Domain > mftp.mbremit.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-10-02	172.64.146.173 (ClassC)
2026-01-09	104.18.17.133 (ClassC)

HTTP/1.1 200 OKDate: Fri, 09 Jan 2026 22:23:41 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-RAY: 9bb75728893d3416-PDXCache-Control: no-cache, no-storePragma: no-cacheExpires: -1Content-Security-Policy: default-src self; script-src self nonce-3K1X666BXHxfjc2Z6Th9Q8Kp    ;style-src self unsafe-inline; img-src self data:   ; frame-src none; media-src noneStrict-Transport-Security: max-age15552000; includeSubDomains; preloadX-XSS-Protection: 1; modeblockX-XSS-Protection: 1; modeblockX-Frame-Options: DENYX-Frame-Options: SAMEORIGINSet-Cookie: ASP.NET_SessionIddefsatbmzglimcqjszsj5ao5; path/; secure; HttpOnly; SameSiteLaxSet-Cookie: DMZCookieTestifyoucanreadthisyourbrowsersupportscookies; path/Set-Cookie: siLockLongTermInstID8705; expiresSun, 09-Jan-2028 22:23:41 GMT; path/Set-Cookie: MIDMZLangen; expiresSun, 09-Jan-2028 22:23:41 GMT; path/Set-Cookie: JavascriptTest0; path/Set-Cookie: DesignModeTest0; path/Set-Cookie: LongTermCookieExpireDateJanuary 10 2028 06:23:41; path/X-Compressed-By: HttpCompressX-Content-Type-Options: nosniffX-Robots-Tag: noindexAccess-Control-Allow-Origin: https://mftp.mbremit.com/cf-cache-status: DYNAMICvary: accept-encodingServer: cloudflarealt-svc: h3:443; ma86400

!DOCTYPE html PUBLIC -//W3C//DTD HTML 4.01//EN http://www.w3.org/TR/html4/strict.dtd>html langen>  head>    META http-equivContent-Type contenttext/html; charsetutf-16>    title>Metrobank/title>    style typetext/css>          @import templates/bootstrap_custom.css?v13;          @import js/dist/jquery.smartbanner.css?v13;          @import templates/progression.css?v13;          @import templates/buttonlinkbase.css?v13;          @import templates/stylesheet_MOVEit_Gray.css?v13;          /style>    link relshortcut icon hrefimages/favicon.ico typeimage/x-icon>    link refaddress bar icon hrefimages/favicon.ico typeimage/x-icon>    meta nameapple-itunes-app contentapp-id1500056420>    meta namegoogle-play-app contentapp-idcom.progress.moveit.transfer.dev.appid>    meta http-equivX-UA-Compatible contentIEedge>script typeapplication/javascript srcjs/dist/jquery.min.js?v13>/script>script typeapplication/javascript srcjs/dist/jquery.smartbanner.js>/script>script typeapplication/javascript nonce3K1X666BXHxfjc2Z6Th9Q8Kp>              $(function() {                $.smartbanner({                  title: MOVEit Mobile,                  author: Progress Software Corporation,                  price: Free,                  inGooglePlay: On the Google Play,                  icon: images/MoveitMobileIcon.png,                  button: View,                  scale: 1,                });              });            /script>script typeapplication/javascript srctemplates/en/pendoSnippet.js?v13>/script>script typeapplication/javascript nonce3K1X666BXHxfjc2Z6Th9Q8Kp>              function FocusContentArea() {                var contentArea  document.getElementById(content);                if(contentArea) {                  contentArea.focus({preventScroll:true});                }              }              var listOnLoadActions  ;              function AddOnClickEventHandler(elementId, action) {                AddEventHandler(click, elementId, action)              }              function AddOnChangeEventHandler(elementId, action) {                AddEventHandler(change, elementId, action)              }              function AddOnSubmitEventHandler(elementId, action) {                AddEventHandler(submit, elementId, action)              }              function AddOnKeyDownEventHandler(elementId, action) {                AddEventHandler(keydown, elementId, action)              }              function AddEventHandler(type, elementId, action) {                listOnLoadActions.push({eventType: type, id: elementId, handler: action});              }              function HandleKeypressAsClick(elemId, preventDefault  true) {                AddOnKeyDownEventHandler(elemId, (e) > {                  if (e.key    || e.key  Enter) {                    if(preventDefault) e.preventDefault();                    e.currentTarget.click();                  }                });              }              window.addEventListener(load, () > {                Array.from(document.getElementsByClassName(js-postlink)).forEach(x > {                  x.addEventListener(click, (e) > {e.preventDefault(); DoPost(x.dataset.postref);});                });                listOnLoadActions.forEach((item) > {                  let element  document.getElementById(item.id)                  element?.addEventListener(item.eventType, item.handler);                });                if(top!self)top.location.hreflocation.href;try{ pageLoadedtrue; } catch(e) {};FirstFieldFocus();InitKeyboard()              });            /script>script typeapplication/javascript nonce3K1X666BXHxfjc2Z6Th9Q8Kp>        function toggleTableBody(event, tableId) {            var table  document.getElementById(tableId);            if(table) {              table.style.display  table.style.display ?  : none;            }            var target  (event.target) ? event.target : event.srcElement;            var iconElement  target.tagName  I ? target : target.querySelector(i);            if(iconElement) {              iconElement.classList.toggle(fa-chevron-down);              iconElement.classList.toggle(fa-chevron-right);            }        }                document.cookie  JavascriptTest1;path/;        if (document.designMode) document.cookie  DesignModeTest1;path/;        function openNewWin(f,w,x,y) {          return window.open(f,w,toolbarno,width+x+,height+y+,directoriesno,statusno,locationno,scrollbarsyes,resizableyes,menubarno);        }        function PopUp(x) {          openNewWin(x, MOVEitPopUp, 600, 400);        }        function PopUpAndReturn(x) {          return openNewWin(x, MOVEitPopup, 600, 400);        }        function FirstFieldFocus() {          for (i0;idocument.forms.length;i++) {            if ((document.formsi.name ! findfileform) && (document.formsi.name ! gotofolderform) && (document.formsi.name ! finduserform)) {              document.formsi.elementsFindNextTextField(document.formsi,-1).focus();              break;            }          }        }        function FindNextTextField(FormRef,StartField) {          var ThisField  StartField + 1;          var MyResult  -1;          var cntr  0;          while ((ThisField ! StartField) && (MyResult  -1) && (cntr  500)) {            if (ThisField  FormRef.elements.length) {              ThisField  0;            }            if ((FormRef.elementsThisField.type  text) || (FormRef.elementsThisField.type  password)) {              MyResult  ThisField;            }            ThisField++;            cntr++;          }          if (MyResult  -1)            return StartField;          else            return MyResult;        }        window.addEventListener(load, () > {          var seltab  ;          if (seltab.length > 0) {            var seltabele  document.getElementById(seltab);            if (seltabele) seltabele.classList.add(selectedtab);          }                            });      /script>/head>  body>    table rolepresentation idmaintable border0 cellspacing0 cellpadding0 stylewidth:100%;>tr idlogobar classlogobar_background_style>  td>    table rolepresentation border0 cellpadding0 cellspacing0 width100%>      tr stylebackground-image:url(images/InstLogos/headerbg_8705.gif);background-repeat:repeat-x;>        td alignleft>a href>img srcimages/InstLogos/logoBig_8705.gif altMetrobank border0 stylevertical-align:bottom;>/a>/td>        td alignright>img srcimages/InstLogos/logoright_8705.gif alt stylevertical-align:bottom;>/td>      /tr>    /table>  /td>/tr>tr idcontent-body-row>        td idcontent-body-cell>          table rolepresentation border0 cellpadding0 cellspacing0 width100% idhumanmain>            tr>              td valigntop>                div idoverlay>                  div classoverlayText>Drop files to upload/div>                /div>                table rolepresentation width100% cellpadding2 cellspacing0 border0 idcontent tabIndex-1 classcontent signoncontent>                  tr>                    td colspan2 stylepadding:0;font-size:0>a nameskipnav stylefont-size:0>img srcimages/null.gif width0 height0 alt border0>/a>/td>                  /tr>script typeapplication/javascript nonce3K1X666BXHxfjc2Z6Th9Q8Kp srcjs/dist/polyfills.rbundle.js?v13>/script>script typeapplication/javascript nonce3K1X666BXHxfjc2Z6Th9Q8Kp srcjs/dist/runtime.rbundle.js?v13>/script>script typeapplication/javascript nonce3K1X666BXHxfjc2Z6Th9Q8Kp srcjs/dist/vendors.rbundle.js?v13>/script>script typeapplication/javascript nonce3K1X666BXHxfjc2Z6Th9Q8Kp srcjs/dist/shared.rbundle.js?v13>/script>style typetext/css nonce3K1X666BXHxfjc2Z6Th9Q8Kp>@import js/dist/shared.rbundle.css?v13;/style>style typetext/css nonce3K1X666BXHxfjc2Z6Th9Q8Kp>@import js/dist/vendors.rbundle.css?v13;/style>script typeapplication/javascript nonce3K1X666BXHxfjc2Z6Th9Q8Kp srcjs/dist/keyboard.rbundle.js?v13>/script>style typetext/css nonce3K1X666BXHxfjc2Z6Th9Q8Kp>@import js/dist/keyboard.rbundle.css?v13;/style>script typeapplication/javascript nonce3K1X666BXHxfjc2Z6Th9Q8Kp>        function ShowKeyboard(inputId) {          renderKeyboard(inputId, en);        }      /script>script typeapplication/javascript nonce3K1X666BXHxfjc2Z6Th9Q8Kp>        function ShowKeyboardButton(inputid) {          var inputEle  document.getElementById(inputid);          if (inputEle) {            var triggerEle  document.createElement(img);            triggerEle.src  images/keyboard.png;            triggerEle.className  inputkeyboardicon;            triggerEle.align  absmiddle;            triggerEle.alt  Displays a clickable keyboard that provides protection against most key loggers.;            triggerEle.title  Displays a clickable keyboard that provides protection against most key loggers.;            function RunShowKeyboard() { ShowKeyboard(inputid); }            triggerEle.addEventListener(click, RunShowKeyboard);            inputEle.insertAdjacentElement(afterend, triggerEle);          }        }      /script>script typeapplication/javascript nonce3K1X666BXHxfjc2Z6Th9Q8Kp>        AddOnSubmitEventHandler(formsignon, DisableSubmitButton);        function InitKeyboard() {          ShowKeyboardButton(form_username,5);          ShowKeyboardButton(form_password,6);        }        function ClearSessionStorage() {          if(window.sessionStorage){          window.sessionStorage.clear();          }        }        function DisableSubmitButton() {          document.getElementById(submit_button).disabled  true;        }        window.addEventListener(load, ClearSessionStorage);      /script>tr>  form nameform_signon idformsignon action/human.aspx?r8071233219 methodPost AUTOCOMPLETEoff>input typehidden nametransaction valuesignon>input typehidden namefromsignon value1>input typehidden nameprevuser value>input typehidden namearg01 value>input typehidden namearg02 value>input typehidden namearg03 value>input typehidden namearg04 value>input typehidden namearg05 value>input typehidden namearg06 value>input typehidden namearg07 value>input typehidden namearg08 value>input typehidden namearg09 value>input typehidden namearg10 value>input typehidden namearg11 value>input typehidden namearg12>input typehidden nameOpt01 value>input typehidden nameOpt02 value>input typehidden nameOpt03 value>input typehidden nameOpt04 value>input typehidden nameOpt05 value>input typehidden nameOpt06 value>input typehidden nameOpt07 value>input typehidden nameOpt08 value>input typehidden nameOpt09 value>input typehidden nameOpt10 value>input typehidden nameOpt11 value>input typehidden nameOpt12 value>input typehidden nameOpt13 value>input typehidden nameOpt14 value>input typehidden nameOpt15 value>input typehidden nameOpt16 value>input typehidden nameOpt17 value>input typehidden nameOpt18 value>input typehidden nameOpt19 value>input typehidden nameOpt20 value>input typehidden nameOpt21 value>input typehidden nameOpt22 value>input typehidden nameOpt23 value>input typehidden nameOpt24 value>input typehidden nameInstID value8705>td colspan2>      div idsignoncontrolsarea>        div idsignonauthcontainer classtextsmall>          div idsignonformcontainer classloginForm>            div idsignonusernamecontainer classform-group signonInputContainer>label forform_username>Username/label>input typetext classform-control maxlength128 nameUsername idform_username placeholderUsername AUTOCOMPLETEoff value>/div>            div classform-group signonInputContainer>label forform_password>Password/label>input typepassword classform-control maxlength32 namePassword idform_password placeholderPassword AUTOCOMPLETEoff>/div>            div idsignonsecbannercontainer>              div classsignonsecbanner>Security Notice/div>              div classsignonsecnotice>You are about to access a secured resource. Metrobank reserves the right to monitor and/or limit access to this resource at any time. /div>            /div>            div idsignonsubmitcontainer>button idsubmit_button typesubmit classbtn btn-secondary signonbutton login-button btn-block>span>Sign On/span>/button>/div>          /div>        /div>      /div>      div idsignonextrasarea>/div>    /td>  /form>/tr>tr>                    td styleheight:120px;>/td>                    td>/td>                  /tr>                /table>              /td>            /tr>          /table>        /td>      /tr>    /table>  script nonce3K1X666BXHxfjc2Z6Th9Q8Kp>(function(){function c(){var ba.contentDocument||a.contentWindow.document;if(b){var db.createElement(script);d.nonce3K1X666BXHxfjc2Z6Th9Q8Kp;d.innerHTMLwindow.__CF$cv$params{r:9bb75728893d3416,t:MTc2Nzk5NzQyMS4wMDAwMDA};var adocument.createElement(script);a.nonce3K1X666BXHxfjc2Z6Th9Q8Kp;a.src/cdn-cgi/challenge-platform/scripts/jsd/main.js;document.getElementsByTagName(head)0.appendChild(a);;b.getElementsByTagName(head)0.appendChild(d)}}if(document.body){var adocument.createElement(iframe);a.height1;a.width1;a.style.positionabsolute;a.style.top0;a.style.left0;a.style.bordernone;a.style.visibilityhidden;document.body.appendChild(a);if(loading!document.readyState)c();else if(window.addEventListener)document.addEventListener(DOMContentLoaded,c);else{var edocument.onreadystatechange||function(){};document.onreadystatechangefunction(b){e(b);loading!document.readyState&&(document.onreadystatechangee,c())}}}})();/script>/body>/html>

Subdomains

Date	Domain	IP
paystation.mbremit.com	2024-08-09	104.18.41.83
mftp.mbremit.com	2026-01-09	104.18.17.133

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mftp.mbremit.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains