Report - tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/

Report Overview

Submitted URL
tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/
IP
54.37.43.133
ASN
#16276 OVH SAS
Submitted
2024-04-19 10:26:19
Access
public
Website Title
Authentication
Final URL
tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Tags
truist_bank financial phishing
urlquery detections
Phishing - Truist Bank

Detections

urlquery
21
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
assets.adobedtm.com	512	2013-11-22	2014-01-28	2024-04-18	1.4 kB	90 kB	23.38.200.237
tecmug.com	unknown	2019-11-02	2018-11-30	2024-04-16	14 kB	1.6 MB	54.37.43.133
dias.bank.truist.com	66751	2000-02-28	2021-03-10	2024-03-17	419 B	311 kB	95.101.10.192
edge.truist.com	unknown	2000-02-28	2023-01-12	2024-02-19	589 B	1.4 kB	63.140.62.222

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/main-es2015.b81e0513991ddbc6f59b.js	2.0 MB	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/main-es2015.b81e0513991ddbc6f59b.js IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen237 Hash 3154d3c4aba316e80b2f5beed32e4ef4 aaf56158f57dc4e77b706ce1e62d76cf87a724c6 ee3eabebc663f17dccbcde12f6a15c482a432fadcc34087db9877f02742c4dff Loading...

	assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_AudienceManagement.min.js	25 kB	2023-03-07	2024-04-19
Pretty URL assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_AudienceManagement.min.js IP 23.38.200.237 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:03:29 Last Seen2024-04-19 19:50:30 Times Seen2864 Hash 26a8cd142b539700557eb4710c3d56bd 46452cb34f2c181ebe255c96c9ea9522f1537500 4858af0bdd1175d3f6c795eb053e7cae348ecb67f0633020d7d925c7672de871 Loading...

	tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/assets/js/dbc-min.js?v=1	1.0 kB	2023-03-08	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/assets/js/dbc-min.js?v=1 IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 12:47:06 Last Seen2024-04-19 19:50:30 Times Seen250 Hash b11f34c50275765a9b3a0acbe1bd75aa 6103a85e4b0cf9fdca904a5793fb8af8c7a6dcea 3a646c145be3980978aaa0740511189e7d4aaac97f7731321fddb3a3e52f1a35 Loading...

	assets.adobedtm.com/550322ae7d69/6277ebbccd21/launch-866a03735382.min.js	234 kB	2024-02-02	2024-04-19
Pretty URL assets.adobedtm.com/550322ae7d69/6277ebbccd21/launch-866a03735382.min.js IP 23.38.200.237 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-02 03:29:07 Last Seen2024-04-19 19:50:30 Times Seen90 Hash 50ae1852aa9c906c3faff1b48f7605e1 e492bd5dc51cfbcff95d24fdf7eb357f5865f3fa 8b07e2f546bad3bfcb4f51d68c8054c49ab26377e796e7298b4bed7a5d6150db Loading...

	tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/login-login-module-es2015.c8daa61cd67d2ba350cd.js	72 kB	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/login-login-module-es2015.c8daa61cd67d2ba350cd.js IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen415 Hash 2dd153e82de7d0cd15d9c294076c6d55 71ee55be17d96d75fb2c5969da0ca97d7b841cc2 e8130747319c4651f5e87b9d3901cc28a66b1372cc0ed73655cb086d1dae8144 Loading...

	dias.bank.truist.com/ui/scripts/truist_common.js	310 kB	2024-04-19	2024-04-19
Pretty URL dias.bank.truist.com/ui/scripts/truist_common.js IP 95.101.10.192 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-19 12:26:20 Last Seen2024-04-19 12:26:20 Times Seen2 Hash c179f0c6311e17b0337d5a45d7cf6d81 08259abc40437d1d4f981a023b1ffe03ba3b96fe dc9e83e97165868782b0950aa6ddf028cbbf6adc2f962525abf2a2a8bdc57035 Loading...

	tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/runtime-es2015.b42f771083c62623ca4b.js	3.0 kB	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/runtime-es2015.b42f771083c62623ca4b.js IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen250 Hash c3cc45c45cc6d02130185e156bdb0f3f 5538e1668b135b7a954feeb4f5b3ed9a3f45c1e4 4a5dad158ef558ddedec3fdea1fc4aa8c87e4c93c69917b49b70b0fc5c5865f0 Loading...

	tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/polyfills-es2015.28ce1eb91785797b28b8.js	37 kB	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/polyfills-es2015.28ce1eb91785797b28b8.js IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen412 Hash c8a47766604dd83f8025db57372c3f04 e2338d3ac0a4c9e5f3beb4df96da09c2b4566344 757ac073de32f9df2febd7b8a9fbfa79706a590e09cbccf550f3604ed88a8f7d Loading...

	tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154	32 kB	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154 IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen211 Hash 6b3c391152b7a316459373c827c2835a 5e357b1fbe5620448532104006400fc41eaf6be4 95e50e623f13f5d4155343eba207aaeaea82edbb213a5bb251ca8fed16f4c79c Loading...

	tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/scripts.a6cfc653854b6a67eb99.js	163 kB	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/scripts.a6cfc653854b6a67eb99.js IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen410 Hash c8d8210d5672cf4d4339c0744cfe3ea5 e7f89e4d8b8c76299fad9f7780c3eac8aa2fee46 46bd9cdad39cff9c0678c3e4bb59b2a194819aab312ede8bffeaf21206d7b73d Loading...

	tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/common-es2015.65e41840a2e71267fb04.js	887 B	2023-03-11	2024-04-19
Pretty URL tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/common-es2015.65e41840a2e71267fb04.js IP 54.37.43.133 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 12:27:11 Last Seen2024-04-19 19:50:30 Times Seen244 Hash 66497efc9f852d01178790523a0e23b6 79d016eefbbf9062f2946caa51574d9113eb4403 15bbc2b17708969e47a359d9c730c5035ee6167e42ff7344765ee94f833b668c Loading...

	assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js	34 kB	2023-03-07	2024-04-29
Pretty URL assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js IP 23.38.200.237 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:09 Last Seen2024-04-29 16:16:46 Times Seen2936 Hash d860c16ac938f7d839f0ec158d02d0f0 8710f81ed151233677f7e32b229cb35293dd6840 9219086b4f2c3bf77854b2e06ccd97ad32b9b7a140e65ff8b974a3bae6c7854c Loading...

HTTP Transactions (22)

URL IP Response Size

assets.adobedtm.com/550322ae7d69/6277ebbccd21/launch-866a03735382.min.js

23.38.200.237

200 OK

68 kB

URL GET HTTP/2
assets.adobedtm.com/550322ae7d69/6277ebbccd21/launch-866a03735382.min.js
IP
23.38.200.237:443
ASN
#16625 AKAMAI-AS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32768)
Size
68 kB (67703 bytes)
Hash
50ae1852aa9c906c3faff1b48f7605e1
e492bd5dc51cfbcff95d24fdf7eb357f5865f3fa
8b07e2f546bad3bfcb4f51d68c8054c49ab26377e796e7298b4bed7a5d6150db

HTTP Headers

GET /550322ae7d69/6277ebbccd21/launch-866a03735382.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "50ae1852aa9c906c3faff1b48f7605e1:1695860704.209898"
last-modified: Thu, 28 Sep 2023 00:25:04 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 67703
cache-control: max-age=3600
expires: Fri, 19 Apr 2024 11:25:51 GMT
date: Fri, 19 Apr 2024 10:25:51 GMT
access-control-allow-origin: https://tecmug.com
timing-allow-origin: *
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/assets/logos/trulogo_horz-trupurple.png

54.37.43.133

200 OK

4.4 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/assets/logos/trulogo_horz-trupurple.png
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
PNG image data, 365 x 86, 8-bit/color RGBA, non-interlaced
Size
4.4 kB (4376 bytes)
Hash
fe2af793fe57fcace53f91cfed335a8e
250d1d12ba58cade61d74f7f61dbc90bf2556bda
d2e2e20fc9729fb0389392bde5a8fd1b4cb390dd8689ce7a1c3fe83cc91b0d52

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/assets/logos/trulogo_horz-trupurple.png HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=mu3aqlmueth71q9uoos76bgs2f; dtCookie=v_4_srv_-2D9_sn_KU9385CGNN6LS3SBDUJNCAU7S2LVOBC6; rxVisitor=1713522351928T3PR4KL9KV0539O7E6RPMA503K82835F; dtPC=-9$522351923_174h1vGLHAKTPCFDSGSMRNRAGMEOGCAFNAGRWT-0e0; rxvt=1713524151930|1713522351930
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 10:25:51 GMT
content-type: image/png
content-length: 4376
last-modified: Fri, 19 Apr 2024 09:51:13 GMT
vary: Accept-Encoding
etag: "66223e91-1118"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/assets/logos/tru_lg_hrz_rgb_wht_rev.png

54.37.43.133

200 OK

15 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/assets/logos/tru_lg_hrz_rgb_wht_rev.png
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
PNG image data, 1927 x 767, 8-bit/color RGBA, non-interlaced
Size
15 kB (14599 bytes)
Hash
84796985e04a9f463f26293d1919f3c4
db0a67a0de6fe6a06c4254b82e72e64ed80f0400
d938ee89009d30e5f4abe089c40c5d3ef3b4ae7e1965d451faadb7e61ccc32d9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/assets/logos/tru_lg_hrz_rgb_wht_rev.png HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=mu3aqlmueth71q9uoos76bgs2f; dtCookie=v_4_srv_-2D9_sn_KU9385CGNN6LS3SBDUJNCAU7S2LVOBC6; rxVisitor=1713522351928T3PR4KL9KV0539O7E6RPMA503K82835F; dtPC=-9$522351923_174h1vGLHAKTPCFDSGSMRNRAGMEOGCAFNAGRWT-0e0; rxvt=1713524151930|1713522351930
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 10:25:51 GMT
content-type: image/png
content-length: 14599
last-modified: Fri, 19 Apr 2024 09:51:13 GMT
vary: Accept-Encoding
etag: "66223e91-3907"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2

assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_AudienceManagement.min.js

23.38.200.237

200 OK

8.8 kB

URL GET HTTP/2
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_AudienceManagement.min.js
IP
23.38.200.237:443
ASN
#16625 AKAMAI-AS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (24999)
Size
8.8 kB (8753 bytes)
Hash
26a8cd142b539700557eb4710c3d56bd
46452cb34f2c181ebe255c96c9ea9522f1537500
4858af0bdd1175d3f6c795eb053e7cae348ecb67f0633020d7d925c7672de871

HTTP Headers

GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement_Module_AudienceManagement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "26a8cd142b539700557eb4710c3d56bd:1644856531.982003"
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 8753
expires: Fri, 19 Apr 2024 11:25:52 GMT
date: Fri, 19 Apr 2024 10:25:52 GMT
cache-control: no-cache
access-control-allow-origin: https://tecmug.com
timing-allow-origin: *
X-Firefox-Spdy: h2

assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js

23.38.200.237

200 OK

12 kB

URL GET HTTP/2
assets.adobedtm.com/extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js
IP
23.38.200.237:443
ASN
#16625 AKAMAI-AS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerDigiCert Inc
Subjectassets.adobedtm.com
Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32768)
Size
12 kB (12163 bytes)
Hash
d860c16ac938f7d839f0ec158d02d0f0
8710f81ed151233677f7e32b229cb35293dd6840
9219086b4f2c3bf77854b2e06ccd97ad32b9b7a140e65ff8b974a3bae6c7854c

HTTP Headers

GET /extensions/EP171e731c9ba34f1c950c36d26e3efd61/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "d860c16ac938f7d839f0ec158d02d0f0:1644856531.418573"
last-modified: Mon, 14 Feb 2022 16:35:31 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
expires: Fri, 19 Apr 2024 11:25:52 GMT
date: Fri, 19 Apr 2024 10:25:52 GMT
content-length: 12163
cache-control: no-cache
access-control-allow-origin: https://tecmug.com
timing-allow-origin: *
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/runtime-es2015.b42f771083c62623ca4b.js

