Report - tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93

Report Overview

Submitted URL
tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
IP
54.37.43.133
ASN
#16276 OVH SAS
Submitted
2024-04-19 13:03:23
Access
public
Website Title
Authentication
Final URL
tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Tags
truist_bank financial phishing
urlquery detections
Phishing - Truist Bank

Detections

urlquery
23
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
edge.truist.com	unknown	2000-02-28	2023-01-12	2024-02-19	601 B	1.6 kB	63.140.62.222
dias.bank.truist.com	66751	2000-02-28	2021-03-10	2024-03-17	419 B	315 kB	95.101.10.192
tecmug.com	unknown	2019-11-02	2018-11-30	2024-04-16	11 kB	2.6 MB	54.37.43.133
assets.adobedtm.com	512	2013-11-22	2014-01-28	2024-04-18	1.4 kB	256 kB	2.18.172.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	assets.adobedtm.com/550322ae7d69/6277ebbccd21/launch-866a03735382.min.js	234 kB	2024-02-02	2024-04-19
Pretty URL assets.adobedtm.com/550322ae7d69/6277ebbccd21/launch-866a03735382.min.js IP 2.18.172.233 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-02 03:29:07 Last Seen2024-04-19 19:50:30 Times Seen90 Hash 50ae1852aa9c906c3faff1b48f7605e1 e492bd5dc51cfbcff95d24fdf7eb357f5865f3fa 8b07e2f546bad3bfcb4f51d68c8054c49ab26377e796e7298b4bed7a5d6150db Loading...

	assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js	34 kB	2023-03-07	2024-04-29
Pretty URL assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js IP 2.18.172.233 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:09 Last Seen2024-04-29 16:16:46 Times Seen2936 Hash d860c16ac938f7d839f0ec158d02d0f0 8710f81ed151233677f7e32b229cb35293dd6840 9219086b4f2c3bf77854b2e06ccd97ad32b9b7a140e65ff8b974a3bae6c7854c Loading...

	tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/main-es2015.b81e0513991ddbc6f59b.js	2.0 MB	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/main-es2015.b81e0513991ddbc6f59b.js IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen237 Hash 3154d3c4aba316e80b2f5beed32e4ef4 aaf56158f57dc4e77b706ce1e62d76cf87a724c6 ee3eabebc663f17dccbcde12f6a15c482a432fadcc34087db9877f02742c4dff Loading...

	tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93	32 kB	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93 IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen211 Hash 6b3c391152b7a316459373c827c2835a 5e357b1fbe5620448532104006400fc41eaf6be4 95e50e623f13f5d4155343eba207aaeaea82edbb213a5bb251ca8fed16f4c79c Loading...

	tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/common-es2015.65e41840a2e71267fb04.js	887 B	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/common-es2015.65e41840a2e71267fb04.js IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen244 Hash 66497efc9f852d01178790523a0e23b6 79d016eefbbf9062f2946caa51574d9113eb4403 15bbc2b17708969e47a359d9c730c5035ee6167e42ff7344765ee94f833b668c Loading...

	tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/login-login-module-es2015.c8daa61cd67d2ba350cd.js	72 kB	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/login-login-module-es2015.c8daa61cd67d2ba350cd.js IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen415 Hash 2dd153e82de7d0cd15d9c294076c6d55 71ee55be17d96d75fb2c5969da0ca97d7b841cc2 e8130747319c4651f5e87b9d3901cc28a66b1372cc0ed73655cb086d1dae8144 Loading...

	tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/runtime-es2015.b42f771083c62623ca4b.js	3.0 kB	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/runtime-es2015.b42f771083c62623ca4b.js IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen250 Hash c3cc45c45cc6d02130185e156bdb0f3f 5538e1668b135b7a954feeb4f5b3ed9a3f45c1e4 4a5dad158ef558ddedec3fdea1fc4aa8c87e4c93c69917b49b70b0fc5c5865f0 Loading...

	dias.bank.truist.com/ui/scripts/truist_common.js	314 kB	2024-04-19	2024-04-19
Pretty URL dias.bank.truist.com/ui/scripts/truist_common.js IP 95.101.10.192 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-19 15:03:24 Last Seen2024-04-19 15:03:25 Times Seen2 Hash edc9815de6fa2c1bbe9a559619eb958b bcf2c75c36adaadf15f1d2ba886c2d2d765d2db4 cea1e4a307432457cb33f0f3da11e3a65cb4595530fa259be1b636389bb176d9 Loading...

	tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/polyfills-es2015.28ce1eb91785797b28b8.js	37 kB	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/polyfills-es2015.28ce1eb91785797b28b8.js IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen412 Hash c8a47766604dd83f8025db57372c3f04 e2338d3ac0a4c9e5f3beb4df96da09c2b4566344 757ac073de32f9df2febd7b8a9fbfa79706a590e09cbccf550f3604ed88a8f7d Loading...

	tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/assets/js/dbc-min.js?v=1	1.0 kB	2023-03-08	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/assets/js/dbc-min.js?v=1 IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 12:47:06 Last Seen2024-04-19 19:50:30 Times Seen250 Hash b11f34c50275765a9b3a0acbe1bd75aa 6103a85e4b0cf9fdca904a5793fb8af8c7a6dcea 3a646c145be3980978aaa0740511189e7d4aaac97f7731321fddb3a3e52f1a35 Loading...

	assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_AudienceManagement.min.js	25 kB	2023-03-07	2024-04-19
Pretty URL assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_AudienceManagement.min.js IP 2.18.172.233 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:03:29 Last Seen2024-04-19 19:50:30 Times Seen2864 Hash 26a8cd142b539700557eb4710c3d56bd 46452cb34f2c181ebe255c96c9ea9522f1537500 4858af0bdd1175d3f6c795eb053e7cae348ecb67f0633020d7d925c7672de871 Loading...

	tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/scripts.a6cfc653854b6a67eb99.js	163 kB	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/scripts.a6cfc653854b6a67eb99.js IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen410 Hash c8d8210d5672cf4d4339c0744cfe3ea5 e7f89e4d8b8c76299fad9f7780c3eac8aa2fee46 46bd9cdad39cff9c0678c3e4bb59b2a194819aab312ede8bffeaf21206d7b73d Loading...

HTTP Transactions (21)

URL IP Response Size

tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/assets/logos/trulogo_horz-trupurple.png

54.37.43.133

200 OK

4.4 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/assets/logos/trulogo_horz-trupurple.png
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
PNG image data, 365 x 86, 8-bit/color RGBA, non-interlaced
Size
4.4 kB (4376 bytes)
Hash
fe2af793fe57fcace53f91cfed335a8e
250d1d12ba58cade61d74f7f61dbc90bf2556bda
d2e2e20fc9729fb0389392bde5a8fd1b4cb390dd8689ce7a1c3fe83cc91b0d52

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/assets/logos/trulogo_horz-trupurple.png HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 13:02:56 GMT
content-type: image/png
content-length: 4376
last-modified: Fri, 19 Apr 2024 10:45:47 GMT
vary: Accept-Encoding
etag: "66224b5b-1118"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/assets/logos/tru_lg_hrz_rgb_wht_rev.png

54.37.43.133

200 OK

15 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/assets/logos/tru_lg_hrz_rgb_wht_rev.png
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
PNG image data, 1927 x 767, 8-bit/color RGBA, non-interlaced
Size
15 kB (14599 bytes)
Hash
84796985e04a9f463f26293d1919f3c4
db0a67a0de6fe6a06c4254b82e72e64ed80f0400
d938ee89009d30e5f4abe089c40c5d3ef3b4ae7e1965d451faadb7e61ccc32d9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/assets/logos/tru_lg_hrz_rgb_wht_rev.png HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 13:02:56 GMT
content-type: image/png
content-length: 14599
last-modified: Fri, 19 Apr 2024 10:45:47 GMT
vary: Accept-Encoding
etag: "66224b5b-3907"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2

assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_AudienceManagement.min.js

