
DNT: 1
Connection: keep-alive
Cookie: dtCookie=v_4_srv_-2D22_sn_NTIB5M4E4OKBSAHV0JTG4IK5U0UVTJ30; rxVisitor=1713525678497HFGR6MILA6N155OP52DU3PID1NSE1NH6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 11:21:18 GMT
content-type: image/png
content-length: 4376
last-modified: Fri, 19 Apr 2024 06:15:32 GMT
vary: Accept-Encoding
etag: "66220c04-1118"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/assets/logos/tru_lg_hrz_rgb_wht_rev.png

54.37.43.133

200 OK

15 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/assets/logos/tru_lg_hrz_rgb_wht_rev.png
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
PNG image data, 1927 x 767, 8-bit/color RGBA, non-interlaced
Size
15 kB (14599 bytes)
Hash
84796985e04a9f463f26293d1919f3c4
db0a67a0de6fe6a06c4254b82e72e64ed80f0400
d938ee89009d30e5f4abe089c40c5d3ef3b4ae7e1965d451faadb7e61ccc32d9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/assets/logos/tru_lg_hrz_rgb_wht_rev.png HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
DNT: 1
Connection: keep-alive
Cookie: dtCookie=v_4_srv_-2D22_sn_NTIB5M4E4OKBSAHV0JTG4IK5U0UVTJ30; rxVisitor=1713525678497HFGR6MILA6N155OP52DU3PID1NSE1NH6; dtPC=-22$525678492_888h-vHKRWPEEVPUPHVHRVBHFPCLWKQHMIPDKV-0e0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 11:21:18 GMT
content-type: image/png
content-length: 14599
last-modified: Fri, 19 Apr 2024 06:15:32 GMT
vary: Accept-Encoding
etag: "66220c04-3907"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2

assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_AudienceManagement.min.js

23.38.200.237

200 OK

8.8 kB

URL GET HTTP/2
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_AudienceManagement.min.js
IP
23.38.200.237:443
ASN
#16625 AKAMAI-AS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (24999)
Size
8.8 kB (8753 bytes)
Hash
26a8cd142b539700557eb4710c3d56bd
46452cb34f2c181ebe255c96c9ea9522f1537500
4858af0bdd1175d3f6c795eb053e7cae348ecb67f0633020d7d925c7672de871

HTTP Headers

GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_AudienceManagement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "26a8cd142b539700557eb4710c3d56bd:1644856531.982003"
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 8753
expires: Fri, 19 Apr 2024 12:21:18 GMT
date: Fri, 19 Apr 2024 11:21:18 GMT
cache-control: no-cache
access-control-allow-origin: https://tecmug.com
timing-allow-origin: *
X-Firefox-Spdy: h2

assets.adobedtm.com/550322ae7d69/6277ebbccd21/launch-866a03735382.min.js

23.38.200.237

200 OK

68 kB

URL GET HTTP/2
assets.adobedtm.com/550322ae7d69/6277ebbccd21/launch-866a03735382.min.js
IP
23.38.200.237:443
ASN
#16625 AKAMAI-AS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32768)
Size
68 kB (67703 bytes)
Hash
50ae1852aa9c906c3faff1b48f7605e1
e492bd5dc51cfbcff95d24fdf7eb357f5865f3fa
8b07e2f546bad3bfcb4f51d68c8054c49ab26377e796e7298b4bed7a5d6150db

HTTP Headers

GET /550322ae7d69/6277ebbccd21/launch-866a03735382.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "50ae1852aa9c906c3faff1b48f7605e1:1695860704.209898"
last-modified: Thu, 28 Sep 2023 00:25:04 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 67703
cache-control: max-age=3600
expires: Fri, 19 Apr 2024 12:21:18 GMT
date: Fri, 19 Apr 2024 11:21:18 GMT
access-control-allow-origin: https://tecmug.com
timing-allow-origin: *
X-Firefox-Spdy: h2

assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js

23.38.200.237

200 OK

12 kB

URL GET HTTP/2
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
IP
23.38.200.237:443
ASN
#16625 AKAMAI-AS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32768)
Size
12 kB (12163 bytes)
Hash
d860c16ac938f7d839f0ec158d02d0f0
8710f81ed151233677f7e32b229cb35293dd6840
9219086b4f2c3bf77854b2e06ccd97ad32b9b7a140e65ff8b974a3bae6c7854c

HTTP Headers

GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "d860c16ac938f7d839f0ec158d02d0f0:1644856531.418573"
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
expires: Fri, 19 Apr 2024 12:21:18 GMT
date: Fri, 19 Apr 2024 11:21:18 GMT
content-length: 12163
cache-control: no-cache
access-control-allow-origin: https://tecmug.com
timing-allow-origin: *
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/scripts.a6cfc653854b6a67eb99.js

54.37.43.133

200 OK

51 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/scripts.a6cfc653854b6a67eb99.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
51 kB (51291 bytes)
Hash
c8d8210d5672cf4d4339c0744cfe3ea5
e7f89e4d8b8c76299fad9f7780c3eac8aa2fee46
46bd9cdad39cff9c0678c3e4bb59b2a194819aab312ede8bffeaf21206d7b73d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/scripts.a6cfc653854b6a67eb99.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
DNT: 1
Connection: keep-alive
Cookie: dtCookie=v_4_srv_-2D22_sn_NTIB5M4E4OKBSAHV0JTG4IK5U0UVTJ30; rxVisitor=1713525678497HFGR6MILA6N155OP52DU3PID1NSE1NH6; dtPC=-22$525678492_888h1vHKRWPEEVPUPHVHRVBHFPCLWKQHMIPDKV-0e0; rxvt=1713527478499|1713525678499
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 11:21:18 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 06:15:32 GMT
vary: Accept-Encoding
etag: W/"66220c04-27cff"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 11:21:18 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/styles_r.css?20220610_2131

54.37.43.133

200 OK

24 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/styles_r.css?20220610_2131
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size
24 kB (23533 bytes)
Hash
b17058794e54b509d21d91114bc36d1d
c922d83836190f7cf211d995bf4c091d88eb320c
04e1c9cd4835ee9c67383a3a4b31b455b49be13c90bf3cbc0ec87540c074232b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/styles_r.css?20220610_2131 HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 11:21:18 GMT
content-type: text/css
last-modified: Fri, 19 Apr 2024 06:15:32 GMT
vary: Accept-Encoding
etag: W/"66220c04-291c0"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 11:21:18 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/assets/images/father-son.png

54.37.43.133

200 OK

140 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/assets/images/father-son.png
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1600, components 3
Size
140 kB (140237 bytes)
Hash
13ef1dd9531309bed82c8587228ecb23
322ea99d980c4266d0d6ec4034994545b351e73f
2fb0edc4309fcb422b5a0a0649b316449435e6a4f9ae2f3dc294d4c207028d25

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/assets/images/father-son.png HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
DNT: 1
Connection: keep-alive
Cookie: dtCookie=v_4_srv_-2D22_sn_NTIB5M4E4OKBSAHV0JTG4IK5U0UVTJ30; rxVisitor=1713525678497HFGR6MILA6N155OP52DU3PID1NSE1NH6; dtPC=-22$525678492_888h1vHKRWPEEVPUPHVHRVBHFPCLWKQHMIPDKV-0e0; rxvt=1713527478499|1713525678499; kndctr_AA7A3BC75245B3BC0A490D4D_AdobeOrg_cluster=irl1; kndctr_AA7A3BC75245B3BC0A490D4D_AdobeOrg_identity=CiY1NTg2ODQ4NTQyMzU2NTU3MjAxMzc1NDU1NDc2MzUzOTgzODQ1MVITCPTG27DvMRABGAEqBElSTDEwAPAB9cbbsO8x; AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=MCMID|55868485423565572013754554763539838451
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 11:21:20 GMT
content-type: image/png
content-length: 140237
last-modified: Fri, 19 Apr 2024 06:15:32 GMT
vary: Accept-Encoding
etag: "66220c04-223cd"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/common-es2015.65e41840a2e71267fb04.js

54.37.43.133

200 OK

12 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/common-es2015.65e41840a2e71267fb04.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (887), with no line terminators
Size
12 kB (12036 bytes)
Hash
66497efc9f852d01178790523a0e23b6
79d016eefbbf9062f2946caa51574d9113eb4403
15bbc2b17708969e47a359d9c730c5035ee6167e42ff7344765ee94f833b668c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/common-es2015.65e41840a2e71267fb04.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 11:21:18 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 06:15:32 GMT
vary: Accept-Encoding
etag: W/"66220c04-377"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 11:21:18 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/styles.e0ebcc1d1647e0620502.css

54.37.43.133

200 OK

18 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/styles.e0ebcc1d1647e0620502.css
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
18 kB (17881 bytes)
Hash
92544faa78a609d6690809c36ab71df2
3dd292185056c3cbc2c5f6e60ecb8d76a11dd2a4
9c991b792a64c5eed8bdcf878f5bafb8638ff1dc9a9dfacbbffe8f9b57de9376

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/styles.e0ebcc1d1647e0620502.css HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 11:21:18 GMT
content-type: text/css
last-modified: Fri, 19 Apr 2024 06:15:32 GMT
vary: Accept-Encoding
etag: W/"66220c04-12006"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 11:21:18 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/login-login-module-es2015.c8daa61cd67d2ba350cd.js

54.37.43.133

200 OK

20 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/login-login-module-es2015.c8daa61cd67d2ba350cd.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
20 kB (19997 bytes)
Hash
2dd153e82de7d0cd15d9c294076c6d55
71ee55be17d96d75fb2c5969da0ca97d7b841cc2
e8130747319c4651f5e87b9d3901cc28a66b1372cc0ed73655cb086d1dae8144

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/login-login-module-es2015.c8daa61cd67d2ba350cd.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 11:21:18 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 06:15:32 GMT
vary: Accept-Encoding
etag: W/"66220c04-1181d"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 11:21:18 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/

54.37.43.133

200 OK

247 kB

URL User Request GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type

Size
247 kB (247084 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/ HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 11:21:18 GMT
content-type: text/html
last-modified: Fri, 19 Apr 2024 06:15:33 GMT
vary: Accept-Encoding
etag: W/"66220c05-3c52c"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/main-es2015.b81e0513991ddbc6f59b.js

54.37.43.133

200 OK

2.0 MB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/main-es2015.b81e0513991ddbc6f59b.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type

Size
2.0 MB (2020871 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/main-es2015.b81e0513991ddbc6f59b.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
DNT: 1
Connection: keep-alive
Cookie: dtCookie=v_4_srv_-2D22_sn_NTIB5M4E4OKBSAHV0JTG4IK5U0UVTJ30; rxVisitor=1713525678497HFGR6MILA6N155OP52DU3PID1NSE1NH6; dtPC=-22$525678492_888h1vHKRWPEEVPUPHVHRVBHFPCLWKQHMIPDKV-0e0; rxvt=1713527478499|1713525678499
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 11:21:18 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 06:15:32 GMT
vary: Accept-Encoding
etag: W/"66220c04-1ed607"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 11:21:18 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/favicon.ico

54.37.43.133

404 Not Found

146 B

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/favicon.ico
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
HTML document, ASCII text, with no line terminators
Size
146 B (146 bytes)
Hash
40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca

HTTP Headers

GET /wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/favicon.ico HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
DNT: 1
Connection: keep-alive
Cookie: dtCookie=v_4_srv_-2D22_sn_NTIB5M4E4OKBSAHV0JTG4IK5U0UVTJ30; rxVisitor=1713525678497HFGR6MILA6N155OP52DU3PID1NSE1NH6; dtPC=-22$525678492_888h1vHKRWPEEVPUPHVHRVBHFPCLWKQHMIPDKV-0e0; rxvt=1713527478499|1713525678499; kndctr_AA7A3BC75245B3BC0A490D4D_AdobeOrg_cluster=irl1; kndctr_AA7A3BC75245B3BC0A490D4D_AdobeOrg_identity=CiY1NTg2ODQ4NTQyMzU2NTU3MjAxMzc1NDU1NDc2MzUzOTgzODQ1MVITCPTG27DvMRABGAEqBElSTDEwAPAB9cbbsO8x; AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=MCMID|55868485423565572013754554763539838451
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 11:21:20 GMT
content-type: text/html
vary: Accept-Encoding
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: public, no-transform
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/ui/ruxitagentjs_A27Vfgqrux_10229211201102017.js

54.37.43.133

404 Not Found

0 B

URL GET HTTP/2
tecmug.com/ui/ruxitagentjs_A27Vfgqrux_10229211201102017.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /ui/ruxitagentjs_A27Vfgqrux_10229211201102017.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 11:21:18 GMT
content-type: text/html
vary: Accept-Encoding
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: public, no-transform
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/assets/js/dbc-min.js?v=1

54.37.43.133

200 OK

1.0 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/assets/js/dbc-min.js?v=1
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (1072), with no line terminators
Size
1.0 kB (1009 bytes)
Hash
5933578ff7d54a8cad23b057e0099743
f5094c9656af30726aa3b0d1ccff37131584e841
6600617c8beb51a37d6dae0408b040e9c3445f61fcc4db951076521f3ec8ad5f

HTTP Headers

GET /wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/assets/js/dbc-min.js?v=1 HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 11:21:18 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 06:15:32 GMT
vary: Accept-Encoding
etag: W/"66220c04-3f1"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 11:21:18 GMT
content-encoding: br
X-Firefox-Spdy: h2

dias.bank.truist.com/ui/scripts/truist_common.js

104.69.222.209

200 OK

309 kB

URL GET HTTP/2
dias.bank.truist.com/ui/scripts/truist_common.js
IP
104.69.222.209:443
ASN
#20940 Akamai International B.V.

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerEntrust, Inc.
Subjectw3.truist.com
Fingerprint90:59:F1:F6:1C:1C:16:DC:93:16:65:FE:4C:EB:E8:1D:A6:19:1E:31
ValidityFri, 16 Feb 2024 19:45:45 GMT - Sun, 16 Mar 2025 19:45:44 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
309 kB (308686 bytes)
Hash
afbaea4700a9e5307a4f9262cd784444
07b553b838c4a079e2139bcebdb29d2334f102a1
479a50f3640a115c3727e1f6c8cc9fa98d762ea25c363b69b85f79297ce42527

HTTP Headers

GET /ui/scripts/truist_common.js HTTP/1.1
Host: dias.bank.truist.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
x-ion-hop: 1
expires: 0
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, private, no-cache, no-store
date: Fri, 19 Apr 2024 11:21:19 GMT
set-cookie: CPE0rYlC=A5vkFvaOAQAAA_-o21juLZN0hcIdT0kzxytcf7N2XEUtnAeERigfBXC_2ziaAVtaKpqcuC2nwH8AADQwAAAAAA|1|0|42d3a97884c9b0eedf57d46d5b68c002d2aee6d6; Path=/; Max-Age=1577847600; Domain=truist.com
netcookie-h2-dias.bank.truist.com=!sz9UlLJ7vbdS+4e10gAQAUQFDFkC/aGCA3t+KRVUKdhL6sXfLuQWNphc5SbmKmNsvBQrvOboK/hIAlwgA4z3O91rhcSgpEQG5wjS/7cCGQ==; path=/; Httponly; Secure
ak_origin_dias.bank.truist.com=H2; max-age=900; path=/; secure; HttpOnly; SameSite=None
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/runtime-es2015.b42f771083c62623ca4b.js

54.37.43.133

200 OK

3.0 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/runtime-es2015.b42f771083c62623ca4b.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (3127), with no line terminators
Size
3.0 kB (3026 bytes)
Hash
52762b43b6b2c65490f01d09349645c6
6133d46e66c478f7e8a013865ee370c595f39107
eeb33800b7dbe7c4354dcc911c4f7ba05140f8d448398dfe1b855ff58362f0da

HTTP Headers

GET /wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/runtime-es2015.b42f771083c62623ca4b.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
DNT: 1
Connection: keep-alive
Cookie: dtCookie=v_4_srv_-2D22_sn_NTIB5M4E4OKBSAHV0JTG4IK5U0UVTJ30; rxVisitor=1713525678497HFGR6MILA6N155OP52DU3PID1NSE1NH6; dtPC=-22$525678492_888h-vHKRWPEEVPUPHVHRVBHFPCLWKQHMIPDKV-0e0; rxvt=1713527478499|1713525678499
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 11:21:18 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 06:15:33 GMT
vary: Accept-Encoding
etag: W/"66220c05-bd2"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 11:21:18 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/assets/tru-core-icon-sprite.svg

54.37.43.133

404 Not Found

146 B

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/assets/tru-core-icon-sprite.svg
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
HTML document, ASCII text, with no line terminators
Size
146 B (146 bytes)
Hash
40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca

HTTP Headers

GET /wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/assets/tru-core-icon-sprite.svg HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
DNT: 1
Connection: keep-alive
Cookie: dtCookie=v_4_srv_-2D22_sn_NTIB5M4E4OKBSAHV0JTG4IK5U0UVTJ30; rxVisitor=1713525678497HFGR6MILA6N155OP52DU3PID1NSE1NH6; dtPC=-22$525678492_888h1vHKRWPEEVPUPHVHRVBHFPCLWKQHMIPDKV-0e0; rxvt=1713527478499|1713525678499; kndctr_AA7A3BC75245B3BC0A490D4D_AdobeOrg_cluster=irl1; kndctr_AA7A3BC75245B3BC0A490D4D_AdobeOrg_identity=CiY1NTg2ODQ4NTQyMzU2NTU3MjAxMzc1NDU1NDc2MzUzOTgzODQ1MVITCPTG27DvMRABGAEqBElSTDEwAPAB9cbbsO8x; AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=MCMID|55868485423565572013754554763539838451
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 11:21:20 GMT
content-type: text/html
vary: Accept-Encoding
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: public, no-transform
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/polyfills-es2015.28ce1eb91785797b28b8.js

54.37.43.133

200 OK

37 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/polyfills-es2015.28ce1eb91785797b28b8.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (36710), with no line terminators
Size
37 kB (36710 bytes)
Hash
c8a47766604dd83f8025db57372c3f04
e2338d3ac0a4c9e5f3beb4df96da09c2b4566344
757ac073de32f9df2febd7b8a9fbfa79706a590e09cbccf550f3604ed88a8f7d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/polyfills-es2015.28ce1eb91785797b28b8.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
DNT: 1
Connection: keep-alive
Cookie: dtCookie=v_4_srv_-2D22_sn_NTIB5M4E4OKBSAHV0JTG4IK5U0UVTJ30; rxVisitor=1713525678497HFGR6MILA6N155OP52DU3PID1NSE1NH6; dtPC=-22$525678492_888h1vHKRWPEEVPUPHVHRVBHFPCLWKQHMIPDKV-0e0; rxvt=1713527478499|1713525678499
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 11:21:18 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 06:15:32 GMT
vary: Accept-Encoding
etag: W/"66220c04-8f66"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 11:21:18 GMT
content-encoding: br
X-Firefox-Spdy: h2

edge.truist.com/ee/v1/identity/acquire?configId=13c39053-4020-4247-96a1-7891f0a10dc0&requestId=290e8a0d-3187-4e81-9f4f-dac52b3cd07f

63.140.62.17

200 OK

731 B

URL POST HTTP/2
edge.truist.com/ee/v1/identity/acquire?configId=13c39053-4020-4247-96a1-7891f0a10dc0&requestId=290e8a0d-3187-4e81-9f4f-dac52b3cd07f
IP
63.140.62.17:443
ASN
#16509 AMAZON-02

Requested by
https://tecmug.com/wp-content/app/truistverifyz/db481faa085856390ea334d1a35c0e50/+t-===.html?ip=71.84.169.55/
Certificate
IssuerEntrust, Inc.
Subjectedge.truist.com
Fingerprint93:8F:00:28:86:F8:B8:09:40:91:FD:11:A8:CC:70:AC:77:19:53:D2
ValidityThu, 25 Jan 2024 14:02:38 GMT - Tue, 25 Feb 2025 14:02:37 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (827), with no line terminators
Size
731 B (731 bytes)
Hash
45f67f16108aaa1d69ce306aabc4579b
bf9aa629c268f7610bbadc8e4ead814cb78967a5
2ca9eba32b794d6507e42a06e8bd3bbd3cae66f1a3ea49a8e8486939cd237b25

HTTP Headers

POST /ee/v1/identity/acquire?configId=13c39053-4020-4247-96a1-7891f0a10dc0&requestId=290e8a0d-3187-4e81-9f4f-dac52b3cd07f HTTP/1.1
Host: edge.truist.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 125
Origin: https://tecmug.com
DNT: 1
Connection: keep-alive
Referer: https://tecmug.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-request-id: 290e8a0d-3187-4e81-9f4f-dac52b3cd07f
vary: Origin
access-control-allow-origin: https://tecmug.com
access-control-allow-credentials: true
access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID
date: Fri, 19 Apr 2024 11:21:18 GMT
x-konductor: N/A
x-adobe-edge: IRL1;6
server: jag
content-encoding: gzip
content-type: application/json;charset=utf-8
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML