WEBSITE ANALYSIS REPORT

http://bank-of-montreal-holdings.pages.dev/

28 Jun 2026 · 14:08:43.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

1adr.com1 captured requests
50785.ase.aidcgroup.net1 captured requests
acs.aliexpress.com5 captured requests
ae-pic-a1.aliexpress-media.com5 captured requests
ae01.alicdn.com2 captured requests
aplus.aliexpress.com12 captured requests
ase.aidcgroup.net2 captured requests
assets.alicdn.com6 captured requests
assets.aliexpress-media.com18 captured requests
bank-of-montreal-holdings.pages.dev6 captured requests
dida-bottom.aliexpress-media.com1 captured requests
epss.alibaba-inc.com2 captured requests
exemplarfederallithe.com2 captured requests
flourishingscreencousin.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com4 captured requests
fourier.aliexpress.com2 captured requests
o.alicdn.com2 captured requests
pagead2.googlesyndication.com1 captured requests
pcookie.aliexpress.com1 captured requests
protrafficinspector.com1 captured requests
rcdn-web.com1 captured requests
recom-acs.aliexpress.com2 captured requests
s.click.aliexpress.com2 captured requests
umdc-global.aliexpress.com1 captured requests
www.aliexpress.com2 captured requests

Connections

aplus.aliexpress.com → pcookie.aliexpress.comRedirects to1 captured connections
bank-of-montreal-holdings.pages.dev → exemplarfederallithe.comCalls1 captured connections
bank-of-montreal-holdings.pages.dev → exemplarfederallithe.comLoads from1 captured connections
bank-of-montreal-holdings.pages.dev → flourishingscreencousin.comLoads from2 captured connections
bank-of-montreal-holdings.pages.dev → fonts.googleapis.comLoads from1 captured connections
bank-of-montreal-holdings.pages.dev → fonts.gstatic.comLoads from4 captured connections
bank-of-montreal-holdings.pages.dev → protrafficinspector.comCalls1 captured connections
bank-of-montreal-holdings.pages.dev → rcdn-web.comRedirects to1 captured connections
www.aliexpress.com → 50785.ase.aidcgroup.netCalls1 captured connections
www.aliexpress.com → acs.aliexpress.comLoads from5 captured connections
www.aliexpress.com → ae-pic-a1.aliexpress-media.comLoads from5 captured connections
www.aliexpress.com → ae01.alicdn.comLoads from2 captured connections
www.aliexpress.com → aplus.aliexpress.comCalls9 captured connections
www.aliexpress.com → aplus.aliexpress.comLoads from3 captured connections
www.aliexpress.com → ase.aidcgroup.netCalls2 captured connections
www.aliexpress.com → assets.alicdn.comCalls1 captured connections
www.aliexpress.com → assets.alicdn.comLoads from5 captured connections
www.aliexpress.com → assets.aliexpress-media.comLoads from18 captured connections
www.aliexpress.com → dida-bottom.aliexpress-media.comCalls1 captured connections
www.aliexpress.com → epss.alibaba-inc.comLoads from2 captured connections
www.aliexpress.com → fourier.aliexpress.comLoads from2 captured connections
www.aliexpress.com → o.alicdn.comCalls1 captured connections
www.aliexpress.com → o.alicdn.comLoads from1 captured connections
www.aliexpress.com → pagead2.googlesyndication.comCalls1 captured connections
www.aliexpress.com → pcookie.aliexpress.comLoads from1 captured connections
www.aliexpress.com → recom-acs.aliexpress.comCalls2 captured connections
www.aliexpress.com → s.click.aliexpress.comLoads from2 captured connections
www.aliexpress.com → umdc-global.aliexpress.comCalls1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

14:08:14.510 GET 200 document 20.6 KB 4227 ms 1 alerts

14:08:19.190 GET 200 stylesheet 9.9 KB 83 ms —

14:08:19.193 GET 200 stylesheet 5.3 KB 50 ms 1 alerts

14:08:19.194 GET 200 script 47.0 KB 624 ms 4 alerts

14:08:19.196 GET 200 script 47.0 KB 924 ms 4 alerts

14:08:19.350 GET 200 font 47.4 KB 96 ms —

14:08:19.352 GET 200 font 47.4 KB 90 ms —

14:08:19.355 GET 200 font 47.4 KB 92 ms —

14:08:19.356 GET 200 font 47.4 KB 93 ms —

14:08:19.360 GET 200 lazy-img 378.3 KB 91 ms 1 alerts

14:08:19.362 GET 200 lazy-img 378.3 KB 90 ms 1 alerts

14:08:19.363 GET 200 lazy-img 20.8 KB 67 ms 1 alerts

14:08:19.676 GET 200 img 20.6 KB 32 ms 1 alerts

14:08:19.834 GET 200 xhr 40 B 131 ms —

14:08:19.836 GET 200 xhr 0 B 0 ms 1 alerts

Transaction #63

Request / response

URL

GET HTTPS

https://exemplarfederallithe.com/ntv.json?key=cbd1884c35b52d09c43eb854cea9e948&vstc=4&rb=

IP / ASN

172.240.253.132

AS7979 · SERVERS-COM

Requested by: https://bank-of-montreal-holdings.pages.dev/

Resource information

File type: Not recorded
MIME type: Not recorded
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 06:29:54.992 UTC
Times seen: 19299897

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Certificate and TLS information not recorded.

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ntv.json?key=cbd1884c35b52d09c43eb854cea9e948&vstc=4&rb= HTTP/1.1
Host: exemplarfederallithe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://bank-of-montreal-holdings.pages.dev/
Origin: https://bank-of-montreal-holdings.pages.dev
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sun, 28 Jun 2026 14:08:20 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: Device-Stock-UA,X-Device-User-Agent,X-UCBrowser-Device-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Mobile,X-OperaMini-Phone-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Model
access-control-allow-credentials: true
access-control-allow-origin: https://bank-of-montreal-holdings.pages.dev
content-encoding: zstd
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
set-cookie: pdhtkv=true; Path=/; Expires=Mon, 29 Jun 2026 14:08:20 GMT; Secure; SameSite=None
uncs=1; Path=/; Expires=Mon, 29 Jun 2026 14:08:20 GMT; Secure; SameSite=None
pdhtkv49=true; Path=/; Expires=Mon, 29 Jun 2026 14:08:20 GMT; Secure; SameSite=None
uncs49=1; Path=/; Expires=Mon, 29 Jun 2026 14:08:20 GMT; Secure; SameSite=None
u_pl25497733=1; Path=/; Expires=Mon, 29 Jun 2026 14:08:20 GMT; Secure; SameSite=None
nleccbd1884c35b52d09c43eb854cea9e948="[6710643,6617803,6559086,6527580]"; Path=/; Expires=Sun, 28 Jun 2026 14:08:25 GMT; Secure; SameSite=None
vary: Accept-Encoding
x-envoy-upstream-service-time: 43
Host: exemplarfederallithe.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 97f46266c2784d00d7ecbb9767c45c15
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

14:08:20.134 GET No response img 0 B 0 ms 1 alerts

14:08:20.405 GET 200 document 1.0 KB 68 ms 1 alerts

14:08:20.596 GET 200 document 0 B 0 ms —

14:08:21.324 GET 200 document 34.3 KB 41 ms —

14:08:21.403 GET 200 stylesheet 14.2 KB 32 ms —

14:08:21.404 GET 200 script 190.1 KB 288 ms —

14:08:21.406 GET 200 stylesheet 133.7 KB 27 ms —

14:08:21.407 GET 200 script 354.6 KB 35 ms —

14:08:21.409 GET 200 script 10.0 KB 26 ms —

14:08:21.410 GET 200 stylesheet 14.7 KB 33 ms —

14:08:21.411 GET 200 script 153.6 KB 28 ms —

14:08:21.412 GET 200 script 106.3 KB 26 ms —

14:08:21.414 GET 200 script 15.0 KB 24 ms —

14:08:21.419 GET 200 img 2.8 KB 55 ms —

14:08:21.422 GET 200 img 971 B 54 ms —

14:08:21.544 GET 200 font 85.8 KB 15 ms —

14:08:21.547 GET 200 font 85.8 KB 15 ms —

14:08:21.550 GET 200 script 7.0 KB 11 ms —

14:08:21.552 GET 200 script 6.1 KB 20 ms —

14:08:21.555 GET 200 script 37.0 KB 4 ms —

14:08:21.556 GET 200 script 353.5 KB 7 ms —

14:08:21.593 GET 200 script 313.0 KB 6 ms —

14:08:21.595 POST 200 xhr 122 B 114 ms —

14:08:21.596 GET 200 script 36.5 KB 3 ms —

14:08:21.757 GET 200 img 41.9 KB 43 ms —

14:08:21.758 GET 200 img 0 B 0 ms —

14:08:21.819 GET 200 fetch 0 B 136 ms —

14:08:21.861 GET 200 fetch 155.3 KB 88 ms —

14:08:22.114 GET No response fetch 0 B 0 ms —

14:08:22.127 GET 200 img 0 B 0 ms —

14:08:22.128 GET 200 img 1.3 KB 11 ms —

14:08:22.131 GET 200 img 8.2 KB 11 ms —

14:08:22.132 GET 200 img 626 B 11 ms —

14:08:22.133 GET 200 img 75.6 KB 15 ms —

14:08:22.173 GET 200 font 86.7 KB 6 ms —

http://bank-of-montreal-holdings.pages.dev/

Domain graph

Hostnames

Connections

Network requests

Transaction #63

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://bank-of-montreal-holdings.pages.dev/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #63

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://bank-of-montreal-holdings.pages.dev/

Domain graph

Network requests