2.18.172.233

200 OK

8.8 kB

URL GET HTTP/2
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_AudienceManagement.min.js
IP
2.18.172.233:443
ASN
#16625 AKAMAI-AS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (24999)
Size
8.8 kB (8753 bytes)
Hash
26a8cd142b539700557eb4710c3d56bd
46452cb34f2c181ebe255c96c9ea9522f1537500
4858af0bdd1175d3f6c795eb053e7cae348ecb67f0633020d7d925c7672de871

HTTP Headers

GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_AudienceManagement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "26a8cd142b539700557eb4710c3d56bd:1644856531.982003"
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 8753
expires: Fri, 19 Apr 2024 14:02:56 GMT
date: Fri, 19 Apr 2024 13:02:56 GMT
cache-control: no-cache
access-control-allow-origin: https://tecmug.com
timing-allow-origin: *
X-Firefox-Spdy: h2

assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js

2.18.172.233

200 OK

12 kB

URL GET HTTP/2
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
IP
2.18.172.233:443
ASN
#16625 AKAMAI-AS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32768)
Size
12 kB (12163 bytes)
Hash
d860c16ac938f7d839f0ec158d02d0f0
8710f81ed151233677f7e32b229cb35293dd6840
9219086b4f2c3bf77854b2e06ccd97ad32b9b7a140e65ff8b974a3bae6c7854c

HTTP Headers

GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "d860c16ac938f7d839f0ec158d02d0f0:1644856531.418573"
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 12163
x-akamai-ew-subworker: 8096267
expires: Fri, 19 Apr 2024 14:02:56 GMT
date: Fri, 19 Apr 2024 13:02:56 GMT
cache-control: no-cache
access-control-allow-origin: https://tecmug.com
timing-allow-origin: *
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93

54.37.43.133

200 OK

104 kB

URL User Request GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (32116), with CRLF line terminators
Size
104 kB (104047 bytes)
Hash
a7aaaac41102c572dfd918c84ab18acc
6697e35d9d8a3d9776c3845b844e4ce9e8c5e348
c11bd9ebb22ef8738606b6792cc9d4e275b2673e6c5d97484c3704d87972eee2

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93 HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 13:02:56 GMT
content-type: text/html
last-modified: Fri, 19 Apr 2024 10:45:47 GMT
vary: Accept-Encoding
etag: W/"66224b5b-3c52c"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: br
X-Firefox-Spdy: h2

edge.truist.com/ee/v1/identity/acquire?configId=13c39053-4020-4247-96a1-7891f0a10dc0&requestId=c1ab2ea7-3ee4-4cb3-a2ae-ccb0dbfd69ca

63.140.62.222

200 OK

930 B

URL POST HTTP/2
edge.truist.com/ee/v1/identity/acquire?configId=13c39053-4020-4247-96a1-7891f0a10dc0&requestId=c1ab2ea7-3ee4-4cb3-a2ae-ccb0dbfd69ca
IP
63.140.62.222:443
ASN
#16509 AMAZON-02

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerEntrust, Inc.
Subjectedge.truist.com
Fingerprint93:8F:00:28:86:F8:B8:09:40:91:FD:11:A8:CC:70:AC:77:19:53:D2
ValidityThu, 25 Jan 2024 14:02:38 GMT - Tue, 25 Feb 2025 14:02:37 GMT

File type
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size
930 B (930 bytes)
Hash
6f7a44513aaec6677bf8d5aa663a7f4b
f8f7feac59734c098fdb60f2b1da23c897901d79
3dacdeee72974385fe8faa6f3e541aeec5dac4e45aa2913d14fc7205cae4e0d9

HTTP Headers

POST /ee/v1/identity/acquire?configId=13c39053-4020-4247-96a1-7891f0a10dc0&requestId=c1ab2ea7-3ee4-4cb3-a2ae-ccb0dbfd69ca HTTP/1.1
Host: edge.truist.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 125
Origin: https://tecmug.com
DNT: 1
Connection: keep-alive
Referer: https://tecmug.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-request-id: c1ab2ea7-3ee4-4cb3-a2ae-ccb0dbfd69ca
vary: Origin
access-control-allow-origin: https://tecmug.com
access-control-allow-credentials: true
access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID
date: Fri, 19 Apr 2024 13:02:56 GMT
x-konductor: N/A
x-adobe-edge: IRL1;6
server: jag
content-encoding: gzip
content-type: application/json;charset=utf-8
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/polyfills-es2015.28ce1eb91785797b28b8.js

54.37.43.133

200 OK

21 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/polyfills-es2015.28ce1eb91785797b28b8.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (36710), with no line terminators
Size
21 kB (20868 bytes)
Hash
c8a47766604dd83f8025db57372c3f04
e2338d3ac0a4c9e5f3beb4df96da09c2b4566344
757ac073de32f9df2febd7b8a9fbfa79706a590e09cbccf550f3604ed88a8f7d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/polyfills-es2015.28ce1eb91785797b28b8.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
DNT: 1
Connection: keep-alive
Cookie: dtCookie=v_4_srv_-2D37_sn_QUS6J7T4BLSUTD74QBO9ROTUR5DN3J31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 13:02:56 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 10:45:47 GMT
vary: Accept-Encoding
etag: W/"66224b5b-8f66"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 13:02:56 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/common-es2015.65e41840a2e71267fb04.js

54.37.43.133

200 OK

4.0 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/common-es2015.65e41840a2e71267fb04.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (887), with no line terminators
Size
4.0 kB (4041 bytes)
Hash
66497efc9f852d01178790523a0e23b6
79d016eefbbf9062f2946caa51574d9113eb4403
15bbc2b17708969e47a359d9c730c5035ee6167e42ff7344765ee94f833b668c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/common-es2015.65e41840a2e71267fb04.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
DNT: 1
Connection: keep-alive
Cookie: dTValidationCookie=dTValidationCookieValue
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 13:02:56 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 10:45:47 GMT
vary: Accept-Encoding
etag: W/"66224b5b-377"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 13:02:56 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/styles_r.css?20220610_2131

54.37.43.133

200 OK

31 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/styles_r.css?20220610_2131
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size
31 kB (30659 bytes)
Hash
b17058794e54b509d21d91114bc36d1d
c922d83836190f7cf211d995bf4c091d88eb320c
04e1c9cd4835ee9c67383a3a4b31b455b49be13c90bf3cbc0ec87540c074232b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/styles_r.css?20220610_2131 HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 13:02:56 GMT
content-type: text/css
last-modified: Fri, 19 Apr 2024 10:45:47 GMT
vary: Accept-Encoding
etag: W/"66224b5b-291c0"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 13:02:56 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/assets/images/father-son.png

54.37.43.133

200 OK

140 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/assets/images/father-son.png
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1600, components 3
Size
140 kB (140237 bytes)
Hash
13ef1dd9531309bed82c8587228ecb23
322ea99d980c4266d0d6ec4034994545b351e73f
2fb0edc4309fcb422b5a0a0649b316449435e6a4f9ae2f3dc294d4c207028d25

