WEBSITE ANALYSIS REPORT

http://bank-of-montreal-holdings.pages.dev/

28 Jun 2026 · 14:08:43.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

1adr.com1 captured requests
50785.ase.aidcgroup.net1 captured requests
acs.aliexpress.com5 captured requests
ae-pic-a1.aliexpress-media.com5 captured requests
ae01.alicdn.com2 captured requests
aplus.aliexpress.com12 captured requests
ase.aidcgroup.net2 captured requests
assets.alicdn.com6 captured requests
assets.aliexpress-media.com18 captured requests
bank-of-montreal-holdings.pages.dev6 captured requests
dida-bottom.aliexpress-media.com1 captured requests
epss.alibaba-inc.com2 captured requests
exemplarfederallithe.com2 captured requests
flourishingscreencousin.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com4 captured requests
fourier.aliexpress.com2 captured requests
o.alicdn.com2 captured requests
pagead2.googlesyndication.com1 captured requests
pcookie.aliexpress.com1 captured requests
protrafficinspector.com1 captured requests
rcdn-web.com1 captured requests
recom-acs.aliexpress.com2 captured requests
s.click.aliexpress.com2 captured requests
umdc-global.aliexpress.com1 captured requests
www.aliexpress.com2 captured requests

Connections

aplus.aliexpress.com → pcookie.aliexpress.comRedirects to1 captured connections
bank-of-montreal-holdings.pages.dev → exemplarfederallithe.comCalls1 captured connections
bank-of-montreal-holdings.pages.dev → exemplarfederallithe.comLoads from1 captured connections
bank-of-montreal-holdings.pages.dev → flourishingscreencousin.comLoads from2 captured connections
bank-of-montreal-holdings.pages.dev → fonts.googleapis.comLoads from1 captured connections
bank-of-montreal-holdings.pages.dev → fonts.gstatic.comLoads from4 captured connections
bank-of-montreal-holdings.pages.dev → protrafficinspector.comCalls1 captured connections
bank-of-montreal-holdings.pages.dev → rcdn-web.comRedirects to1 captured connections
www.aliexpress.com → 50785.ase.aidcgroup.netCalls1 captured connections
www.aliexpress.com → acs.aliexpress.comLoads from5 captured connections
www.aliexpress.com → ae-pic-a1.aliexpress-media.comLoads from5 captured connections
www.aliexpress.com → ae01.alicdn.comLoads from2 captured connections
www.aliexpress.com → aplus.aliexpress.comCalls9 captured connections
www.aliexpress.com → aplus.aliexpress.comLoads from3 captured connections
www.aliexpress.com → ase.aidcgroup.netCalls2 captured connections
www.aliexpress.com → assets.alicdn.comCalls1 captured connections
www.aliexpress.com → assets.alicdn.comLoads from5 captured connections
www.aliexpress.com → assets.aliexpress-media.comLoads from18 captured connections
www.aliexpress.com → dida-bottom.aliexpress-media.comCalls1 captured connections
www.aliexpress.com → epss.alibaba-inc.comLoads from2 captured connections
www.aliexpress.com → fourier.aliexpress.comLoads from2 captured connections
www.aliexpress.com → o.alicdn.comCalls1 captured connections
www.aliexpress.com → o.alicdn.comLoads from1 captured connections
www.aliexpress.com → pagead2.googlesyndication.comCalls1 captured connections
www.aliexpress.com → pcookie.aliexpress.comLoads from1 captured connections
www.aliexpress.com → recom-acs.aliexpress.comCalls2 captured connections
www.aliexpress.com → s.click.aliexpress.comLoads from2 captured connections
www.aliexpress.com → umdc-global.aliexpress.comCalls1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

14:08:14.510 GET 200 document 20.6 KB 4227 ms 1 alerts

14:08:19.190 GET 200 stylesheet 9.9 KB 83 ms —

14:08:19.193 GET 200 stylesheet 5.3 KB 50 ms 1 alerts

14:08:19.194 GET 200 script 47.0 KB 624 ms 4 alerts

14:08:19.196 GET 200 script 47.0 KB 924 ms 4 alerts

Transaction #36

Request / response

URL

GET HTTPS

https://flourishingscreencousin.com/cbd1884c35b52d09c43eb854cea9e948/invoke.js

IP / ASN

172.240.253.132

AS7979 · SERVERS-COM

Requested by: https://bank-of-montreal-holdings.pages.dev/

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (48105), with no line terminators
MIME type: application/javascript
First seen (UTC): 09 May 2026 · 10:35:01.619 UTC
Last seen (UTC): 28 Jun 2026 · 19:56:16.147 UTC
Times seen: 4

Size: 47.0 KB (48107 bytes)
MD5: 672394ce4a11b7b7560aebcdf35ae546
SHA1: 48d4503c14fd4aa4f999227995d1004f95fd917b
SHA256: e56b81da1892182f249b2932161ee50b71b4969acf53e5e9d0c728f999e6747e

Certificate information

Issuer: Let's Encrypt · R12
Subject: flourishingscreencousin.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 62:10:D8:36:77:28:49:EB:77:74:CB:4A:AB:E0:5F:9B:CD:03:0C:67
Valid from: Sat, 02 May 2026 23:18:51 GMT
Valid until: Fri, 31 Jul 2026 23:18:50 GMT

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /cbd1884c35b52d09c43eb854cea9e948/invoke.js HTTP/1.1
Host: flourishingscreencousin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://bank-of-montreal-holdings.pages.dev/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sun, 28 Jun 2026 14:08:19 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: Sec-CH-UA-Mobile,X-OperaMini-Phone-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Device-Stock-UA,X-Device-User-Agent,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Full-Version
access-control-allow-origin: *
content-encoding: zstd
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
vary: Accept-Encoding
x-envoy-upstream-service-time: 4
Host: flourishingscreencousin.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 38e241d67fa6b1f40277ddfec8c32bff
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

14:08:19.350 GET 200 font 47.4 KB 96 ms —

14:08:19.352 GET 200 font 47.4 KB 90 ms —

14:08:19.355 GET 200 font 47.4 KB 92 ms —

14:08:19.356 GET 200 font 47.4 KB 93 ms —

14:08:19.360 GET 200 lazy-img 378.3 KB 91 ms 1 alerts

14:08:19.362 GET 200 lazy-img 378.3 KB 90 ms 1 alerts

14:08:19.363 GET 200 lazy-img 20.8 KB 67 ms 1 alerts

14:08:19.676 GET 200 img 20.6 KB 32 ms 1 alerts

14:08:19.834 GET 200 xhr 40 B 131 ms —

14:08:19.836 GET 200 xhr 0 B 0 ms 1 alerts

14:08:20.134 GET No response img 0 B 0 ms 1 alerts

14:08:20.405 GET 200 document 1.0 KB 68 ms 1 alerts

14:08:20.596 GET 200 document 0 B 0 ms —

14:08:21.324 GET 200 document 34.3 KB 41 ms —

14:08:21.403 GET 200 stylesheet 14.2 KB 32 ms —

14:08:21.404 GET 200 script 190.1 KB 288 ms —

14:08:21.406 GET 200 stylesheet 133.7 KB 27 ms —

14:08:21.407 GET 200 script 354.6 KB 35 ms —

14:08:21.409 GET 200 script 10.0 KB 26 ms —

14:08:21.410 GET 200 stylesheet 14.7 KB 33 ms —

14:08:21.411 GET 200 script 153.6 KB 28 ms —

14:08:21.412 GET 200 script 106.3 KB 26 ms —

14:08:21.414 GET 200 script 15.0 KB 24 ms —

14:08:21.419 GET 200 img 2.8 KB 55 ms —

14:08:21.422 GET 200 img 971 B 54 ms —

14:08:21.544 GET 200 font 85.8 KB 15 ms —

14:08:21.547 GET 200 font 85.8 KB 15 ms —

14:08:21.550 GET 200 script 7.0 KB 11 ms —

14:08:21.552 GET 200 script 6.1 KB 20 ms —

14:08:21.555 GET 200 script 37.0 KB 4 ms —

14:08:21.556 GET 200 script 353.5 KB 7 ms —

14:08:21.593 GET 200 script 313.0 KB 6 ms —

14:08:21.595 POST 200 xhr 122 B 114 ms —

14:08:21.596 GET 200 script 36.5 KB 3 ms —

14:08:21.757 GET 200 img 41.9 KB 43 ms —

14:08:21.758 GET 200 img 0 B 0 ms —

14:08:21.819 GET 200 fetch 0 B 136 ms —

14:08:21.861 GET 200 fetch 155.3 KB 88 ms —

14:08:22.114 GET No response fetch 0 B 0 ms —

14:08:22.127 GET 200 img 0 B 0 ms —

14:08:22.128 GET 200 img 1.3 KB 11 ms —

14:08:22.131 GET 200 img 8.2 KB 11 ms —

14:08:22.132 GET 200 img 626 B 11 ms —

14:08:22.133 GET 200 img 75.6 KB 15 ms —

14:08:22.173 GET 200 font 86.7 KB 6 ms —

http://bank-of-montreal-holdings.pages.dev/

Domain graph

Hostnames

Connections

Network requests

Transaction #36

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://bank-of-montreal-holdings.pages.dev/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #36

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://bank-of-montreal-holdings.pages.dev/

Domain graph

Network requests