54.37.43.133

200 OK

3.3 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/runtime-es2015.b42f771083c62623ca4b.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (3026), with no line terminators
Size
3.3 kB (3278 bytes)
Hash
c3cc45c45cc6d02130185e156bdb0f3f
5538e1668b135b7a954feeb4f5b3ed9a3f45c1e4
4a5dad158ef558ddedec3fdea1fc4aa8c87e4c93c69917b49b70b0fc5c5865f0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/runtime-es2015.b42f771083c62623ca4b.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=mu3aqlmueth71q9uoos76bgs2f; dtCookie=v_4_srv_-2D9_sn_KU9385CGNN6LS3SBDUJNCAU7S2LVOBC6; rxVisitor=1713522351928T3PR4KL9KV0539O7E6RPMA503K82835F; dtPC=-9$522351923_174h1vGLHAKTPCFDSGSMRNRAGMEOGCAFNAGRWT-0e0; rxvt=1713524151930|1713522351930
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 10:25:51 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 09:51:13 GMT
vary: Accept-Encoding
etag: W/"66223e91-bd2"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 10:25:51 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/polyfills-es2015.28ce1eb91785797b28b8.js

54.37.43.133

200 OK

22 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/polyfills-es2015.28ce1eb91785797b28b8.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (36710), with no line terminators
Size
22 kB (21821 bytes)
Hash
c8a47766604dd83f8025db57372c3f04
e2338d3ac0a4c9e5f3beb4df96da09c2b4566344
757ac073de32f9df2febd7b8a9fbfa79706a590e09cbccf550f3604ed88a8f7d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/polyfills-es2015.28ce1eb91785797b28b8.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=mu3aqlmueth71q9uoos76bgs2f; dtCookie=v_4_srv_-2D9_sn_KU9385CGNN6LS3SBDUJNCAU7S2LVOBC6; rxVisitor=1713522351928T3PR4KL9KV0539O7E6RPMA503K82835F; dtPC=-9$522351923_174h1vGLHAKTPCFDSGSMRNRAGMEOGCAFNAGRWT-0e0; rxvt=1713524151930|1713522351930
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 10:25:51 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 09:51:13 GMT
vary: Accept-Encoding
etag: W/"66223e91-8f66"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 10:25:51 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/main-es2015.b81e0513991ddbc6f59b.js

54.37.43.133

200 OK

401 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/main-es2015.b81e0513991ddbc6f59b.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
401 kB (400582 bytes)
Hash
3154d3c4aba316e80b2f5beed32e4ef4
aaf56158f57dc4e77b706ce1e62d76cf87a724c6
ee3eabebc663f17dccbcde12f6a15c482a432fadcc34087db9877f02742c4dff

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/main-es2015.b81e0513991ddbc6f59b.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=mu3aqlmueth71q9uoos76bgs2f; dtCookie=v_4_srv_-2D9_sn_KU9385CGNN6LS3SBDUJNCAU7S2LVOBC6; rxVisitor=1713522351928T3PR4KL9KV0539O7E6RPMA503K82835F; dtPC=-9$522351923_174h1vGLHAKTPCFDSGSMRNRAGMEOGCAFNAGRWT-0e0; rxvt=1713524151930|1713522351930
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 10:25:51 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 09:51:13 GMT
vary: Accept-Encoding
etag: W/"66223e91-1ed607"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 10:25:51 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/scripts.a6cfc653854b6a67eb99.js

54.37.43.133

200 OK

191 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/scripts.a6cfc653854b6a67eb99.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
191 kB (191025 bytes)
Hash
c8d8210d5672cf4d4339c0744cfe3ea5
e7f89e4d8b8c76299fad9f7780c3eac8aa2fee46
46bd9cdad39cff9c0678c3e4bb59b2a194819aab312ede8bffeaf21206d7b73d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/scripts.a6cfc653854b6a67eb99.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=mu3aqlmueth71q9uoos76bgs2f; dtCookie=v_4_srv_-2D9_sn_KU9385CGNN6LS3SBDUJNCAU7S2LVOBC6; rxVisitor=1713522351928T3PR4KL9KV0539O7E6RPMA503K82835F; dtPC=-9$522351923_174h1vGLHAKTPCFDSGSMRNRAGMEOGCAFNAGRWT-0e0; rxvt=1713524151930|1713522351930
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 10:25:51 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 09:51:13 GMT
vary: Accept-Encoding
etag: W/"66223e91-27cff"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 10:25:51 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/favicon.ico

54.37.43.133

404 Not Found

5.5 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/favicon.ico
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
5.5 kB (5481 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/favicon.ico HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=mu3aqlmueth71q9uoos76bgs2f; dtCookie=v_4_srv_-2D9_sn_KU9385CGNN6LS3SBDUJNCAU7S2LVOBC6; rxVisitor=1713522351928T3PR4KL9KV0539O7E6RPMA503K82835F; dtPC=-9$522351923_174h1vGLHAKTPCFDSGSMRNRAGMEOGCAFNAGRWT-0e0; rxvt=1713524151930|1713522351930; kndctr_AA7A3BC75245B3BC0A490D4D_AdobeOrg_cluster=irl1; kndctr_AA7A3BC75245B3BC0A490D4D_AdobeOrg_identity=CiY2OTkyMDcwNDM0ODAxMjc0ODM4NDAzNzUyMDUyNjM3NjQxMDg0N1ITCIzBkK_vMRABGAEqBElSTDEwAPABjMGQr-8x; AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=MCMID|69920704348012748384037520526376410847
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 10:25:53 GMT
content-type: text/html
vary: Accept-Encoding
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: public, no-transform
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/assets/tru-core-icon-sprite.svg

54.37.43.133

404 Not Found

4.2 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/assets/tru-core-icon-sprite.svg
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
4.2 kB (4246 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/assets/tru-core-icon-sprite.svg HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=mu3aqlmueth71q9uoos76bgs2f; dtCookie=v_4_srv_-2D9_sn_KU9385CGNN6LS3SBDUJNCAU7S2LVOBC6; rxVisitor=1713522351928T3PR4KL9KV0539O7E6RPMA503K82835F; dtPC=-9$522351923_174h1vGLHAKTPCFDSGSMRNRAGMEOGCAFNAGRWT-0e0; rxvt=1713524151930|1713522351930; kndctr_AA7A3BC75245B3BC0A490D4D_AdobeOrg_cluster=irl1; kndctr_AA7A3BC75245B3BC0A490D4D_AdobeOrg_identity=CiY2OTkyMDcwNDM0ODAxMjc0ODM4NDAzNzUyMDUyNjM3NjQxMDg0N1ITCIzBkK_vMRABGAEqBElSTDEwAPABjMGQr-8x; AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=MCMID|69920704348012748384037520526376410847
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 10:25:53 GMT
content-type: text/html
vary: Accept-Encoding
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: public, no-transform
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/common-es2015.65e41840a2e71267fb04.js

54.37.43.133

200 OK

10 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/common-es2015.65e41840a2e71267fb04.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (887), with no line terminators
Size
10 kB (10445 bytes)
Hash
66497efc9f852d01178790523a0e23b6
79d016eefbbf9062f2946caa51574d9113eb4403
15bbc2b17708969e47a359d9c730c5035ee6167e42ff7344765ee94f833b668c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/common-es2015.65e41840a2e71267fb04.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=mu3aqlmueth71q9uoos76bgs2f; dtCookie=v_4_srv_-2D9_sn_KU9385CGNN6LS3SBDUJNCAU7S2LVOBC6; rxVisitor=1713522351928T3PR4KL9KV0539O7E6RPMA503K82835F; dtPC=-9$522351923_174h1vGLHAKTPCFDSGSMRNRAGMEOGCAFNAGRWT-0e0; rxvt=1713524151930|1713522351930
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 10:25:51 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 09:51:13 GMT
vary: Accept-Encoding
etag: W/"66223e91-377"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 10:25:51 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154

54.37.43.133

200 OK

247 kB

URL User Request GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type

Size
247 kB (247084 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154 HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=mu3aqlmueth71q9uoos76bgs2f
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 10:25:51 GMT
content-type: text/html
last-modified: Fri, 19 Apr 2024 09:51:13 GMT
vary: Accept-Encoding
etag: W/"66223e91-3c52c"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/assets/js/dbc-min.js?v=1