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/assets/images/father-son.png HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
DNT: 1
Connection: keep-alive
Cookie: dtCookie=v_4_srv_-2D37_sn_QUS6J7T4BLSUTD74QBO9ROTUR5DN3J31; rxVisitor=1713531776457V4GRIQHJLUJ9EVR96S7EJ4SS6DDVSF2K; dtPC=-37$531776450_961h1vWMSQROQKPUCKFHEQNHBCMJFHICOFUEFH-0e0; rxvt=1713533576460|1713531776460; kndctr_AA7A3BC75245B3BC0A490D4D_AdobeOrg_cluster=irl1; kndctr_AA7A3BC75245B3BC0A490D4D_AdobeOrg_identity=CiY2NTMxMjg3NzExMjA3NjcwMzU2MDkwOTAwMjM3MTY4Mjk3NjM0NlITCNfez7PvMRABGAEqBElSTDEwAPAB197Ps-8x; AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=MCMID|65312877112076703560909002371682976346
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 13:02:57 GMT
content-type: image/png
content-length: 140237
last-modified: Fri, 19 Apr 2024 10:45:47 GMT
vary: Accept-Encoding
etag: "66224b5b-223cd"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/runtime-es2015.b42f771083c62623ca4b.js

54.37.43.133

200 OK

7.8 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/runtime-es2015.b42f771083c62623ca4b.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (3026), with no line terminators
Size
7.8 kB (7829 bytes)
Hash
c3cc45c45cc6d02130185e156bdb0f3f
5538e1668b135b7a954feeb4f5b3ed9a3f45c1e4
4a5dad158ef558ddedec3fdea1fc4aa8c87e4c93c69917b49b70b0fc5c5865f0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/runtime-es2015.b42f771083c62623ca4b.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
DNT: 1
Connection: keep-alive
Cookie: dtCookie=v_4_srv_-2D37_sn_QUS6J7T4BLSUTD74QBO9ROTUR5DN3J31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 13:02:56 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 10:45:47 GMT
vary: Accept-Encoding
etag: W/"66224b5b-bd2"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 13:02:56 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/favicon.ico

54.37.43.133

404 Not Found

9.7 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/favicon.ico
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
9.7 kB (9681 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/favicon.ico HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
DNT: 1
Connection: keep-alive
Cookie: dtCookie=v_4_srv_-2D37_sn_QUS6J7T4BLSUTD74QBO9ROTUR5DN3J31; rxVisitor=1713531776457V4GRIQHJLUJ9EVR96S7EJ4SS6DDVSF2K; dtPC=-37$531776450_961h1vWMSQROQKPUCKFHEQNHBCMJFHICOFUEFH-0e0; rxvt=1713533576460|1713531776460; kndctr_AA7A3BC75245B3BC0A490D4D_AdobeOrg_cluster=irl1; kndctr_AA7A3BC75245B3BC0A490D4D_AdobeOrg_identity=CiY2NTMxMjg3NzExMjA3NjcwMzU2MDkwOTAwMjM3MTY4Mjk3NjM0NlITCNfez7PvMRABGAEqBElSTDEwAPAB197Ps-8x; AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=MCMID|65312877112076703560909002371682976346
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 13:02:57 GMT
content-type: text/html
vary: Accept-Encoding
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: public, no-transform
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/login-login-module-es2015.c8daa61cd67d2ba350cd.js

54.37.43.133

200 OK

28 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/login-login-module-es2015.c8daa61cd67d2ba350cd.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
28 kB (27960 bytes)
Hash
2dd153e82de7d0cd15d9c294076c6d55
71ee55be17d96d75fb2c5969da0ca97d7b841cc2
e8130747319c4651f5e87b9d3901cc28a66b1372cc0ed73655cb086d1dae8144

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/login-login-module-es2015.c8daa61cd67d2ba350cd.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 13:02:56 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 10:45:47 GMT
vary: Accept-Encoding
etag: W/"66224b5b-1181d"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 13:02:56 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/scripts.a6cfc653854b6a67eb99.js

54.37.43.133

200 OK

163 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/scripts.a6cfc653854b6a67eb99.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
163 kB (163071 bytes)
Hash
c8d8210d5672cf4d4339c0744cfe3ea5
e7f89e4d8b8c76299fad9f7780c3eac8aa2fee46
46bd9cdad39cff9c0678c3e4bb59b2a194819aab312ede8bffeaf21206d7b73d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/scripts.a6cfc653854b6a67eb99.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
DNT: 1
Connection: keep-alive
Cookie: dtCookie=v_4_srv_-2D37_sn_QUS6J7T4BLSUTD74QBO9ROTUR5DN3J31
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 13:02:56 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 10:45:47 GMT
vary: Accept-Encoding
etag: W/"66224b5b-27cff"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 13:02:56 GMT
content-encoding: br
X-Firefox-Spdy: h2

dias.bank.truist.com/ui/scripts/truist_common.js

95.101.10.192

200 OK

314 kB

URL GET HTTP/2
dias.bank.truist.com/ui/scripts/truist_common.js
IP
95.101.10.192:443
ASN
#20940 Akamai International B.V.

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerEntrust, Inc.
Subjectw3.truist.com
Fingerprint90:59:F1:F6:1C:1C:16:DC:93:16:65:FE:4C:EB:E8:1D:A6:19:1E:31
ValidityFri, 16 Feb 2024 19:45:45 GMT - Sun, 16 Mar 2025 19:45:44 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
314 kB (314323 bytes)
Hash
edc9815de6fa2c1bbe9a559619eb958b
bcf2c75c36adaadf15f1d2ba886c2d2d765d2db4
cea1e4a307432457cb33f0f3da11e3a65cb4595530fa259be1b636389bb176d9

HTTP Headers

GET /ui/scripts/truist_common.js HTTP/1.1
Host: dias.bank.truist.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
x-ion-hop: 1
expires: 0
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, private, no-cache, no-store
date: Fri, 19 Apr 2024 13:02:57 GMT
set-cookie: CPE0rYlC=A0rwc_aOAQAABrz9Krv6QsjLhTGLFniFalh9Yl6IhqLI4GfX7vb9YZtj4_5FAVtaKpqcuC2nwH8AADQwAAAAAA|1|0|75d7138a184b9aed8ce348412aa57bbd523e665c; Path=/; Max-Age=1577847600; Domain=truist.com
netcookie-h2-dias.bank.truist.com=!1zauP3rIcykscRC10gAQAUQFDFkC/amsXxF5Ge7ioaoXkLxJpb0vjHkp0/A1KRPZpezODtKONfP7owqHJ68DfomYWdYKauMQGk8DAV0GuA==; path=/; Httponly; Secure
ak_origin_dias.bank.truist.com=H2; max-age=900; path=/; secure; HttpOnly; SameSite=None
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/assets/tru-core-icon-sprite.svg

54.37.43.133

404 Not Found

146 B

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/assets/tru-core-icon-sprite.svg
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
HTML document, ASCII text, with no line terminators
Size
146 B (146 bytes)
Hash
40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca

HTTP Headers

GET /wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/assets/tru-core-icon-sprite.svg HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
DNT: 1
Connection: keep-alive
Cookie: dtCookie=v_4_srv_-2D37_sn_QUS6J7T4BLSUTD74QBO9ROTUR5DN3J31; rxVisitor=1713531776457V4GRIQHJLUJ9EVR96S7EJ4SS6DDVSF2K; dtPC=-37$531776450_961h1vWMSQROQKPUCKFHEQNHBCMJFHICOFUEFH-0e0; rxvt=1713533576460|1713531776460; kndctr_AA7A3BC75245B3BC0A490D4D_AdobeOrg_cluster=irl1; kndctr_AA7A3BC75245B3BC0A490D4D_AdobeOrg_identity=CiY2NTMxMjg3NzExMjA3NjcwMzU2MDkwOTAwMjM3MTY4Mjk3NjM0NlITCNfez7PvMRABGAEqBElSTDEwAPAB197Ps-8x; AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=MCMID|65312877112076703560909002371682976346
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 13:02:57 GMT
content-type: text/html
vary: Accept-Encoding
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: public, no-transform
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/ui/ruxitagentjs_A27Vfgqrux_10229211201102017.js

54.37.43.133

404 Not Found

0 B

URL GET HTTP/2
tecmug.com/ui/ruxitagentjs_A27Vfgqrux_10229211201102017.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /ui/ruxitagentjs_A27Vfgqrux_10229211201102017.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 13:02:56 GMT
content-type: text/html
vary: Accept-Encoding
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: public, no-transform
content-encoding: br
X-Firefox-Spdy: h2

assets.adobedtm.com/550322ae7d69/6277ebbccd21/launch-866a03735382.min.js

2.18.172.233

200 OK

234 kB

URL GET HTTP/2
assets.adobedtm.com/550322ae7d69/6277ebbccd21/launch-866a03735382.min.js
IP
2.18.172.233:443
ASN
#16625 AKAMAI-AS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32768)
Size
234 kB (234006 bytes)
Hash
50ae1852aa9c906c3faff1b48f7605e1
e492bd5dc51cfbcff95d24fdf7eb357f5865f3fa
8b07e2f546bad3bfcb4f51d68c8054c49ab26377e796e7298b4bed7a5d6150db

HTTP Headers

GET /550322ae7d69/6277ebbccd21/launch-866a03735382.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "50ae1852aa9c906c3faff1b48f7605e1:1695860704.209898"
last-modified: Thu, 28 Sep 2023 00:25:04 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 67703
cache-control: max-age=3600
expires: Fri, 19 Apr 2024 14:02:56 GMT
date: Fri, 19 Apr 2024 13:02:56 GMT
access-control-allow-origin: https://tecmug.com
timing-allow-origin: *
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/assets/js/dbc-min.js?v=1

54.37.43.133

200 OK

1.0 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/assets/js/dbc-min.js?v=1
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (1072), with no line terminators
Size
1.0 kB (1009 bytes)
Hash
5933578ff7d54a8cad23b057e0099743
f5094c9656af30726aa3b0d1ccff37131584e841
6600617c8beb51a37d6dae0408b040e9c3445f61fcc4db951076521f3ec8ad5f

HTTP Headers

GET /wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/assets/js/dbc-min.js?v=1 HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 13:02:56 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 10:45:47 GMT
vary: Accept-Encoding
etag: W/"66224b5b-3f1"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 13:02:56 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/styles.e0ebcc1d1647e0620502.css

54.37.43.133

200 OK

74 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/styles.e0ebcc1d1647e0620502.css
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
74 kB (73734 bytes)
Hash
92544faa78a609d6690809c36ab71df2
3dd292185056c3cbc2c5f6e60ecb8d76a11dd2a4
9c991b792a64c5eed8bdcf878f5bafb8638ff1dc9a9dfacbbffe8f9b57de9376

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/styles.e0ebcc1d1647e0620502.css HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 13:02:56 GMT
content-type: text/css
last-modified: Fri, 19 Apr 2024 10:45:47 GMT
vary: Accept-Encoding
etag: W/"66224b5b-12006"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 13:02:56 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/main-es2015.b81e0513991ddbc6f59b.js

54.37.43.133

200 OK

2.0 MB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/main-es2015.b81e0513991ddbc6f59b.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type

Size
2.0 MB (2020871 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/main-es2015.b81e0513991ddbc6f59b.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/1462171df8e6551cf22a7bf8183cc259/+t-===.html?ip=168.151.102.93
DNT: 1
Connection: keep-alive
Cookie: dtCookie=v_4_srv_-2D37_sn_QUS6J7T4BLSUTD74QBO9ROTUR5DN3J31; rxVisitor=1713531776457V4GRIQHJLUJ9EVR96S7EJ4SS6DDVSF2K
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 13:02:56 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 10:45:47 GMT
vary: Accept-Encoding
etag: W/"66224b5b-1ed607"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 13:02:56 GMT
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML