firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 28 Sep 2022 05:15:39 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dhrjHuOVWhZynlbN81xrOdY-MM43FOmVHutnQKciXQYD-KlxkJs8LA==
Age: 448
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7fb7c70f7f4e2cee27eb0e7d875931f7
98fca3817a551b1daecebae103a48e718b8b5a53
2a40f957a6b1734aa3f87cff51b673f0536732db15b09033dd604879692df349
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A40F957A6B1734AA3F87CFF51B673F0536732DB15B09033DD604879692DF349"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6054
Expires: Wed, 28 Sep 2022 07:04:01 GMT
Date: Wed, 28 Sep 2022 05:23:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1017811d25642601e984edc1676d118d
c177c4f7a897584bf91347fa4990c83d6bfd0321
f35bb3a8c877dd8d3c5920f3c917722f12b157aff398e2ec30fab51fa6caa2ef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F35BB3A8C877DD8D3C5920F3C917722F12B157AFF398E2EC30FAB51FA6CAA2EF"
Last-Modified: Mon, 26 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4786
Expires: Wed, 28 Sep 2022 06:42:53 GMT
Date: Wed, 28 Sep 2022 05:23:07 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: UPYWgNf4PeYWcHWX+t3ARIKZG1WtrnFIU0kep2aAgVLiYdKQTlNQyPF+V+70WIzP9eOEn295ank=
x-amz-request-id: F3QKTFZXKRN9R69W
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 28 Sep 2022 04:49:52 GMT
age: 1995
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 28 Sep 2022 05:23:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.secure5u-mtbank.duckdns.org/m&t/login/
200 OK 145 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3020), with CRLF line terminators
Size 145 kB (144672 bytes)
Hash 1a9eed9eab24f1194211682820bf6b1f
1d51b2d87dfdd83dc6b96fd9de3e80551769b6c3
3a6892ff3b6e5f673965933d621444e54873aba61fb72671b9bc6cab637e7d57
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/ HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395; path=/
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/fbevents.js.download
200 OK 92 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/fbevents.js.download
IP
File type ASCII text, with very long lines (64379)
Hash 035c546ec647972c3449efda9f65bdfd
151ea74044c6c7f97515862b435aebf93b72dc74
a8755954660f9bef43d2dc61d725f022a3115b81ae76a6af093ab18cfdfa5de7
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/fbevents.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:48 GMT
Accept-Ranges: bytes
Content-Length: 91651
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/290387871401930
200 OK 28 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/290387871401930
IP
File type ASCII text, with very long lines (7235)
Hash 740d7c17696a46f20ae6c43bf7f26894
b1ce9929a39618697918843305ac05cd76f7df64
8a47a9a1fcf5a8e6d343ae3591437c92282fef9a7623f9281ee345d9395e543c
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/290387871401930 HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:48 GMT
Accept-Ranges: bytes
Content-Length: 27797
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/293418718495934
200 OK 28 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/293418718495934
IP
File type ASCII text, with very long lines (7235)
Hash 401b9584ae0eab1cf68bddc4b9c52492
81cbeb652f493b3774b57eef5d34631668549f4c
006a67707e2a0f3b67521d26aae51e86abaf7588065f8d2aaaa5350a33b786f5
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/293418718495934 HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:48 GMT
Accept-Ranges: bytes
Content-Length: 27797
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/f.txt
200 OK 31 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/f.txt
IP
File type ASCII text, with very long lines (1957)
Hash 82d8bd34375e71c1911547a69505021f
e15a3372e6b6a71f2ea9aa238b5fca1b744de7ee
5ebdb536b7060358878988d0c77039cba1148a00b89f802994c444df224a628b
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/f.txt HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:48 GMT
Accept-Ranges: bytes
Content-Length: 31095
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/plain
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/ytc.js.download
200 OK 15 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/ytc.js.download
IP
File type ASCII text, with very long lines (14972), with no line terminators
Hash 49db10c8315384e8dad2e92a6841ed81
f576976a579cd50da6b717db5d48e1ea7137f744
63896532a7015ab5b7288359c02124980a5075e9267f0ba3fbfc7c3f5038b478
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/ytc.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:48 GMT
Accept-Ranges: bytes
Content-Length: 14972
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/insight.min.js.download
200 OK 4.3 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/insight.min.js.download
IP
File type ASCII text, with very long lines (4321)
Hash d3b7f1a92dd6719f87830997e69f3675
a8bc777fd7187e3a56d5214a3bbddd95ec575ded
5f3b103a1268f862a5e432d607f8e5220dea9d301d13565b0ecded3ad9c25ab2
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/insight.min.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:48 GMT
Accept-Ranges: bytes
Content-Length: 4322
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/bat.js.download
200 OK 28 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/bat.js.download
IP
File type ASCII text, with very long lines (28050), with no line terminators
Hash f07693f6368c988acd20de4362479103
d04355e119fac2c9104c4fe98015e22f3f181d93
4dd6c09ddcb0e53a6290cc1df35224856073ba5f89d4134bd7c69e4fd9c6f515
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/bat.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:48 GMT
Accept-Ranges: bytes
Content-Length: 28050
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/uwt.js.download
200 OK 5.2 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/uwt.js.download
IP
File type ASCII text, with very long lines (5160), with no line terminators
Hash a4cc3f907681b24a3efd540acd5d2996
b0765e1c6b1c15a83c3f6cd8eae99300940c1519
8247f4332667950989fe6bf790f87723343db2ec83d975503e9c5dc13a6eb5dc
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/uwt.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:48 GMT
Accept-Ranges: bytes
Content-Length: 5160
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 28 Sep 2022 04:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Wed, 28 Sep 2022 05:14:07 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: T1m7h9cts8hBKBCkC7qVwog1d6T37ZZrus-xF3hVYn6-hk82Qi9iTQ==
Age: 3214
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/js
200 OK 99 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/js
IP
File type ASCII text, with very long lines (2644)
Hash d28754d1ca00d3d3e0c7e474a75796d4
1533d247725c0b8773239dd97cb7028d6e8988b7
8c28303cdfa8f03cb11a32269228c69bdb71281c05de374aeed9b9cc056877db
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/js HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:48 GMT
Accept-Ranges: bytes
Content-Length: 98756
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/js(1)
200 OK 99 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/js(1)
IP
File type ASCII text, with very long lines (2644)
Hash 3597bf301b5c3cbd19871f14cd4c55cb
1a0238331f4233cc01af55a70d90d3b6400e3353
9db50f2b5a7752e522d2ce2b519b68c2ab47b5add7a9b306ee4d01bb49817248
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/js(1) HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:48 GMT
Accept-Ranges: bytes
Content-Length: 98734
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/tqvdv1ilp.js.download
200 OK 21 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/tqvdv1ilp.js.download
IP
File type HTML document, ASCII text, with very long lines (19394)
Hash 039aa47bf98c45abda7dd622bc1fee52
d311cff70b73016206ba3ec966dc1e551420dc02
56adeea83478784da2a572a28d4ca42eeb1c26e21f41e77a8d22c9e011286692
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/tqvdv1ilp.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:48 GMT
Accept-Ranges: bytes
Content-Length: 21244
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/dnb_coretag_v5.min.js.download
200 OK 1.6 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/dnb_coretag_v5.min.js.download
IP
File type ASCII text, with very long lines (1604)
Hash b0575e56abb35f9110d78bf4ae8c66f7
93deb5a804275e8d31fccd8999523d101699f32f
33df908fca09a79114c7c3710e237470a642951b6989ee28eef97ceff23d6244
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/dnb_coretag_v5.min.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:48 GMT
Accept-Ranges: bytes
Content-Length: 1605
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/saved_resource
200 OK 0 B URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/saved_resource
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/saved_resource HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-base.css
200 OK 354 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-base.css
IP
File type ASCII text, with very long lines (1334), with CRLF, LF line terminators
Size 354 kB (353711 bytes)
Hash b56ba4d0723ffc26cdbb300889fa8f0c
acc3b95ec425373dd2e8c95792006858462f34ae
d822541e149a0307ec9e2b953e8414ab08ce5b62e5ae2d50b13ae00bd597b857
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-base.css HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:46 GMT
Accept-Ranges: bytes
Content-Length: 353711
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.js.download
200 OK 28 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.js.download
IP
File type HTML document, ASCII text, with very long lines (2931)
Hash 537af6b84e59edfdd08d2b04997d5332
2e5fc7819c2b36f24903bf32f41990eff3aa9db6
449b670bb48e738891a101f9f93f8d9a1ee93850899200c063c3ec6f93392528
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 27698
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-header.js.download
200 OK 2.4 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-header.js.download
IP
File type ASCII text, with CRLF line terminators
Hash b93d6de2484028c4a14e48e20cdafe1f
107c3da289ca6dd251908f41a8ae83f2bd75c509
44360533d25118024845be4572cb81a68ef5dcd4b0853f459691dc4d3022e9b0
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-header.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 2401
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.sync.js.download
200 OK 80 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.sync.js.download
IP
File type ASCII text, with very long lines (5966)
Hash 9ff139cb2c320ab994160b7f70db04d7
356761f060a63efcbfd53da18708e9058d677a92
63cbc7862679d4f66fa6f4bcd8316ec6f0ad38e782214348ff276fb626e3794f
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.sync.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 80296
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.40.js.download
200 OK 22 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.40.js.download
IP
File type ASCII text, with very long lines (2654)
Hash 4e4a8e9e96704ed77a439416c7365b42
f068a8a03d8c06f566954d605a1c88d079f7e57f
726a5d162c21c977bb7467b159d919e6539978c7b3d7a60ae6556c6058b874fb
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.40.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 21564
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.20.js.download
200 OK 1.2 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.20.js.download
IP
File type ASCII text, with very long lines (392)
Hash 7cac7b11ea215cc6c2e9b265904ad225
8df0cceb66ac32089a203e2f2725de2dbd95b38c
27ddaec566e54b6c408012319b821d6a0d788132e839764aa5845aa6cfb6316a
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.20.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 1161
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/vendor.js.download
200 OK 152 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/vendor.js.download
IP
File type ASCII text, with very long lines (53644), with CRLF, LF line terminators
Size 152 kB (152181 bytes)
Hash 06b459e6dad485d26b4e717da235c48a
ae2af65247fb06471b4eae6c9ac32f2088b948e8
5ed7b8f6d75479a2659633d7d532f567b06d3c9b8a4ca7cd16346db0556a5332
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/vendor.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 152181
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.41.js.download
200 OK 26 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.41.js.download
IP
File type ASCII text, with very long lines (9469)
Hash 827ee79ec1c89116b1c290ee24757a7d
d02610938b44e931cb97efbc0c1fdc922c5d744d
e5e0c7c97d1fcbe5466d8df69ed527ef05a6f92ab56c08e77dd4039a659c9e03
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.41.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 25697
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.30.js.download
200 OK 69 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.30.js.download
IP
File type ASCII text, with very long lines (12883)
Hash 57dd5a824fad1bcc75c9234e6155a33b
06dd5741309a75c4a24494ded6be211facd87d09
c36c14389bc2f99161388fdd9a63b2fe0c10e5f41df5a1ba2f0c1924e9e4051a
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.30.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 68673
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.43.js.download
200 OK 9.9 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.43.js.download
IP
File type ASCII text, with very long lines (1117)
Hash b78d8a73ab9e8e23cbc705cfb7a6f173
46ccf028319b6674d0b44a498b4aab15137244ba
0d5ebfe1a572fbfd6bb9930df03c417f1bb6790fbea6c0a3811b8394b6f43b08
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.43.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 9884
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.44.js.download
200 OK 3.6 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.44.js.download
IP
File type ASCII text, with very long lines (1117)
Hash 59e991ba5af57b277addde0cf31ab7be
49de2a90fc1ef0739ddd0e4ae9804afd0486ebc4
c21ae4633f825a266fd02637cb1dd6bd8597b68a9f97dc719fa4f86af87a4c0b
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.44.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 3569
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.45.js.download
200 OK 11 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.45.js.download
IP
File type ASCII text, with very long lines (1579)
Hash 6d0e1690eb89d0914ed75e65ae04cfa2
f3b3fed2cd9a0ce0954c63857fa18125557659cb
659193894cb830c97aeb1aa822febeed8b7bae88db0f3501b2648e1598c3e1e4
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.45.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 11086
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.46.js.download
200 OK 22 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.46.js.download
IP
File type ASCII text, with very long lines (2654)
Hash fdd837a583c5b329dcdafea48f595079
4ba86dace94231ecb8f6367235b1dc8243c13174
b6b341a1b9d5116663597c5507b2b80dbbcf85f0c993c2c197bd332993e56015
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.46.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 21564
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.digicert.com/
200 OK 471 B IP
Hash c18823050f86339eaa73ddb1bf80d64c
ac4ee81f59f706cee8a74458d498bbc20d8d351a
9a505647517bd02d8ff994fd4ad98dc2f4b519916145b0c327691420c1084c46
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5469
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 05:23:08 GMT
Last-Modified: Wed, 28 Sep 2022 03:51:59 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.47.js.download
200 OK 3.0 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.47.js.download
IP
File type ASCII text, with very long lines (995)
Hash 36cda77b4127ef38eefc2a8df0e08ffb
298d51658cfa9a03734022b4ab7e9ba865bbd0e8
2b1493c74ba031fd8b7894af6bbaafa2b6728ffdb9de7d383c5c8f2fecca13c9
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.47.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 3025
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.48.js.download
200 OK 11 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.48.js.download
IP
File type ASCII text, with very long lines (1579)
Hash 3534a51e364faea617c81249b3db966f
3979b42c567779c96700d1df06a7933bdde40b21
43fffb53c3be84053f9a10f115aa4418793f29fc94c10ac90534d438511b2307
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.48.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 11086
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.v.js.download
200 OK 2 B URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.v.js.download
IP
File type ASCII text, with no line terminators
Hash 7bc0ee636b3b83484fc3b9348863bd22
ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610
a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.v.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 2
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/f(1).txt
200 OK 2.5 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/f(1).txt
IP
File type ASCII text, with very long lines (2514), with no line terminators
Hash c2391167c36e3fdaa1dd076718dbbc0a
f6b0fc5a23bd1ab78c4ed25571ff76b34d38e155
e3c863c0d8693e104d5b41e6159233e838cd40a3d799621c712439184268c6e2
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/f(1).txt HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 2514
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/plain
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/f(2).txt
200 OK 2.5 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/f(2).txt
IP
File type ASCII text, with very long lines (2474), with no line terminators
Hash f0290250acfa4ddf640552e84c884fcc
fab8c39dc81f92a71db3064edc85925e81fe1c25
65845ba3addeb5efa2e6db7b179c1f883664bb9b155b5b76add1e829cc7359e9
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/f(2).txt HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 2474
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/plain
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/optout_check
200 OK 73 B URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/optout_check
IP
File type ASCII text, with no line terminators
Hash 31d64c2a6a918629050e159a2effaee2
f9eb5a5b99bdcf395783e0468cb14a7cfeda59aa
bec3120eb0298bdc01d313d6fc8f754156cffeaf3806a18e3a8a77a136ea5713
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/optout_check HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:46 GMT
Accept-Ranges: bytes
Content-Length: 73
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/get
200 OK 330 B URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/get
IP
File type ASCII text, with very long lines (330), with no line terminators
Hash f2e7d04e7d6fa2d7ae71cae6d3d243a5
54d7408f6204138ed5a9bc0a5411cae231103120
2bae241bf2ad9454e7653e9649dc21554530c5d6d515ebd92bb10bfb8c9e1241
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/get HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:46 GMT
Accept-Ranges: bytes
Content-Length: 330
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/5fbc882d-fc17-416e-8069-4c0fc55390a2
200 OK 249 B URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/5fbc882d-fc17-416e-8069-4c0fc55390a2
IP
File type ASCII text, with no line terminators
Hash 38a3ca7fe705ed17d35a044d7df391f3
de85d1c05c0137b3cfee0d396938d9899105d705
4e802c95f9b4652ade7cee126c8eb8627e7bf9012aa16b4ba4c468138478332c
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/5fbc882d-fc17-416e-8069-4c0fc55390a2 HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:48 GMT
Accept-Ranges: bytes
Content-Length: 249
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-base.js.download
200 OK 278 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-base.js.download
IP
File type Unicode text, UTF-8 text, with CRLF, LF line terminators
Size 278 kB (278378 bytes)
Hash 0f3937caf7c507d9a365f2b657b72238
1507516a1113a6fb0e1ce869dc2e8b17e4acc5b2
e03189cb9476b31a3824b2befb2115f5dd32f5efa9bd4ca8464779d850119b80
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-base.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 278378
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/sp.pl(1).download
200 OK 0 B URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/sp.pl(1).download
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/sp.pl(1).download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/sp.pl.download
500 Internal Server Error 681 B URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/sp.pl.download
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a9677d9bd87be24e89b7cfa0219183f0
83a14f15df237ae43cb8587b765647e625bbd41e
bd8ddf13e1cf8186de4ea88a5e888c10a62ebd2cbeddda95c8f67bfda6da64e7
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/sp.pl.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 500 Internal Server Error
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Content-Length: 681
Connection: close
Content-Type: text/html; charset=iso-8859-1
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/adsct
200 OK 31 B URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/adsct
IP
File type ASCII text, with no line terminators
Hash 872bb1fc2f7775cd82f45d110bbc384e
9c134426d5e946ab36a5be3a201e81f37f50dc99
df3e003cc30e9bdd0313100e8ee5d468070b4b34d11ad355f276a356d4b9c7bf
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/adsct HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:52 GMT
Accept-Ranges: bytes
Content-Length: 31
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
cdn-0.d41.co/tags/dnb_coretag_v5.min.js
200 OK 76 kB URL HTTP/1.1 cdn-0.d41.co/tags/dnb_coretag_v5.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (65460)
Hash 13bc1e6c74c25b3098a3b54b58b70b3c
9f1af24af10dd70b5ba31437dcd785d3dc2758fa
6cc0b251ec54fdd5cd55d98cbe7a7af00bd34f9cfd71fd01ca08c83121c89720
GET /tags/dnb_coretag_v5.min.js HTTP/1.1
Host: cdn-0.d41.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 76038
Connection: keep-alive
Last-Modified: Thu, 18 Nov 2021 14:57:39 GMT
Accept-Ranges: bytes
Server: AmazonS3
Date: Wed, 28 Sep 2022 05:19:48 GMT
ETag: "13bc1e6c74c25b3098a3b54b58b70b3c"
X-Cache: Hit from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: VpVTXCm0eux5s2IFgZwXgtu19kR8DAFWN7HAFR5yn-XjhicNKAKKKg==
Age: 274
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/green-logo.png
200 OK 22 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/green-logo.png
IP
File type PNG image data, 600 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 1e1d02e141e89a4c45d9c0aa5530bc3a
970e63270ce5fd36c51c3b25724b7b37f014f760
4ab56bfc693e75fbc52de80072dcbcd412efe057dcc099c9b718fb6f85ee129b
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/green-logo.png HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 21842
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/png
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/apple-app-store-button.jpeg
200 OK 5.1 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/apple-app-store-button.jpeg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x53, components 3\012- data
Hash 4bfc8bda4f3aabdcb54d1ae8bdcb1092
f33a6f8b5a760e3400e5171501a9f6b912b8b68f
e7139a533c635a587cfe9230a322f7d6b417dc48c02bc7fac0e6aa19f84b8ef3
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/apple-app-store-button.jpeg HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 5114
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/jpeg
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/google-play-button.jpeg
200 OK 4.9 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/google-play-button.jpeg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x53, components 3\012- data
Hash 6c29ac87adf2578f0e731baf579b6b2d
3c15026bfa0c22c6b8459b4d37e436f88dcc2be0
43474f41dddcd7379979ac57013b60d49807aede7745c07eb86bdb5debe07368
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/google-play-button.jpeg HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 4925
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/jpeg
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/0
200 OK 0 B URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/0 HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 0
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-light.woff
404 Not Found 315 B URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-light.woff
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-light.woff HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-base.css
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 404 Not Found
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-medium.woff
404 Not Found 315 B URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-medium.woff
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-medium.woff HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-base.css
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 404 Not Found
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/saved_resource.html
200 OK 149 B URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/saved_resource.html
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3c2ccda97c47ede0b1c91b11efd575ea
0a348c4b61c961aba7618f909beb87f740a81983
97f9b10039b05e1af4a3c9b778fc72ba44cf68a376e4ec1d55f2558f16cf3e50
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/saved_resource.html HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:52 GMT
Accept-Ranges: bytes
Content-Length: 149
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/html
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: /cDb0kqu0vHTHaRJfcqSqQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 4lFxtAO/YPUN3p2AuC97ThITW00=
tags.tiqcdn.com/utag/mtbank/main/prod/utag.js
200 OK 12 kB URL HTTP/2 tags.tiqcdn.com/utag/mtbank/main/prod/utag.js
IP
File type HTML document, ASCII text, with very long lines (17858)
Hash 57d2b0c44d133c264dae697c09197999
e88e3898dce485152ab55cd7ae74cb737dcf35c6
b5bbbdf2aa5c832d757a6904dd3e6c403f60d9ec0430c218e1e522e81e91a32b
GET /utag/mtbank/main/prod/utag.js HTTP/1.1
Host: tags.tiqcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "61f868908adabd7ee34baf19f0934565:1663019838.066104"
last-modified: Mon, 12 Sep 2022 21:57:18 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=300
expires: Wed, 28 Sep 2022 05:28:08 GMT
date: Wed, 28 Sep 2022 05:23:08 GMT
content-length: 11982
X-Firefox-Spdy: h2
api4921.d41.co/sync/
204 No Content 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/ HTTP/1.1
Host: api4921.d41.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/
HTTP/1.1 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: http://www.secure5u-mtbank.duckdns.org
Cache-control: no-store
Date: Wed, 28 Sep 2022 05:23:08 GMT
Expect-CT: max-age=30, report-uri="https://a54b4ab95d40a8b116fae47033b75682.report-uri.com/r/d/ct/reportOnly"
Pragma: no-cache
Referrer-Policy: no-referrer-when-downgrade
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Connection: keep-alive
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/sp.pl.download
500 Internal Server Error 681 B URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/sp.pl.download
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a9677d9bd87be24e89b7cfa0219183f0
83a14f15df237ae43cb8587b765647e625bbd41e
bd8ddf13e1cf8186de4ea88a5e888c10a62ebd2cbeddda95c8f67bfda6da64e7
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/sp.pl.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 500 Internal Server Error
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Content-Length: 681
Connection: close
Content-Type: text/html; charset=iso-8859-1
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/proxy.3d2100fd7107262ecb55ce6847f01fa5.html
200 OK 1.2 kB URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/proxy.3d2100fd7107262ecb55ce6847f01fa5.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (682)
Hash d329547d2701373e7e8c521a6696cc88
6ef2e515e8a3067afb4d87a6170b3ff1f6f3fe59
0ec883213be9e2c3e2b9acccb039ed93a84854bd213209b15e665927f57ebe5e
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/proxy.3d2100fd7107262ecb55ce6847f01fa5.html HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:52 GMT
Accept-Ranges: bytes
Content-Length: 1209
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/html
www.secure5u-mtbank.duckdns.org/m&t/axp-common/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-book.woff
404 Not Found 315 B URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/axp-common/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-book.woff
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/axp-common/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-book.woff HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-base.css
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 404 Not Found
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.secure5u-mtbank.duckdns.org/m&t/axp-common/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-medium.woff
404 Not Found 315 B URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/axp-common/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-medium.woff
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/axp-common/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-medium.woff HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-base.css
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 404 Not Found
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.secure5u-mtbank.duckdns.org/m&t/axp-common/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-light.woff
404 Not Found 315 B URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/axp-common/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-light.woff
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/axp-common/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-light.woff HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/clientlib-base.css
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 404 Not Found
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
cdn.krxd.net/ctjs/controltag.js.0631b7d64dbbd3656a8b7368ad227a04
200 OK 84 kB URL HTTP/1.1 cdn.krxd.net/ctjs/controltag.js.0631b7d64dbbd3656a8b7368ad227a04
IP
File type ASCII text, with very long lines (65438)
Hash 0631b7d64dbbd3656a8b7368ad227a04
8ceda15ae1c4cbb58dce61d17a4e1bd593d1fd32
62a4ef37ed954b6f15f61918c82fdbc8573b140b89d56fe72cbcc5622f1c4549
GET /ctjs/controltag.js.0631b7d64dbbd3656a8b7368ad227a04 HTTP/1.1
Host: cdn.krxd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 84451
Last-Modified: Thu, 15 Oct 2020 07:09:29 GMT
ETag: "0631b7d64dbbd3656a8b7368ad227a04"
x-amz-server-side-encryption: AES256
Cache-Control: public, max-age=315360000
Content-Encoding: gzip
Expires: Sun, 13 Oct 2030 07:09:28 GMT
Content-Type: application/javascript
X-CDN-Backend: 4FrRTvEr9h480D4BywjehZ--F_Controltag_S3
Accept-Ranges: bytes
Date: Wed, 28 Sep 2022 05:23:08 GMT
Via: 1.1 varnish
Age: 715698
X-Served-By: cache-bma1627-BMA
X-Cache: HIT
X-Cache-Hits: 2469
X-Timer: S1664342589.647638,VS0,VE0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5e01e4cfb215a3f052b4c716bc77c1a6
6e63b3e883051319571310c44b87591f0312d83f
aebb544e0762c6c3eb289d85c20299baa3f742dc46cfa5bcc33ac6df411285ae
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 05:23:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 835e2c4f85cb775a5f41fc5812a4c822
908bbf99979fe449a97e1aa70233cb1295beb7b4
3f947b5197c13ee52fa85a51e94062876f4ba4ab3dff73fd0eaebdff4947fe0a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 05:23:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5e01e4cfb215a3f052b4c716bc77c1a6
6e63b3e883051319571310c44b87591f0312d83f
aebb544e0762c6c3eb289d85c20299baa3f742dc46cfa5bcc33ac6df411285ae
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 05:23:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com.ng/pagead/1p-user-list/997504364/?random=1610529089665&cv=9&fst=1610528400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=1&u_tz=-420&u_java=false&u_nplug=3&u_nmime=4>m=2oabu0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services%2Fmt-online-banking&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Online%20Banking%20from%20M%26T%20Bank%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=2270094252&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.com.ng/pagead/1p-user-list/997504364/?random=1610529089665&cv=9&fst=1610528400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=1&u_tz=-420&u_java=false&u_nplug=3&u_nmime=4>m=2oabu0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services%2Fmt-online-banking&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Online%20Banking%20from%20M%26T%20Bank%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=2270094252&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/997504364/?random=1610529089665&cv=9&fst=1610528400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=1&u_tz=-420&u_java=false&u_nplug=3&u_nmime=4>m=2oabu0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services%2Fmt-online-banking&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Online%20Banking%20from%20M%26T%20Bank%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=2270094252&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Sep 2022 05:23:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/997504364/?random=1610529089665&cv=9&fst=1610528400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=1&u_tz=-420&u_java=false&u_nplug=3&u_nmime=4>m=2oabu0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services%2Fmt-online-banking&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Online%20Banking%20from%20M%26T%20Bank%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=2270094252&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/997504364/?random=1610529089665&cv=9&fst=1610528400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=1&u_tz=-420&u_java=false&u_nplug=3&u_nmime=4>m=2oabu0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services%2Fmt-online-banking&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Online%20Banking%20from%20M%26T%20Bank%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=2270094252&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/997504364/?random=1610529089665&cv=9&fst=1610528400000&num=1&bg=ffffff&guid=ON&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=1&u_tz=-420&u_java=false&u_nplug=3&u_nmime=4>m=2oabu0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services%2Fmt-online-banking&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Online%20Banking%20from%20M%26T%20Bank%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=2270094252&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Sep 2022 05:23:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com.ng/pagead/1p-user-list/990489911/?random=1610529089637&cv=9&fst=1610528400000&num=1&bg=ffffff&guid=ON&eid=376635470&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=1&u_tz=-420&u_java=false&u_nplug=3&u_nmime=4>m=2oabu0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services%2Fmt-online-banking&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Online%20Banking%20from%20M%26T%20Bank%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=1461807148&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
200 OK 42 B URL HTTP/2 www.google.com.ng/pagead/1p-user-list/990489911/?random=1610529089637&cv=9&fst=1610528400000&num=1&bg=ffffff&guid=ON&eid=376635470&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=1&u_tz=-420&u_java=false&u_nplug=3&u_nmime=4>m=2oabu0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services%2Fmt-online-banking&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Online%20Banking%20from%20M%26T%20Bank%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=1461807148&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/990489911/?random=1610529089637&cv=9&fst=1610528400000&num=1&bg=ffffff&guid=ON&eid=376635470&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=1&u_tz=-420&u_java=false&u_nplug=3&u_nmime=4>m=2oabu0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services%2Fmt-online-banking&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Online%20Banking%20from%20M%26T%20Bank%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=1461807148&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.com.ng
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Sep 2022 05:23:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/pagead/1p-user-list/990489911/?random=1610529089637&cv=9&fst=1610528400000&num=1&bg=ffffff&guid=ON&eid=376635470&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=1&u_tz=-420&u_java=false&u_nplug=3&u_nmime=4>m=2oabu0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services%2Fmt-online-banking&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Online%20Banking%20from%20M%26T%20Bank%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=1461807148&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/990489911/?random=1610529089637&cv=9&fst=1610528400000&num=1&bg=ffffff&guid=ON&eid=376635470&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=1&u_tz=-420&u_java=false&u_nplug=3&u_nmime=4>m=2oabu0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services%2Fmt-online-banking&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Online%20Banking%20from%20M%26T%20Bank%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=1461807148&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/990489911/?random=1610529089637&cv=9&fst=1610528400000&num=1&bg=ffffff&guid=ON&eid=376635470&u_h=768&u_w=1366&u_ah=728&u_aw=1366&u_cd=24&u_his=1&u_tz=-420&u_java=false&u_nplug=3&u_nmime=4>m=2oabu0&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services%2Fmt-online-banking&ref=https%3A%2F%2Fwww.google.com%2F&tiba=Online%20Banking%20from%20M%26T%20Bank%20%7C%20M%26T%20Bank&async=1&fmt=3&is_vtc=1&random=1461807148&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 28 Sep 2022 05:23:08 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash df5e8a2b82dd0d71c41468f5823d5c7e
c7d171a6b539e694c16f8c77c279b6365120338d
69cdf67d490cbbe575e9932198de393ef7d257d39ab90f27f52d41a3253c6220
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "69CDF67D490CBBE575E9932198DE393EF7D257D39AB90F27F52D41A3253C6220"
Last-Modified: Tue, 27 Sep 2022 23:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=2316
Expires: Wed, 28 Sep 2022 06:01:44 GMT
Date: Wed, 28 Sep 2022 05:23:08 GMT
Connection: keep-alive
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash df5e8a2b82dd0d71c41468f5823d5c7e
c7d171a6b539e694c16f8c77c279b6365120338d
69cdf67d490cbbe575e9932198de393ef7d257d39ab90f27f52d41a3253c6220
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "69CDF67D490CBBE575E9932198DE393EF7D257D39AB90F27F52D41A3253C6220"
Last-Modified: Tue, 27 Sep 2022 23:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=2236
Expires: Wed, 28 Sep 2022 06:00:24 GMT
Date: Wed, 28 Sep 2022 05:23:08 GMT
Connection: keep-alive
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash 314cecfe376305b6e5062de80e206194
c96e14d44d9837f825e23ff2bf5b9654ec77d266
7aabe4d0b03184da563da266fb721f5c223b63e4f315e53376a73faf6667eb14
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "7AABE4D0B03184DA563DA266FB721F5C223B63E4F315E53376A73FAF6667EB14"
Last-Modified: Wed, 28 Sep 2022 03:00:00 UTC
Content-Length: 1585
Cache-Control: public, no-transform, must-revalidate, max-age=3512
Expires: Wed, 28 Sep 2022 06:21:40 GMT
Date: Wed, 28 Sep 2022 05:23:08 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 835e2c4f85cb775a5f41fc5812a4c822
908bbf99979fe449a97e1aa70233cb1295beb7b4
3f947b5197c13ee52fa85a51e94062876f4ba4ab3dff73fd0eaebdff4947fe0a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 05:23:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash be52dbe2d47697a7f007d69c486b77b4
fe445ea87749e97423e7865bc559ad78f672a62d
65d16df2b3095c658d2bdf39b06d57486967bba7b43c43108e5025d7af5b7ab6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 05:23:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www3.mtb.com/content/dam/mtb-web/logos/favicon.ico.transform/16x16/image.png
200 OK 401 B URL HTTP/2 www3.mtb.com/content/dam/mtb-web/logos/favicon.ico.transform/16x16/image.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash f32eaa315f438c20f938353fe16010d8
35763994c45d8bd91ada5da2b9800dae0aa696e5
e8f7f28606aa73ac8d557037ea2733637ce665a2cce96355cc4fbe1a3faade00
GET /content/dam/mtb-web/logos/favicon.ico.transform/16x16/image.png HTTP/1.1
Host: www3.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 401
accept-ranges: bytes
cache-control: max-age=3600, no-cache="set-cookie"
content-disposition: inline
date: Wed, 28 Sep 2022 04:34:56 GMT
etag: "191-5e921ab51a340"
last-modified: Tue, 20 Sep 2022 20:28:21 GMT
server: Apache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-content-type-options: nosniff
x-dispatcher: dispatcher1useast1
x-frame-options: SAMEORIGIN
x-vhost: publish
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ahh5vXsxi7AtbSLzN8HkspncEvoFaBbpEI3rb-zZkKxlnT41fbmY9w==
age: 2892
X-Firefox-Spdy: h2
px.ads.linkedin.com/collect?v=2&fmt=js&pid=&time=1664342585870&url=http%3A%2F%2Fwww.secure5u-mtbank.duckdns.org%2Fm%26t%2Flogin%2F
200 OK 0 B URL HTTP/2 px.ads.linkedin.com/collect?v=2&fmt=js&pid=&time=1664342585870&url=http%3A%2F%2Fwww.secure5u-mtbank.duckdns.org%2Fm%26t%2Flogin%2F
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /collect?v=2&fmt=js&pid=&time=1664342585870&url=http%3A%2F%2Fwww.secure5u-mtbank.duckdns.org%2Fm%26t%2Flogin%2F HTTP/1.1
Host: px.ads.linkedin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=ads.linkedin.com; Secure
bcookie="v=2&64d8db64-ffa3-490f-8f8a-053f8f6e8cad"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 28-Sep-2023 05:23:08 GMT; SameSite=None
lidc="b=TGST09:s=T:r=T:a=T:p=T:g=2393:u=1:x=1:i=1664342588:t=1664428988:v=2:sig=AQEnEMPuT1WRC73S4Td2Ha8KzurZlN0n"; Expires=Thu, 29 Sep 2022 05:23:08 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure
linkedin-action: 1
x-li-fabric: prod-ltx1
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true}
nel: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true}
x-li-pop: afd-prod-ltx1-x
x-li-proto: http/2
x-li-uuid: AAXptfTJEaffLXTLK0SQgQ==
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 5E8234D0C6C848CBA4F5831461D9E68B Ref B: OSL30EDGE0511 Ref C: 2022-09-28T05:23:08Z
date: Wed, 28 Sep 2022 05:23:07 GMT
content-length: 0
X-Firefox-Spdy: h2
www3.mtb.com/content/dam/mtb-web/logos/favicon.ico.transform/96x96/image.png
200 OK 2.6 kB URL HTTP/2 www3.mtb.com/content/dam/mtb-web/logos/favicon.ico.transform/96x96/image.png
IP
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash 4fd768d2f655e21bee5bac3c6b38bd6c
fa02239152ca15fa297333f184883dd23e0a43f0
52f3dce4eae9bf172e485e0c33ad0dc31fd3582f6a3f69354fa4baf932397cd1
GET /content/dam/mtb-web/logos/favicon.ico.transform/96x96/image.png HTTP/1.1
Host: www3.mtb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 2634
accept-ranges: bytes
content-disposition: inline
last-modified: Tue, 20 Sep 2022 20:30:31 GMT
server: Apache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-content-type-options: nosniff
x-dispatcher: dispatcher1useast1
x-frame-options: SAMEORIGIN
x-vhost: publish
cache-control: max-age=3600, no-cache="set-cookie"
date: Wed, 28 Sep 2022 05:07:07 GMT
etag: "a4a-5e921b31147c0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BPZqwuuZhYnnggOc1uRqG2psRr1w99j5XrEAjUNmS19kV8lvPn2A4Q==
age: 961
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 6bcd06ca48af63e808ddb119c7fc4ae6
fd7a980f98069b96c40521af6144549c18d6c8c5
98454385f06b2bcdb55ed620b87a6db22d08c3289ccf00a1977d272283b1d345
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1147
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 28 Sep 2022 05:23:08 GMT
Last-Modified: Wed, 28 Sep 2022 05:04:01 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
consumer.krxd.net/consent/get/5fbc882d-fc17-416e-8069-4c0fc55390a2?idt=device&dt=kxcookie&_kuid=kppidff_PGvuYxcA&callback=Krux.ns.mtbankcorporationus.kxjsonp_consent_get_0
200 OK 196 B URL HTTP/2 consumer.krxd.net/consent/get/5fbc882d-fc17-416e-8069-4c0fc55390a2?idt=device&dt=kxcookie&_kuid=kppidff_PGvuYxcA&callback=Krux.ns.mtbankcorporationus.kxjsonp_consent_get_0
IP
File type ASCII text, with no line terminators
Hash f4138fba51b4fc67bfc55ada12526435
a5bd3b5bcb424ab449df859b26426e119861472a
4443912ea0eba3815d1d94ce83db068b4f34586acf7dda32cfd75124e2b76cb5
GET /consent/get/5fbc882d-fc17-416e-8069-4c0fc55390a2?idt=device&dt=kxcookie&_kuid=kppidff_PGvuYxcA&callback=Krux.ns.mtbankcorporationus.kxjsonp_consent_get_0 HTTP/1.1
Host: consumer.krxd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
cache-control: max-age=1800
content-encoding: gzip
x-age: 0
accept-ranges: bytes
date: Wed, 28 Sep 2022 05:23:09 GMT
via: 1.1 varnish
age: 0
x-served-by: consumer-a008-ash-prod.krxd.net, cache-bma1668-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1664342589.902168,VS0,VE103
vary: Accept-Encoding
content-length: 196
X-Firefox-Spdy: h2
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/controltag.js.0631b7d64dbbd3656a8b7368ad227a04
200 OK 503 B URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/controltag.js.0631b7d64dbbd3656a8b7368ad227a04
IP
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/controltag.js.0631b7d64dbbd3656a8b7368ad227a04 HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:08 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:48 GMT
Accept-Ranges: bytes
Content-Length: 265468
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3458
Expires: Wed, 28 Sep 2022 06:20:47 GMT
Date: Wed, 28 Sep 2022 05:23:09 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 139d64e28724086d1d5ab6d2f534ff25
2c717905e83564a17bd8ca61dd934133416f629b
a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3458
Expires: Wed, 28 Sep 2022 06:20:47 GMT
Date: Wed, 28 Sep 2022 05:23:09 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9a3b058-92c9-490e-9cbb-736f7e46510d.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9a3b058-92c9-490e-9cbb-736f7e46510d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea3890e460356d6ecc3ba4e405ac2e9e
b383135e2ebc23fe80eb0d594b198cb8c89327a5
8fcff053ce6e5750136bf876bad5b2916935f13ea039912d977928b086f0a48b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb9a3b058-92c9-490e-9cbb-736f7e46510d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7455
x-amzn-requestid: e99c9f33-b72a-4070-80cf-06fb4a87d1df
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZG4S6EcAoAMFX1A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6332a0df-04122b4a345dbc3f3918af98;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 07:06:07 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: yW-bGn5vYTa6Z28ELKYgYpy98wQEbYJIl5yxd1qLxz1YjVYKxMH2Wg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 07:31:02 GMT
age: 78727
etag: "b383135e2ebc23fe80eb0d594b198cb8c89327a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa8d9d6-9650-4c92-a2db-529657be591b.png
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa8d9d6-9650-4c92-a2db-529657be591b.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 07f06c54e3b1431203308e4134e7efcb
e26e7e4f7c67d680f0c2d0fa84dcb77ffbef6a49
2814f21c6a21623c189163672867272eb24f754d3d22a8285349e5dd9f6b49f7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa8d9d6-9650-4c92-a2db-529657be591b.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10031
x-amzn-requestid: 0ac9a228-b6ce-4695-b269-f6a5ba959576
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e4HTsoAMF8dQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5f-1d1cacef2608d5820b2bc1b1;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: HKSCXbOStqMfD92WWwpkNF1l9euR9RkHTo2boSKqhPAunGl2u_YGlg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:46:48 GMT
age: 27381
etag: "e26e7e4f7c67d680f0c2d0fa84dcb77ffbef6a49"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb17f4e8-cf01-41dc-8d4d-247daf3e0160.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb17f4e8-cf01-41dc-8d4d-247daf3e0160.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d039db0b842a4cbbaefdaab98bc6722b
78b1a603c4f7f2d6fbad15d7a4cd1397554339e9
65a3c7b0515cfd2a723f3bc3147cb98f3dd75ce1ecfce915c7c8e9ba5ae0bf2d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb17f4e8-cf01-41dc-8d4d-247daf3e0160.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14018
x-amzn-requestid: fb0f02e7-1ce0-4861-9446-13d60df06f24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3xSEhCIAMFWkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336cd4-79f482493d204a1208fad00f;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZAov4fpWAjIBhHfeYEwu39wJTG58HnW7ebekpIoNSgA7PLIs5b7sSg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 22:09:19 GMT
age: 26030
etag: "78b1a603c4f7f2d6fbad15d7a4cd1397554339e9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ee83d08d024d127fad5918e1ffacb78b
8ad289a77705358ab660b6123e9d90de991b6c13
aaab3590ef3777ce8b7a9a34f18866fa20ecaa554cbcdcdb3f1fa3c34c88ceb4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5653a1a-a7d7-4b1e-a27e-4eb6b032901d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11314
x-amzn-requestid: 9f410158-cd1a-45a9-9e86-4005b25577e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3e4Hw7oAMFpAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c5f-70683c681f22a3b6103fcb4a;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:34:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: l9IinQYCcQV_iymSArIEnOWgbmLlmVqz94402zcsmga5Bp3Sty7QRg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 21:40:49 GMT
age: 27740
etag: "8ad289a77705358ab660b6123e9d90de991b6c13"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc892aae9-4381-46ed-9dd8-bd581d7389ee.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc892aae9-4381-46ed-9dd8-bd581d7389ee.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 59163c799f3d48e74abdd285ee615119
883e61d46ef6c09013724aa7b8f560272ee08574
e1bafc575ff4274b210bee481a8e73c065de5bc14ddf46c269ef91eda0df8d84
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc892aae9-4381-46ed-9dd8-bd581d7389ee.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8621
x-amzn-requestid: 5a828651-41c2-4aa0-931d-6522098a8438
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZASUWEYvIAMFUJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ffdb5-5ace75523a98a9237fabca8f;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 07:05:25 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _r1yeWUGcjSAzmlPcqiZrNgOGrGb29Dxgrz3AOm9oU0-wgHy7axiKw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 07:40:36 GMT
age: 78153
etag: "883e61d46ef6c09013724aa7b8f560272ee08574"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a264fec-4624-4025-b0d1-044fc33e338f.webp
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a264fec-4624-4025-b0d1-044fc33e338f.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43d7c0db2af42ad4d0095324b2691f6c
1a1139cff14aff6755b9e43ff4ef8c9ece1102c1
42073c84e0c215109b54ab55a53cce9e6cce44f4619f5988fa4e2776ff70b362
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a264fec-4624-4025-b0d1-044fc33e338f.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9780
x-amzn-requestid: 9938422e-12cd-4aab-9e58-c26b8fee53b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZI3UOH3DoAMFZRw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63336c1a-37105d923f19437025abec71;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 21:33:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Halsx09hxT_sMRc2jy-fJA0tE85F6Bgz9P9Trx02Z9aMfIZVLkLW4g==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 22:11:14 GMT
age: 25915
etag: "1a1139cff14aff6755b9e43ff4ef8c9ece1102c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
beacon.krxd.net/optout_check?_kuid=kppidff_PGvuYxcA&callback=Krux.ns.mtbankcorporationus.kxjsonp_optOutCheck
200 OK 0 B URL HTTP/2 beacon.krxd.net/optout_check?_kuid=kppidff_PGvuYxcA&callback=Krux.ns.mtbankcorporationus.kxjsonp_optOutCheck
IP
GET /optout_check?_kuid=kppidff_PGvuYxcA&callback=Krux.ns.mtbankcorporationus.kxjsonp_optOutCheck HTTP/1.1
Host: beacon.krxd.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 28 Sep 2022 05:23:08 GMT
content-type: text/javascript
cache-control: private, max-age=0, s-max-age=0
x-served-by: beacon-n005-dub-prod.krxd.net
x-request-time: D=32 t=1664342588
X-Firefox-Spdy: h2
www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.42.js.download
200 OK 0 B URL HTTP/1.1 www.secure5u-mtbank.duckdns.org/m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.42.js.download
IP
Analyzer Verdict Alert urlquery DynDNS domain detected
GET /m&t/login/Online%20Banking%20from%20M&T%20Bank%20_%20M&T%20Bank_files/utag.42.js.download HTTP/1.1
Host: www.secure5u-mtbank.duckdns.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.secure5u-mtbank.duckdns.org/m&t/login/
Cookie: PHPSESSID=9e58248138e9e24ef1fce93929f21395
HTTP/1.1 200 OK
Date: Wed, 28 Sep 2022 05:23:07 GMT
Server: Apache
Last-Modified: Wed, 13 Jan 2021 00:12:50 GMT
Accept-Ranges: bytes
Content-Length: 3025
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
159.253.120.235
143.204.55.27
93.184.220.29
151.101.86.133
23.38.200.249
52.215.16.237