54.37.43.133

200 OK

1.0 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/assets/js/dbc-min.js?v=1
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (1072), with no line terminators
Size
1.0 kB (1009 bytes)
Hash
5933578ff7d54a8cad23b057e0099743
f5094c9656af30726aa3b0d1ccff37131584e841
6600617c8beb51a37d6dae0408b040e9c3445f61fcc4db951076521f3ec8ad5f

HTTP Headers

GET /wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/assets/js/dbc-min.js?v=1 HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=mu3aqlmueth71q9uoos76bgs2f; dtCookie=v_4_srv_-2D9_sn_KU9385CGNN6LS3SBDUJNCAU7S2LVOBC6; rxVisitor=1713522351928T3PR4KL9KV0539O7E6RPMA503K82835F; dtPC=-9$522351923_174h1vGLHAKTPCFDSGSMRNRAGMEOGCAFNAGRWT-0e0; rxvt=1713524151930|1713522351930
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 10:25:51 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 09:51:13 GMT
vary: Accept-Encoding
etag: W/"66223e91-3f1"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 10:25:51 GMT
content-encoding: br
X-Firefox-Spdy: h2

dias.bank.truist.com/ui/scripts/truist_common.js

95.101.10.192

200 OK

310 kB

URL GET HTTP/2
dias.bank.truist.com/ui/scripts/truist_common.js
IP
95.101.10.192:443
ASN
#20940 Akamai International B.V.

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerEntrust, Inc.
Subjectw3.truist.com
Fingerprint90:59:F1:F6:1C:1C:16:DC:93:16:65:FE:4C:EB:E8:1D:A6:19:1E:31
ValidityFri, 16 Feb 2024 19:45:45 GMT - Sun, 16 Mar 2025 19:45:44 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
310 kB (309947 bytes)
Hash
c179f0c6311e17b0337d5a45d7cf6d81
08259abc40437d1d4f981a023b1ffe03ba3b96fe
dc9e83e97165868782b0950aa6ddf028cbbf6adc2f962525abf2a2a8bdc57035

HTTP Headers

GET /ui/scripts/truist_common.js HTTP/1.1
Host: dias.bank.truist.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
x-ion-hop: 1
expires: 0
pragma: no-cache
cache-control: no-cache, no-store, must-revalidate, private, no-cache, no-store
date: Fri, 19 Apr 2024 10:25:52 GMT
set-cookie: CPE0rYlC=AyAg5PWOAQAAWhAQqNc8_TObw17V8b70wWW_GOGmEcyTmcMiaK8U6XB-ohXcAVtaKpqcuC2nwH8AADQwAAAAAA|1|0|5f5fbd9894722022cce05d917d5274b18dd7c136; Path=/; Max-Age=1577847600; Domain=truist.com
netcookie-h2-dias.bank.truist.com=!n+6bnhj6JI3dUX1zO6//xnvBvWNaQsyqmvD9scYtm1s7Z3DZR8Dva2EXBjxpQjLHsCfu4FwyYx7mUjy3yLA9Cvmw3VQqH5YRcy9GEOPjow==; path=/; Httponly; Secure
ak_origin_dias.bank.truist.com=H2; max-age=900; path=/; secure; HttpOnly; SameSite=None
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/

54.37.43.133

302 Found

247 kB

URL User Request GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type

Size
247 kB (247084 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/ HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Fri, 19 Apr 2024 10:25:51 GMT
content-type: text/html; charset=UTF-8
location: +t-===.html?ip=91.90.42.154
set-cookie: PHPSESSID=mu3aqlmueth71q9uoos76bgs2f; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/styles_r.css?20220610_2131

54.37.43.133

200 OK

168 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/styles_r.css?20220610_2131
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type

Size
168 kB (168384 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/styles_r.css?20220610_2131 HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=mu3aqlmueth71q9uoos76bgs2f; dtCookie=v_4_srv_-2D9_sn_KU9385CGNN6LS3SBDUJNCAU7S2LVOBC6; rxVisitor=1713522351928T3PR4KL9KV0539O7E6RPMA503K82835F; dtPC=-9$522351923_174h1vGLHAKTPCFDSGSMRNRAGMEOGCAFNAGRWT-0e0; rxvt=1713524151930|1713522351930
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 10:25:51 GMT
content-type: text/css
last-modified: Fri, 19 Apr 2024 09:51:13 GMT
vary: Accept-Encoding
etag: W/"66223e91-291c0"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 10:25:51 GMT
content-encoding: br
X-Firefox-Spdy: h2

edge.truist.com/ee/v1/identity/acquire?configId=13c39053-4020-4247-96a1-7891f0a10dc0&requestId=af3486c6-a7c1-4c60-b608-d3542b1950d2

63.140.62.222

200 OK

731 B

URL POST HTTP/2
edge.truist.com/ee/v1/identity/acquire?configId=13c39053-4020-4247-96a1-7891f0a10dc0&requestId=af3486c6-a7c1-4c60-b608-d3542b1950d2
IP
63.140.62.222:443
ASN
#16509 AMAZON-02

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerEntrust, Inc.
Subjectedge.truist.com
Fingerprint93:8F:00:28:86:F8:B8:09:40:91:FD:11:A8:CC:70:AC:77:19:53:D2
ValidityThu, 25 Jan 2024 14:02:38 GMT - Tue, 25 Feb 2025 14:02:37 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (827), with no line terminators
Size
731 B (731 bytes)
Hash
a1f796bfb546fa7c1b9b4f41f2546030
bb22599e9c63e3824b500f97a6e8dd38bf1a57f9
f2dfdf0601be50d6f2be633fa86b5252e6391d49992a681bf970e4d2912b08a7

HTTP Headers

POST /ee/v1/identity/acquire?configId=13c39053-4020-4247-96a1-7891f0a10dc0&requestId=af3486c6-a7c1-4c60-b608-d3542b1950d2 HTTP/1.1
Host: edge.truist.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain; charset=UTF-8
Content-Length: 125
Origin: https://tecmug.com
DNT: 1
Connection: keep-alive
Referer: https://tecmug.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-request-id: af3486c6-a7c1-4c60-b608-d3542b1950d2
vary: Origin
access-control-allow-origin: https://tecmug.com
access-control-allow-credentials: true
access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID
date: Fri, 19 Apr 2024 10:25:52 GMT
x-konductor: N/A
x-adobe-edge: IRL1;6
server: jag
content-encoding: gzip
content-type: application/json;charset=utf-8
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/assets/images/father-son.png

54.37.43.133

200 OK

140 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/assets/images/father-son.png
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1600, components 3
Size
140 kB (140237 bytes)
Hash
13ef1dd9531309bed82c8587228ecb23
322ea99d980c4266d0d6ec4034994545b351e73f
2fb0edc4309fcb422b5a0a0649b316449435e6a4f9ae2f3dc294d4c207028d25

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/assets/images/father-son.png HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=mu3aqlmueth71q9uoos76bgs2f; dtCookie=v_4_srv_-2D9_sn_KU9385CGNN6LS3SBDUJNCAU7S2LVOBC6; rxVisitor=1713522351928T3PR4KL9KV0539O7E6RPMA503K82835F; dtPC=-9$522351923_174h1vGLHAKTPCFDSGSMRNRAGMEOGCAFNAGRWT-0e0; rxvt=1713524151930|1713522351930; kndctr_AA7A3BC75245B3BC0A490D4D_AdobeOrg_cluster=irl1; kndctr_AA7A3BC75245B3BC0A490D4D_AdobeOrg_identity=CiY2OTkyMDcwNDM0ODAxMjc0ODM4NDAzNzUyMDUyNjM3NjQxMDg0N1ITCIzBkK_vMRABGAEqBElSTDEwAPABjMGQr-8x; AMCV_AA7A3BC75245B3BC0A490D4D%40AdobeOrg=MCMID|69920704348012748384037520526376410847
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 10:25:53 GMT
content-type: image/png
content-length: 140237
last-modified: Fri, 19 Apr 2024 09:51:13 GMT
vary: Accept-Encoding
etag: "66223e91-223cd"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2

tecmug.com/ui/ruxitagentjs_A27Vfgqrux_10229211201102017.js

54.37.43.133

404 Not Found

0 B

URL GET HTTP/2
tecmug.com/ui/ruxitagentjs_A27Vfgqrux_10229211201102017.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /ui/ruxitagentjs_A27Vfgqrux_10229211201102017.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=mu3aqlmueth71q9uoos76bgs2f; dtCookie=v_4_srv_-2D9_sn_KU9385CGNN6LS3SBDUJNCAU7S2LVOBC6; rxVisitor=1713522351928T3PR4KL9KV0539O7E6RPMA503K82835F; dtPC=-9$522351923_174h1vGLHAKTPCFDSGSMRNRAGMEOGCAFNAGRWT-0e0; rxvt=1713524151930|1713522351930
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 10:25:51 GMT
content-type: text/html
vary: Accept-Encoding
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: public, no-transform
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/login-login-module-es2015.c8daa61cd67d2ba350cd.js

54.37.43.133

200 OK

72 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/login-login-module-es2015.c8daa61cd67d2ba350cd.js
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
72 kB (71709 bytes)
Hash
2dd153e82de7d0cd15d9c294076c6d55
71ee55be17d96d75fb2c5969da0ca97d7b841cc2
e8130747319c4651f5e87b9d3901cc28a66b1372cc0ed73655cb086d1dae8144

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/login-login-module-es2015.c8daa61cd67d2ba350cd.js HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=mu3aqlmueth71q9uoos76bgs2f; dtCookie=v_4_srv_-2D9_sn_KU9385CGNN6LS3SBDUJNCAU7S2LVOBC6; rxVisitor=1713522351928T3PR4KL9KV0539O7E6RPMA503K82835F; dtPC=-9$522351923_174h1vGLHAKTPCFDSGSMRNRAGMEOGCAFNAGRWT-0e0; rxvt=1713524151930|1713522351930
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 10:25:51 GMT
content-type: application/javascript
last-modified: Fri, 19 Apr 2024 09:51:13 GMT
vary: Accept-Encoding
etag: W/"66223e91-1181d"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 10:25:51 GMT
content-encoding: br
X-Firefox-Spdy: h2

tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/styles.e0ebcc1d1647e0620502.css

54.37.43.133

200 OK

74 kB

URL GET HTTP/2
tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/styles.e0ebcc1d1647e0620502.css
IP
54.37.43.133:443
ASN
#16276 OVH SAS

Requested by
https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
Certificate
IssuerLet's Encrypt
Subjecttecmug.com
Fingerprint0F:F5:6F:C5:15:48:21:E4:0F:1F:89:48:5A:92:53:32:88:BC:31:90
ValiditySat, 24 Feb 2024 21:51:48 GMT - Fri, 24 May 2024 21:51:47 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
74 kB (73734 bytes)
Hash
92544faa78a609d6690809c36ab71df2
3dd292185056c3cbc2c5f6e60ecb8d76a11dd2a4
9c991b792a64c5eed8bdcf878f5bafb8638ff1dc9a9dfacbbffe8f9b57de9376

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Truist Bank

HTTP Headers

GET /wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/styles.e0ebcc1d1647e0620502.css HTTP/1.1
Host: tecmug.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tecmug.com/wp-content/app/truistverifyz/da305fcb1860194ebfb94ae09c0f4a2f/+t-===.html?ip=91.90.42.154
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=mu3aqlmueth71q9uoos76bgs2f; dtCookie=v_4_srv_-2D9_sn_KU9385CGNN6LS3SBDUJNCAU7S2LVOBC6; rxVisitor=1713522351928T3PR4KL9KV0539O7E6RPMA503K82835F; dtPC=-9$522351923_174h1vGLHAKTPCFDSGSMRNRAGMEOGCAFNAGRWT-0e0; rxvt=1713524151930|1713522351930
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 10:25:51 GMT
content-type: text/css
last-modified: Fri, 19 Apr 2024 09:51:13 GMT
vary: Accept-Encoding
etag: W/"66223e91-12006"
x-powered-by: WordOps
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
access-control-allow-origin: *
cache-control: max-age=2592000
expires: Sun, 19 May 2024 10:25:51 GMT
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML