| zip.qso.mybluehost.me/2us/verification/ |  162.241.217.222 | 200 OK | 16 kB |
URL User Request GET HTTP/2zip.qso.mybluehost.me/2us/verification/ IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (3173) Hashe37a5f96bff0b5cd2e0dfccea797f7dd 6dfa2749ed94d21a92ea2212a813d72e1486c706 e616887ce890196ed982803266cdf65a7f65be04eca038176f2488a2259178cb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | PhishTank | phishing | Other |
GET /2us/verification/ HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 08:47:37 GMT
server: nginx/1.21.6
content-type: text/html; charset=UTF-8
content-length: 15469
cache-control: max-age=7200
expires: Wed, 17 Apr 2024 10:47:37 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
x-server-cache: false
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/metrics-all.js | 162.241.217.222 | 200 OK | 3.8 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/metrics-all.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash65ab5df156a2a51b278f9967fc154f28 db841daeeb75283b73216a616f52489f6f3bebc3 c7a923623e0ef6cf3ec2c4afa6b3f757ee1f183ac9503e7295629fff50a27597
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/metrics-all.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:37 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3785
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:37 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/calendar.css | 162.241.217.222 | 200 OK | 3.9 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/calendar.css IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeASCII text, with very long lines (14589), with no line terminators Hash21b96abf877a23a0f752c929993c8129 ede223c9648da1d6ad38f463fa71e934b2daa4b7 b6b538331a7716ca132d0fbbdc31e51a5c17047c14474e3f738f70472f08473d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/calendar.css HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 17 May 2024 08:47:37 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3940
content-type: text/css
date: Wed, 17 Apr 2024 08:47:37 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/tracking-cross-sell.css | 162.241.217.222 | 200 OK | 1.1 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/tracking-cross-sell.css IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeASCII text, with very long lines (3075), with no line terminators Hash2c6c2bae5d602f55892faeaa1a4ff974 3c5fba164e02726bf62e8d5f7f70984e8208dd5e 0c49eb2734535aca911b921f734594a8bc288ffd69ac85beef19da552a105dde
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/tracking-cross-sell.css HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 17 May 2024 08:47:37 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1138
content-type: text/css
date: Wed, 17 Apr 2024 08:47:37 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/datepicker3.css | 162.241.217.222 | 200 OK | 3.0 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/datepicker3.css IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeASCII text, with very long lines (20872) Hash3f191e9506e3df8a493126d277bf2155 3cfd9acd0a02ba1a770b31b665599cd18544c1c7 b02fa0b7acc5f314a89a9e9c493ba6f13500cc9fb8374a3111ab6fa67500be3d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/datepicker3.css HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 17 May 2024 08:47:37 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2960
content-type: text/css
date: Wed, 17 Apr 2024 08:47:37 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/jquery-ui.min.css | 162.241.217.222 | 200 OK | 9.2 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/jquery-ui.min.css IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeASCII text, with very long lines (29153), with CRLF line terminators Hashf317653127e1c9f7f5e3cb37fe9db946 35ca56f8f7395d30c95d97a8c00ede0c7cd03af9 cd4e2cd505b71a38c564a21fec47a02c21555e2b1f91ba7b6d4cbdb04de4e082
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/jquery-ui.min.css HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 17 May 2024 08:47:37 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 9246
content-type: text/css
date: Wed, 17 Apr 2024 08:47:37 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/footer.css | 162.241.217.222 | 200 OK | 1.1 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/footer.css IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeASCII text, with very long lines (2933), with no line terminators Hash530d53f217d1c2dcd18267587f66d557 2011593916b3fd3cbc0cf618807d7e7b1467fa68 918439d31704a7efd16b3c23a42ea7e48f21fb008096b45d217444f3e28e1fc5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/footer.css HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 17 May 2024 08:47:37 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1102
content-type: text/css
date: Wed, 17 Apr 2024 08:47:37 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/helpers.js | 162.241.217.222 | 200 OK | 358 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/helpers.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeJavaScript source, ASCII text, with very long lines (695), with no line terminators Hash5372347b4f98f60b33579180ef6a3567 02064f1641c40b35c14a0da9ee310de54ff76cd5 7fa317b049ed33139394313aba29f27b7f11a226270bf10ce1c26d674c0177e4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/helpers.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 358
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/schedule-redelivery.css | 162.241.217.222 | 200 OK | 7.4 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/schedule-redelivery.css IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeASCII text, with very long lines (23038), with no line terminators Hashbdfffbb68be1fd26eb09e327bed45351 d197097d59665e71528a1b4d76073526e857ef1b f4e8195415de924f3045e054704c9ef253097a3d7e1e556a43083132b17467ac
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/schedule-redelivery.css HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 17 May 2024 08:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 7429
content-type: text/css
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/footer-sb.css | 162.241.217.222 | 200 OK | 1.1 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/footer-sb.css IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeASCII text, with very long lines (3179), with CRLF line terminators Hash0466c7414c19b685bafe055bcd1d9d7b 29eb107ca7c4de31aaf2a9df8d9c8294d2c234ae ccaebfd542fba2c3af8d9397e265345e7c7bec22c7c94f190ef7047e38479830
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/footer-sb.css HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 17 May 2024 08:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1080
content-type: text/css
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/search-fe.js | 162.241.217.222 | 200 OK | 977 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/search-fe.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeJavaScript source, ASCII text, with very long lines (2235), with no line terminators Hash418d20c9da7f39976dcd043467cd9c05 242c058aa62349fe3fa781ce9ef622f882c73d6a 55bf60330b23f3982e77dd63d9796997da15a61bddec70142f2c7eefed880c66
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/search-fe.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 977
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/OneLinkUsps.js | 162.241.217.222 | 200 OK | 1.1 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/OneLinkUsps.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeASCII text, with CRLF line terminators Hashb60628830a1d34363f98c9443b856555 ba386fdd91d2db7fb6749982caa78bef59028077 68482663e769a15815d142d88f7a4d8105c02fe2bd37a9899a019b518f17a2b3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/OneLinkUsps.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1119
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/logo-sb.svg | 162.241.217.222 | 200 OK | 3.6 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/logo-sb.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeSVG Scalable Vector Graphics image Hash0418f7120dc6cdd1d7aa0f8219ec9af2 3bb6c6edee3cc1c072117795611e2f67383cdc44 4b5aaf0dc8f59e71849219fae0a225aeb3914bebcc363753f22b5713627b0094
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/logo-sb.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 3557
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/megamenu-additions.js | 162.241.217.222 | 200 OK | 529 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/megamenu-additions.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash847cc8bd91110ff714275c5a29fbd404 cff690cc070f9539cc1c325ed150b819018e8df7 a33554bd04b3364c1e47b719799ae0df426bb17f9c8ec422bb346227534ebdbd
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/megamenu-additions.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 529
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/qt.css | 162.241.217.222 | 200 OK | 15 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/qt.css IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1599), with CRLF, LF line terminators Hashea7441cf1694e85f90f0b0f6e4e4f607 d7b4c31f8d76d0cf4da99e2f2dbab97c4f441b33 1925ce0c88a54751f2da5f3e2d1d2fb0af80296c205c41e940bb34765944387a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/qt.css HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 17 May 2024 08:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 14671
content-type: text/css
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/mailman.svg | 162.241.217.222 | 200 OK | 1.8 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/mailman.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeSVG Scalable Vector Graphics image Hash1426a5796b4337302ee498d4a9265b38 c3b2b8042eb536d43101c5281d5aae8244d1e0e1 87f26b59587d5549f99b77e77519bf17b625c6a693931f54f62accac834e6ff1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/mailman.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 1827
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/schedule_pickup.svg | 162.241.217.222 | 200 OK | 1.8 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/schedule_pickup.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeSVG Scalable Vector Graphics image Hashd627861a77e755da093cae9b4db00b7b fc5ac7d6bc6bf06f53b399848be232b35aa2c5b1 2a5e1fdc8e264327be71c3063cc6bf1dd8a618576310a5d26dc31ba8d6f83616
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/schedule_pickup.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 1775
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/location.svg | 162.241.217.222 | 200 OK | 2.6 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/location.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeSVG Scalable Vector Graphics image Hash9b913bc84d41ec1c78da5889d36e1431 21b0075c9ec43a7ec769dde1d1ec8149b0686c0f 87d11356a8f76ef3af3c6d46bc4958cf3746e9a5b69e81d1df952b274319f539
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/location.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 2586
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/free_boxes.svg | 162.241.217.222 | 200 OK | 1.1 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/free_boxes.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeSVG Scalable Vector Graphics image Hashdc788e0d1e8c7d9463a99882e622730c a079d9612a9c119a9419b620d9dcfc141dd7e011 a3f1dfab56de547e28606e3e2150167339be6a35c8385486066924874d14df47
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/free_boxes.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 1066
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/go-now(1).png | 162.241.217.222 | 200 OK | 8.0 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/go-now(1).png IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typePNG image data, 227 x 170, 8-bit/color RGBA, non-interlaced Hash49754396635190a6532dd376acc76ee1 526df243e2adbf5719b082c5e04190ed40209ccd 0962cc2915393132882747bf55b069572324019764af92ec02d5d0249bfdff99
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/go-now(1).png HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 8026
cache-control: max-age=31536000
expires: Thu, 17 Apr 2025 08:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/po_box.svg | 162.241.217.222 | 200 OK | 1.6 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/po_box.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeSVG Scalable Vector Graphics image Hashd3793852de4f419211843c1f4c05ddb4 8c7eccab4e3865a04553d720c150e4506d8990a0 7487a4b55d8cb9a837520dcb7ea5e50c915b5797c165f9bf7a7a3f8fe468a0a0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/po_box.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 1639
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/stamps.svg | 162.241.217.222 | 200 OK | 1.1 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/stamps.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeSVG Scalable Vector Graphics image Hash2e722b55bb31b83042310fbf5b45128d cb6cd5c99c06ba8c04c7795dea4d13241eaaa045 0b68e5b64999ab2e6d137a1886410cc9e8bed0b3863aacd838a3eb008f2bb516
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/stamps.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 1103
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/go-now(2).png | 162.241.217.222 | 200 OK | 27 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/go-now(2).png IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typePNG image data, 210 x 170, 8-bit/color RGBA, non-interlaced Hashb596424d2e958b51d7a68b46cadb6855 77eeeff212b8cd75a31beb954907e20bc5f8c831 daaeb825e97d878d0b5d5dfce37a2dd592ac0e1c5b887e24705835442d317365
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/go-now(2).png HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 26972
cache-control: max-age=31536000
expires: Thu, 17 Apr 2025 08:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/go-now(4).png | 162.241.217.222 | 200 OK | 22 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/go-now(4).png IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typePNG image data, 227 x 170, 8-bit/color RGBA, non-interlaced Hash22ab573e325c944450873345437b0887 0446e4d20c824d38ef4d427cf7e025c8f034f11a d8573e3e13b1fb40173ea39d5e7fc1b935ae1239b9ca37ac3d7fedf3d966f4ed
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/go-now(4).png HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 22133
cache-control: max-age=31536000
expires: Thu, 17 Apr 2025 08:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/featured_clicknship.svg | 162.241.217.222 | 200 OK | 1.1 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/featured_clicknship.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeSVG Scalable Vector Graphics image Hash375ed61778c1a49c8d1ea21f31748719 476785aa7126fbd9dcaa3bce84b57c3c120bd5a4 23edd9ac5dba678e1e5f97f2397a69d295e257c4a56e462c686557246081ffa2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/featured_clicknship.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 1078
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/holdmail.svg | 162.241.217.222 | 200 OK | 1.4 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/holdmail.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeSVG Scalable Vector Graphics image Hash4c8f3d7064524311ef86ddd0ded768d1 53ca5f29f603435821d07019cf123e430626f54e 2d45f10e1a6925e9500a4fb6e0223ce4ddfb492a914472ca8229fa01e3f94afa
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/holdmail.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 1448
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/logo_mobile.svg | 162.241.217.222 | 200 OK | 2.1 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/logo_mobile.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeSVG Scalable Vector Graphics image Hashf8ad388b3e39b860c97de0029ae98a21 9b032ef4ef4100dda1ba44be4836e6956b11387c 9685d6241f41ac71741d0ee9b242779f640cd3b1e64bb9bbcfb8798c5be503b2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/logo_mobile.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 2060
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/go-now.png | 162.241.217.222 | 200 OK | 20 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/go-now.png IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typePNG image data, 210 x 142, 8-bit/color RGBA, non-interlaced Hashd0dad9004bae0df70b06b75557b1df62 4a080764de6b97902413f5c836432a30da348517 2ff8048ab175abf501e134d00a973ca31a7b0de09c2777eab0a2c9dc07ca0289
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/go-now.png HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 20334
cache-control: max-age=31536000
expires: Thu, 17 Apr 2025 08:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/resize-manager.js | 162.241.217.222 | 200 OK | 472 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/resize-manager.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeJavaScript source, ASCII text, with very long lines (1040), with no line terminators Hash90d8fb00194d91e9dd20281817c285d6 e7e37421b14a39e0d3787988a52a45d27ec3761f 479b585bb1f3ca011746467c115b58ca0cd6ac62aa68c9d953635b3344953887
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/resize-manager.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 472
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/search.svg | 162.241.217.222 | 200 OK | 1.5 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/search.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeSVG Scalable Vector Graphics image Hashace472e478185d5f5ecd18c7d821eff7 c4c97892e41d3dd838912c42fd7a7b212f671d1b c8b13b10e28b6b420151db578831a416b7c1805d7672eeb57e69dc697fda1e27
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/search.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 1465
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/hamburger.svg | 162.241.217.222 | 200 OK | 546 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/hamburger.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeSVG Scalable Vector Graphics image Hash37c94e8de8729be2b0b9833bafa28f3b c675396f6d65666dd6047b6e92cbd5429556dbac b95f434286744e3dbaf5bc56f41d4ce2640da3038461502f7ac243a5931e9435
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/hamburger.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 546
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/calculate_price.svg | 162.241.217.222 | 200 OK | 2.3 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/calculate_price.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeSVG Scalable Vector Graphics image Hash6204f7fb48ef86964b4b1cce343ebdde d60b7e47e22615fdea2a24e102200090b466b862 edbb6a59137018b9a8229184aac04a2661787564cdf4484229bee96d7c11e771
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/calculate_price.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 2302
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/change_address.svg | 162.241.217.222 | 200 OK | 1.9 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/change_address.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeSVG Scalable Vector Graphics image Hash3955e49630deb78cc1212ba20d83bafc 881ba502127d57c48784703683869abf4c8e28d8 b84842a014070d9363a46638e512476260162014c9bde4bcca7a9ade4177ea12
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/change_address.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 1869
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/go-now(3).png | 162.241.217.222 | 200 OK | 20 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/go-now(3).png IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typePNG image data, 210 x 170, 8-bit/color RGBA, non-interlaced Hash6311ef7a60f86d77aa48fcc48a675a31 96bc8b2fe87b126ffbf0d7b7ad8419661cb6bd9c 70d715475fb0a4756fc65c50cbb2cf0ca15f7311efc6c54b18e045e6ab202251
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/go-now(3).png HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 19969
cache-control: max-age=31536000
expires: Thu, 17 Apr 2025 08:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/png
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/megamenu.js | 162.241.217.222 | 200 OK | 3.7 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/megamenu.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeJavaScript source, ASCII text, with very long lines (3410), with CRLF line terminators Hashf91cb845e3581dd07e23db07e02c2366 ffb9ee2cad8c59914fcc3000ba8153a167036738 df75a5a617c9d258b4127a64b9c19a4c2c8b95b2036b97530a3d513c672cf110
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/megamenu.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3714
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/main-sb.css | 162.241.217.222 | 200 OK | 3.2 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/main-sb.css IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeASCII text, with very long lines (8795) Hashff67eac943614ef903c2e84419a60f4c 565109b98747417724dafa5462a731c692178381 0863d2c590d46ad4b990232414eef23349ee4316ac4ccbf6f4618329539fb65a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/main-sb.css HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 17 May 2024 08:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 3173
content-type: text/css
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/megamenu-v2.css | 162.241.217.222 | 200 OK | 11 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/megamenu-v2.css IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeASCII text, with very long lines (44725), with no line terminators Hashe91ca0335745f99e25cbbf36fcfde992 993e87cedb80bbfe5a847fe9f4d957bfe8795549 8853e074638a2a37e8a4afe149f17dd1ce9c4d76d5c9e1614f59507c359f3927
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/megamenu-v2.css HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 17 May 2024 08:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 11338
content-type: text/css
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/require.js | 162.241.217.222 | 200 OK | 7.8 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/require.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeJavaScript source, ASCII text, with very long lines (17192) Hash16e572a4f80526df4bc3cc7ff056a9a8 f23b5c2fd52e855245e3d2586cd911051561e64c 75237772a7bc8c6eaadbe642be69503335c5842af8981688250a8d4f0f61c377
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/require.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 7843
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/find_zip.svg | 162.241.217.222 | 200 OK | 1.5 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/find_zip.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeSVG Scalable Vector Graphics image Hashe30aab66bad715f4fef4b6c42f8490d2 40be7a560b0687cf57c7ef0c0600ca08203a680c aa6ff55c203834f667cbb01cedb0d409ff3b8f1b5a4de8c89a79b2e7034a8001
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/find_zip.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 1471
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/tracking.svg | 162.241.217.222 | 200 OK | 1.6 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/tracking.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeSVG Scalable Vector Graphics image Hash2fb7b372aea93502ca192e5a633d1aa1 ce358703cce32b2176cf6ec94e17341cb6f93f03 58ad849f3ea489d0b2ee4f0dd1e4fd0b613a5248fd6b127a4479646ce4735593
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/tracking.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
content-length: 1561
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/modernizr.js | 162.241.217.222 | 200 OK | 5.0 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/modernizr.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeJavaScript source, ASCII text, with very long lines (11084) Hash66e83c4165a234cdda478a9c55cb90db 22e9211030a1f612ef4acd010185181bde967307 779ab662607b48249e86f3c27e9eafff4bbc808b48899a439d5cd9b2c78f99e6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/modernizr.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 5037
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/require-jquery.js | 162.241.217.222 | 200 OK | 92 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/require-jquery.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeASCII text, with no line terminators Hashea38e8196b75d9720bc3902d6d735130 165284464c58d7f213c1211f2c433873299e4527 cdbf334e8e860aaf1665d2ac56113f51f1ff304b63cff897beb969c8dd5597d9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/require-jquery.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 92
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/ge-login.js | 162.241.217.222 | 200 OK | 2.9 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/ge-login.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeASCII text, with CRLF line terminators Hash252bc5d05d5ac9f132978968489a9b37 49cfe0b8d8d08038bf070f11addd9ab53c9ae67e 12de71624f55c7c5e1f462fdfde80f207c449f478917d21c82e65f5b9672cbfd
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/ge-login.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 2947
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/header-init-search.js | 162.241.217.222 | 200 OK | 331 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/header-init-search.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeASCII text, with CRLF line terminators Hashd8cb563907e68e9649948c6f521efe60 f5b7cf8123929db8162a2af51d07dd11c21fbac3 fd1e9eadb5698c1bc534ef8a75303b3b67f5e1ab7d1b217b27b09da42aa5036a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/header-init-search.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 331
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/jquery.min.js(1).download | 162.241.217.222 | 404 Not Found | 1.2 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/jquery.min.js(1).download IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, ASCII text, with very long lines (581) Hashde23a7ff262e7cd197bf409e9b6efea1 4e34d7677526deda2f591392eff2435236660347 fe4d3a52614fcd75eeb5b8d88192d69ca34dc97a0d59df8e247a7980ae702761
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/jquery.min.js(1).download HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate
set-cookie: nfdbrandname=bluehost; expires=Sat, 15 Apr 2034 08:47:38 GMT; Max-Age=315360000; path=/
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 1224
content-type: text/html; charset=UTF-8
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| fast.fonts.net/t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0 |  104.16.40.28 | 200 OK | 0 B |
URL GET HTTP/2fast.fonts.net/t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0 IP104.16.40.28:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerGoogle Trust Services LLC Subjectfonts.net Fingerprint40:BB:71:39:9B:62:CA:2E:30:5E:D3:A9:33:D6:69:83:D8:1F:D0:57 ValidityThu, 04 Apr 2024 03:21:50 GMT - Wed, 03 Jul 2024 03:21:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0 HTTP/1.1
Host: fast.fonts.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 17 Apr 2024 08:47:38 GMT
content-type: text/css; charset=utf-8
content-length: 0
x-amz-id-2: ki65sQC1HlYAvAwzpIlg68BKJDoZiZ/BwbN/hDH5RUfm7vMSBZqfat1D29ePjiEs20YJy+049dY=
x-amz-request-id: 4MWDSXH8MPCQQMJM
last-modified: Tue, 23 Mar 2021 12:59:23 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
cache-control: public, max-age=0, s-maxage=604800
x-amz-meta-mtime: 1519217722
x-amz-version-id: null
cf-cache-status: HIT
age: 481682
accept-ranges: bytes
set-cookie: __cf_bm=PWTBpU1GcryExLuFQz9Vxeja_aMoIPLBA0m1hLSKXJg-1713343658-1.0.1.1-QD1LuFDWJUFquSizJIokFCwVxy6VDJvJl5IiBcJ.Rr.OjjAnI3qXRM.XkbuChVMrb6W0C0jxY_HuPauJ7rhX7A; path=/; expires=Wed, 17-Apr-24 09:17:38 GMT; domain=.fonts.net; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 875b26c9598e930c-CPH
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/require-jquery.js | 162.241.217.222 | 200 OK | 92 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/require-jquery.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeASCII text, with no line terminators Hashea38e8196b75d9720bc3902d6d735130 165284464c58d7f213c1211f2c433873299e4527 cdbf334e8e860aaf1665d2ac56113f51f1ff304b63cff897beb969c8dd5597d9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/require-jquery.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 92
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/helpers.js | 162.241.217.222 | 200 OK | 358 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/helpers.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeJavaScript source, ASCII text, with very long lines (695), with no line terminators Hash5372347b4f98f60b33579180ef6a3567 02064f1641c40b35c14a0da9ee310de54ff76cd5 7fa317b049ed33139394313aba29f27b7f11a226270bf10ce1c26d674c0177e4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/helpers.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 358
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/search-fe.js | 162.241.217.222 | 200 OK | 977 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/search-fe.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeJavaScript source, ASCII text, with very long lines (2235), with no line terminators Hash418d20c9da7f39976dcd043467cd9c05 242c058aa62349fe3fa781ce9ef622f882c73d6a 55bf60330b23f3982e77dd63d9796997da15a61bddec70142f2c7eefed880c66
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/search-fe.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 977
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/resize-manager.js | 162.241.217.222 | 200 OK | 472 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/resize-manager.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeJavaScript source, ASCII text, with very long lines (1040), with no line terminators Hash90d8fb00194d91e9dd20281817c285d6 e7e37421b14a39e0d3787988a52a45d27ec3761f 479b585bb1f3ca011746467c115b58ca0cd6ac62aa68c9d953635b3344953887
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/resize-manager.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-length: 472
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff | 192.229.221.165 | 403 Forbidden | 345 B |
URL GET HTTP/2www.usps.com/assets/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeXML 1.0 document, ASCII text Hasha7b900bec0b7b386dfd18ad22c9ed411 72e09ec6e4d46f8d96907f6e55bc4f26975c4c4f d9f7e0aa1bff501986995b7c69742a14f373819ab6ecd599af29d67f9d8b4794
GET /assets/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zip.qso.mybluehost.me
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
content-type: text/html
date: Wed, 17 Apr 2024 08:47:38 GMT
server: ECAcc (ska/F7BB)
strict-transport-security: max-age=31536000 ; includeSubDomains
x-ec-custom-error: 1
x-ruleset-version: 3.1
content-length: 345
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff | 192.229.221.165 | 403 Forbidden | 345 B |
URL GET HTTP/2www.usps.com/assets/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeXML 1.0 document, ASCII text Hasha7b900bec0b7b386dfd18ad22c9ed411 72e09ec6e4d46f8d96907f6e55bc4f26975c4c4f d9f7e0aa1bff501986995b7c69742a14f373819ab6ecd599af29d67f9d8b4794
GET /assets/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zip.qso.mybluehost.me
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
content-type: text/html
date: Wed, 17 Apr 2024 08:47:38 GMT
server: ECAcc (ska/F779)
strict-transport-security: max-age=31536000 ; includeSubDomains
x-ec-custom-error: 1
x-ruleset-version: 3.1
content-length: 345
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/global-elements/header/images/utility-header/mailman.svg | 162.241.217.222 | 404 Not Found | 315 B |
URL GET HTTP/2zip.qso.mybluehost.me/global-elements/header/images/utility-header/mailman.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /global-elements/header/images/utility-header/mailman.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/files/megamenu-v2.css
Cookie: nfdbrandname=bluehost
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/global-elements/header/images/package-intercept.svg | 162.241.217.222 | 404 Not Found | 315 B |
URL GET HTTP/2zip.qso.mybluehost.me/global-elements/header/images/package-intercept.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /global-elements/header/images/package-intercept.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/files/megamenu-v2.css
Cookie: nfdbrandname=bluehost
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/jquery.min.js | 162.241.217.222 | 200 OK | 38 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/jquery.min.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typegzip compressed data, from Unix Hash98e41a8cfe4905669fda1655ea5eeaa8 24c820dc4ade161ae1e04665758abee5b27b65a5 053149f551571f319613a9abe1fb1a55e3270ac94c5009f89e9234f1e36f4c34
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/jquery.min.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:37 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:37 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/global-elements/header/images/icon-personalize-stamped-envelopes.svg | 162.241.217.222 | 404 Not Found | 315 B |
URL GET HTTP/2zip.qso.mybluehost.me/global-elements/header/images/icon-personalize-stamped-envelopes.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /global-elements/header/images/icon-personalize-stamped-envelopes.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/files/megamenu-v2.css
Cookie: nfdbrandname=bluehost
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/images/home/stamps.svg | 192.229.221.165 | 200 OK | 551 B |
URL GET HTTP/2www.usps.com/assets/images/home/stamps.svg IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash2e722b55bb31b83042310fbf5b45128d cb6cd5c99c06ba8c04c7795dea4d13241eaaa045 0b68e5b64999ab2e6d137a1886410cc9e8bed0b3863aacd838a3eb008f2bb516
GET /assets/images/home/stamps.svg HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 1595
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "44f-5494e7f535e00+gzip"
last-modified: Fri, 24 Feb 2017 22:46:16 GMT
server: ECAcc (dce/26A6)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 551
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/images/home/find_zip.svg | 192.229.221.165 | 200 OK | 793 B |
URL GET HTTP/2www.usps.com/assets/images/home/find_zip.svg IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashe30aab66bad715f4fef4b6c42f8490d2 40be7a560b0687cf57c7ef0c0600ca08203a680c aa6ff55c203834f667cbb01cedb0d409ff3b8f1b5a4de8c89a79b2e7034a8001
GET /assets/images/home/find_zip.svg HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 1521
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "5bf-5494e7ed94c00+gzip"
last-modified: Fri, 24 Feb 2017 22:46:08 GMT
server: ECAcc (dce/26CF)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 793
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/images/home/search.svg | 192.229.221.165 | 200 OK | 795 B |
URL GET HTTP/2www.usps.com/assets/images/home/search.svg IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashace472e478185d5f5ecd18c7d821eff7 c4c97892e41d3dd838912c42fd7a7b212f671d1b c8b13b10e28b6b420151db578831a416b7c1805d7672eeb57e69dc697fda1e27
GET /assets/images/home/search.svg HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 970
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "5b9-5494e7f535e00+gzip"
last-modified: Fri, 24 Feb 2017 22:46:16 GMT
server: ECAcc (dce/26EA)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 795
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/images/home/holdmail.svg | 192.229.221.165 | 200 OK | 768 B |
URL GET HTTP/2www.usps.com/assets/images/home/holdmail.svg IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash4c8f3d7064524311ef86ddd0ded768d1 53ca5f29f603435821d07019cf123e430626f54e 2d45f10e1a6925e9500a4fb6e0223ce4ddfb492a914472ca8229fa01e3f94afa
GET /assets/images/home/holdmail.svg HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 1617
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "5a8-5494e7ee88e40+gzip"
last-modified: Fri, 24 Feb 2017 22:46:09 GMT
server: ECAcc (dce/26D6)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 768
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/images/home/tracking.svg | 192.229.221.165 | 200 OK | 844 B |
URL GET HTTP/2www.usps.com/assets/images/home/tracking.svg IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash2fb7b372aea93502ca192e5a633d1aa1 ce358703cce32b2176cf6ec94e17341cb6f93f03 58ad849f3ea489d0b2ee4f0dd1e4fd0b613a5248fd6b127a4479646ce4735593
GET /assets/images/home/tracking.svg HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 1573
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "619-5494e7f71e280+gzip"
last-modified: Fri, 24 Feb 2017 22:46:18 GMT
server: ECAcc (dce/2689)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 844
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/images/home/change_address.svg | 192.229.221.165 | 200 OK | 935 B |
URL GET HTTP/2www.usps.com/assets/images/home/change_address.svg IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash3955e49630deb78cc1212ba20d83bafc 881ba502127d57c48784703683869abf4c8e28d8 b84842a014070d9363a46638e512476260162014c9bde4bcca7a9ade4177ea12
GET /assets/images/home/change_address.svg HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 1573
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "74d-5494e7eca09c0+gzip"
last-modified: Fri, 24 Feb 2017 22:46:07 GMT
server: ECAcc (dce/26E4)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 935
X-Firefox-Spdy: h2
|
|
| www.usps.com/test/nav/images/collectors.svg | 192.229.221.165 | 200 OK | 561 B |
URL GET HTTP/2www.usps.com/test/nav/images/collectors.svg IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash9105cfa1479096038365d18beb23cb1f 648c5b01118cf059eede56d9dae1713ab26d965c b2728704f99e68b8edfa2b8efcb1f40e77d3abd5f6f04388c9a09232b1711043
GET /test/nav/images/collectors.svg HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 1575
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "461-560f10f803ac0+gzip"
last-modified: Fri, 22 Dec 2017 17:22:27 GMT
server: ECAcc (dce/26C9)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 561
X-Firefox-Spdy: h2
|
|
| www.usps.com/test/nav/images/cards-and-envelopes.svg | 192.229.221.165 | 200 OK | 1.1 kB |
URL GET HTTP/2www.usps.com/test/nav/images/cards-and-envelopes.svg IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashef48ce62cb3d361e1d8b2938c40e71dd f2c96ac70aab81500fa0d12f5ab61f07b79b8a54 893b5448cdde44b4db29800aeed45e278b1e640ea4585a5f4a5e4725e64bae84
GET /test/nav/images/cards-and-envelopes.svg HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 1052
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "8a9-560f10e8c16c0+gzip"
last-modified: Fri, 22 Dec 2017 17:22:11 GMT
server: ECAcc (dce/26DF)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 1056
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff | 192.229.221.165 | 403 Forbidden | 345 B |
URL GET HTTP/2www.usps.com/assets/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeXML 1.0 document, ASCII text Hasha7b900bec0b7b386dfd18ad22c9ed411 72e09ec6e4d46f8d96907f6e55bc4f26975c4c4f d9f7e0aa1bff501986995b7c69742a14f373819ab6ecd599af29d67f9d8b4794
GET /assets/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zip.qso.mybluehost.me
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
content-type: text/html
date: Wed, 17 Apr 2024 08:47:38 GMT
server: ECAcc (ska/F7B7)
strict-transport-security: max-age=31536000 ; includeSubDomains
x-ec-custom-error: 1
x-ruleset-version: 3.1
content-length: 345
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/optimize.js | 162.241.217.222 | 200 OK | 43 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/optimize.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeJavaScript source, ASCII text, with very long lines (1972) Hash277b1af6208e47cfa11f30308fe2acea 95e64e054542d7401857fdba8e83e1f1a4b49b13 fd7432850f16f194044abacd581146b1246e8afd963397adbe0ff95e40a3ba2d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/optimize.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:37 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:37 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/images/home/calculate_price.svg | 192.229.221.165 | 200 OK | 772 B |
URL GET HTTP/2www.usps.com/assets/images/home/calculate_price.svg IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash6204f7fb48ef86964b4b1cce343ebdde d60b7e47e22615fdea2a24e102200090b466b862 edbb6a59137018b9a8229184aac04a2661787564cdf4484229bee96d7c11e771
GET /assets/images/home/calculate_price.svg HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 960
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "8fe-5494e7eca09c0+gzip"
last-modified: Fri, 24 Feb 2017 22:46:07 GMT
server: ECAcc (dce/26E1)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 772
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/fonts/db5f9ba6-05a4-433a-9461-0a6f257a0c3a.ttf | 192.229.221.165 | 403 Forbidden | 345 B |
URL GET HTTP/2www.usps.com/assets/fonts/db5f9ba6-05a4-433a-9461-0a6f257a0c3a.ttf IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeXML 1.0 document, ASCII text Hasha7b900bec0b7b386dfd18ad22c9ed411 72e09ec6e4d46f8d96907f6e55bc4f26975c4c4f d9f7e0aa1bff501986995b7c69742a14f373819ab6ecd599af29d67f9d8b4794
GET /assets/fonts/db5f9ba6-05a4-433a-9461-0a6f257a0c3a.ttf HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zip.qso.mybluehost.me
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
content-type: text/html
date: Wed, 17 Apr 2024 08:47:38 GMT
server: ECAcc (ska/F6BE)
strict-transport-security: max-age=31536000 ; includeSubDomains
x-ec-custom-error: 1
x-ruleset-version: 3.1
content-length: 345
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/main.css | 162.241.217.222 | 200 OK | 20 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/main.css IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeASCII text, with very long lines (49380), with CRLF line terminators Hash6466e92f2552b33c658b708f1583d00f 6bdfc91f5fe5b87a6cf88d0743e3893f8c23d4ee bb40284b5cbbf230b344c7aa0c3258d910f1558684bf7a8e12be046ec804e248
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/main.css HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 17 May 2024 08:47:37 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: text/css
date: Wed, 17 Apr 2024 08:47:37 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/jquery-3.5.1.js | 162.241.217.222 | 200 OK | 40 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/jquery-3.5.1.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeJavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators Hash74348b452663cc8c54ec0ea54eff7ce0 c8b5d94f798b26c8b8c0d08dbf9e1313120e28ef 3d4bf535a4d3ec5e4c4035ed926b9caccbd8c28658715bcd4710809de5d00c6f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/jquery-3.5.1.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| tools.usps.com/global-elements/header/images/utility-header/mailman.svg | 192.229.221.165 | 200 OK | 904 B |
URL GET HTTP/2tools.usps.com/global-elements/header/images/utility-header/mailman.svg IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash1426a5796b4337302ee498d4a9265b38 c3b2b8042eb536d43101c5281d5aae8244d1e0e1 87f26b59587d5549f99b77e77519bf17b625c6a693931f54f62accac834e6ff1
GET /global-elements/header/images/utility-header/mailman.svg HTTP/1.1
Host: tools.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
age: 66989
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "723-55885af730a40+gzip"
last-modified: Wed, 06 Sep 2017 13:54:41 GMT
nncoection: close
server: ECAcc (dce/268C)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-frame-options: SAMEORIGIN
x-ruleset-version: 5.1
content-length: 904
X-Firefox-Spdy: h2
|
|
| www.usps.com/test/nav/images/shipping-supplies.svg | 192.229.221.165 | 200 OK | 1.3 kB |
URL GET HTTP/2www.usps.com/test/nav/images/shipping-supplies.svg IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash5c5579a50964d4972d1954bff4ee232d c78b384713cf7a8a5515a54f17c6e70ebdde98fc c12815f27ecdfd09b2920c1eea21ae7abb8e107349d6bb8b39707a0cd9a3e591
GET /test/nav/images/shipping-supplies.svg HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 994
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "9f8-560f10eaa9b40+gzip"
last-modified: Fri, 22 Dec 2017 17:22:13 GMT
server: ECAcc (dce/26B0)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 1282
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/fonts/1d238354-d156-4dde-89ea-4770ef04b9f9.ttf | 192.229.221.165 | 403 Forbidden | 345 B |
URL GET HTTP/2www.usps.com/assets/fonts/1d238354-d156-4dde-89ea-4770ef04b9f9.ttf IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeXML 1.0 document, ASCII text Hasha7b900bec0b7b386dfd18ad22c9ed411 72e09ec6e4d46f8d96907f6e55bc4f26975c4c4f d9f7e0aa1bff501986995b7c69742a14f373819ab6ecd599af29d67f9d8b4794
GET /assets/fonts/1d238354-d156-4dde-89ea-4770ef04b9f9.ttf HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zip.qso.mybluehost.me
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
content-type: text/html
date: Wed, 17 Apr 2024 08:47:38 GMT
server: ECAcc (ska/F747)
strict-transport-security: max-age=31536000 ; includeSubDomains
x-ec-custom-error: 1
x-ruleset-version: 3.1
content-length: 345
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/images/home/schedule_pickup.svg | 192.229.221.165 | 200 OK | 923 B |
URL GET HTTP/2www.usps.com/assets/images/home/schedule_pickup.svg IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashd627861a77e755da093cae9b4db00b7b fc5ac7d6bc6bf06f53b399848be232b35aa2c5b1 2a5e1fdc8e264327be71c3063cc6bf1dd8a618576310a5d26dc31ba8d6f83616
GET /assets/images/home/schedule_pickup.svg HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 1606
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "6ef-5494e7f535e00+gzip"
last-modified: Fri, 24 Feb 2017 22:46:16 GMT
server: ECAcc (dce/2695)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 923
X-Firefox-Spdy: h2
|
|
| www.usps.com/test/nav/images/business.svg | 192.229.221.165 | 200 OK | 689 B |
URL GET HTTP/2www.usps.com/test/nav/images/business.svg IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash0d366834f312798111ebe3990766f8f4 e3ce708bf0b0b1924156674aca900898d407331c da2e0f69eb8ea4aa9ffe45c2ad6d330eb7922e0e14f8aaca4e577be0fb8b4bea
GET /test/nav/images/business.svg HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 1569
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "4d2-560f10e7cd480+gzip"
last-modified: Fri, 22 Dec 2017 17:22:10 GMT
server: ECAcc (dce/268F)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 689
X-Firefox-Spdy: h2
|
|
| www.usps.com/test/nav/images/gifts.svg | 192.229.221.165 | 200 OK | 590 B |
URL GET HTTP/2www.usps.com/test/nav/images/gifts.svg IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashdf6fcab6c4caf86e8a1401a4fc36f885 860352cea6899553cb4e7111097b35bd007c65e7 986ebc6c0f0c4b5bdb2513352dbbf3f501a36abd1dcd0c17a9c215efd95191a7
GET /test/nav/images/gifts.svg HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 1575
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "3ee-560f10e9b5900+gzip"
last-modified: Fri, 22 Dec 2017 17:22:12 GMT
server: ECAcc (dce/26E0)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 590
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/images/home/utility_customer_service.png | 192.229.221.165 | 200 OK | 1.3 kB |
URL GET HTTP/2www.usps.com/assets/images/home/utility_customer_service.png IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typePNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced Hash3500d365cd94527c71fe9c70d5cda435 0c7bede628d74cefaf5fce1b675c0ce3c72c78c9 34b28a24c5414dab68a15be6613536d905faf33fbf1aed8ee4702caa60be9bca
GET /assets/images/home/utility_customer_service.png HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: https://www.usps.com
age: 1611
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/png
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "51b-547dde9f44e80"
last-modified: Mon, 06 Feb 2017 15:02:02 GMT
server: ECAcc (dce/2695)
strict-transport-security: max-age=31536000 ; includeSubDomains
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 1307
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/images/home/utility_languages.png | 192.229.221.165 | 200 OK | 1.5 kB |
URL GET HTTP/2www.usps.com/assets/images/home/utility_languages.png IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typePNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced Hash410956805d5701e87299cff412827e1a 5de9a390649dfc12e3d6df431140d499ad8abd67 6e727dbf5b0f4a3ec76762e445ad2c5cb750f7de41afb8b0342f903124d09826
GET /assets/images/home/utility_languages.png HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: https://www.usps.com
age: 934
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/png
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "5b0-547dde9f44e80"
last-modified: Mon, 06 Feb 2017 15:02:02 GMT
server: ECAcc (dce/26AC)
strict-transport-security: max-age=31536000 ; includeSubDomains
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 1456
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/fonts/4a3ef5d8-cfd9-4b96-bd67-90215512f1e5.ttf | 192.229.221.165 | 403 Forbidden | 345 B |
URL GET HTTP/2www.usps.com/assets/fonts/4a3ef5d8-cfd9-4b96-bd67-90215512f1e5.ttf IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeXML 1.0 document, ASCII text Hasha7b900bec0b7b386dfd18ad22c9ed411 72e09ec6e4d46f8d96907f6e55bc4f26975c4c4f d9f7e0aa1bff501986995b7c69742a14f373819ab6ecd599af29d67f9d8b4794
GET /assets/fonts/4a3ef5d8-cfd9-4b96-bd67-90215512f1e5.ttf HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zip.qso.mybluehost.me
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
content-type: text/html
date: Wed, 17 Apr 2024 08:47:38 GMT
server: ECAcc (ska/F6EC)
strict-transport-security: max-age=31536000 ; includeSubDomains
x-ec-custom-error: 1
x-ruleset-version: 3.1
content-length: 345
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/images/nav-red-chevron.svg | 162.241.217.222 | 404 Not Found | 315 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/images/nav-red-chevron.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/images/nav-red-chevron.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/files/main.css
Cookie: nfdbrandname=bluehost
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/global-elements/footer/images/footer-logo.png | 162.241.217.222 | 404 Not Found | 315 B |
URL GET HTTP/2zip.qso.mybluehost.me/global-elements/footer/images/footer-logo.png IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /global-elements/footer/images/footer-logo.png HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/files/footer-sb.css
Cookie: nfdbrandname=bluehost
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/fonts/b0868b4c-234e-47d3-bc59-41ab9de3c0db.woff2 | 162.241.217.222 | 404 Not Found | 315 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/fonts/b0868b4c-234e-47d3-bc59-41ab9de3c0db.woff2 IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/fonts/b0868b4c-234e-47d3-bc59-41ab9de3c0db.woff2 HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/files/main.css
Cookie: nfdbrandname=bluehost
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/fonts/462d508d-efc7-478f-b84e-288eeb69a160.woff2 | 162.241.217.222 | 404 Not Found | 315 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/fonts/462d508d-efc7-478f-b84e-288eeb69a160.woff2 IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/fonts/462d508d-efc7-478f-b84e-288eeb69a160.woff2 HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/files/main.css
Cookie: nfdbrandname=bluehost
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/fonts/3b303641-706e-4221-94c4-4fb491f4f8ef.woff2 | 162.241.217.222 | 404 Not Found | 315 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/fonts/3b303641-706e-4221-94c4-4fb491f4f8ef.woff2 IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/fonts/3b303641-706e-4221-94c4-4fb491f4f8ef.woff2 HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/files/main.css
Cookie: nfdbrandname=bluehost
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.usps.com/global-elements/lib/script/helpers.js | 192.229.221.165 | 200 OK | 358 B |
URL GET HTTP/2www.usps.com/global-elements/lib/script/helpers.js IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (695), with no line terminators Hash5372347b4f98f60b33579180ef6a3567 02064f1641c40b35c14a0da9ee310de54ff76cd5 7fa317b049ed33139394313aba29f27b7f11a226270bf10ce1c26d674c0177e4
GET /global-elements/lib/script/helpers.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 1562
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "2b7-505dad4fe5380+gzip"
last-modified: Mon, 20 Oct 2014 13:38:38 GMT
server: ECAcc (dce/26C8)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 358
X-Firefox-Spdy: h2
|
|
| www.usps.com/global-elements/header/script/search-fe.js | 192.229.221.165 | 200 OK | 930 B |
URL GET HTTP/2www.usps.com/global-elements/header/script/search-fe.js IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (2264), with no line terminators Hashf7f70265f5cf47386622e433317412cb e1b28284e51c848685c7ea6d19ff551284c58e8a 766a3dfb7dab82af4fae555132f7fdbacb7d167f17015fbb23c9591daaaf698b
GET /global-elements/header/script/search-fe.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 1571
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "8d8-5d77081c47c40+gzip"
last-modified: Mon, 07 Feb 2022 16:58:17 GMT
server: ECAcc (dce/26A2)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 930
X-Firefox-Spdy: h2
|
|
| www.usps.com/global-elements/lib/script/require-jquery.js | 192.229.221.165 | 200 OK | 74 B |
URL GET HTTP/2www.usps.com/global-elements/lib/script/require-jquery.js IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashea38e8196b75d9720bc3902d6d735130 165284464c58d7f213c1211f2c433873299e4527 cdbf334e8e860aaf1665d2ac56113f51f1ff304b63cff897beb969c8dd5597d9
GET /global-elements/lib/script/require-jquery.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: https://www.usps.com
age: 1555
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "4a-5057c23aa4c00"
last-modified: Wed, 15 Oct 2014 20:40:16 GMT
server: ECAcc (dce/268C)
strict-transport-security: max-age=31536000 ; includeSubDomains
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 74
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/fonts/bcf54343-d033-41ee-bbd7-2b77df3fe7ba.woff | 162.241.217.222 | 404 Not Found | 315 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/fonts/bcf54343-d033-41ee-bbd7-2b77df3fe7ba.woff IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/fonts/bcf54343-d033-41ee-bbd7-2b77df3fe7ba.woff HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/files/main.css
Cookie: nfdbrandname=bluehost
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 17 Apr 2024 08:47:39 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.usps.com/global-elements/footer/script/jquery-3.5.1.js | 192.229.221.165 | 200 OK | 31 kB |
URL GET HTTP/2www.usps.com/global-elements/footer/script/jquery-3.5.1.js IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators Hash9ac39dc31635a363e377eda0f6fbe03f 29fa5ad995e9ec866ece1d3d0b698fc556580eee 9a2723c21fb1b7dff0e2aa5dc6be24a9670220a17ae21f70fdbc602d1f8acd38
GET /global-elements/footer/script/jquery-3.5.1.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 1617
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:39 GMT
etag: "15d84-5affcd6633ac0+gzip"
last-modified: Wed, 23 Sep 2020 15:35:47 GMT
server: ECAcc (dce/2687)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 30950
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/fonts/14ff6081-326d-4dae-b778-d7afa66166fc.woff | 162.241.217.222 | 404 Not Found | 315 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/fonts/14ff6081-326d-4dae-b778-d7afa66166fc.woff IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/fonts/14ff6081-326d-4dae-b778-d7afa66166fc.woff HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/files/main.css
Cookie: nfdbrandname=bluehost
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 17 Apr 2024 08:47:39 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/fonts/2c056da8-4920-4e20-8c69-8a6b315458a9.woff | 162.241.217.222 | 404 Not Found | 315 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/fonts/2c056da8-4920-4e20-8c69-8a6b315458a9.woff IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/fonts/2c056da8-4920-4e20-8c69-8a6b315458a9.woff HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/files/main.css
Cookie: nfdbrandname=bluehost
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 17 Apr 2024 08:47:39 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/images/home/location.svg | 192.229.221.165 | 200 OK | 1.2 kB |
URL GET HTTP/2www.usps.com/assets/images/home/location.svg IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash9b913bc84d41ec1c78da5889d36e1431 21b0075c9ec43a7ec769dde1d1ec8149b0686c0f 87d11356a8f76ef3af3c6d46bc4958cf3746e9a5b69e81d1df952b274319f539
GET /assets/images/home/location.svg HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 1626
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:39 GMT
etag: "a1a-5494e7ee88e40+gzip"
last-modified: Fri, 24 Feb 2017 22:46:09 GMT
nncoection: close
server: ECAcc (dce/2687)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 1209
X-Firefox-Spdy: h2
|
|
| www.usps.com/global-elements/lib/script/resize-manager.js | 192.229.221.165 | 200 OK | 468 B |
URL GET HTTP/2www.usps.com/global-elements/lib/script/resize-manager.js IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1040), with no line terminators Hash90d8fb00194d91e9dd20281817c285d6 e7e37421b14a39e0d3787988a52a45d27ec3761f 479b585bb1f3ca011746467c115b58ca0cd6ac62aa68c9d953635b3344953887
GET /global-elements/lib/script/resize-manager.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 1588
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:39 GMT
etag: "410-5057c23b98e40+gzip"
last-modified: Wed, 15 Oct 2014 20:40:17 GMT
server: ECAcc (dce/26B9)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 468
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/fonts/2381d918-136d-444f-8391-db0cba6da388.ttf | 162.241.217.222 | 404 Not Found | 315 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/fonts/2381d918-136d-444f-8391-db0cba6da388.ttf IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/fonts/2381d918-136d-444f-8391-db0cba6da388.ttf HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/files/main.css
Cookie: nfdbrandname=bluehost
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Wed, 17 Apr 2024 08:47:39 GMT
server: nginx/1.21.6
content-type: text/html; charset=iso-8859-1
content-length: 315
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/fonts/8fda1e47-19be-46c7-8d83-8d4fb35572f0.ttf | 162.241.217.222 | 404 Not Found | 315 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/fonts/8fda1e47-19be-46c7-8d83-8d4fb35572f0.ttf IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/fonts/8fda1e47-19be-46c7-8d83-8d4fb35572f0.ttf HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/files/main.css
Cookie: nfdbrandname=bluehost
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Wed, 17 Apr 2024 08:47:39 GMT
server: nginx/1.21.6
content-type: text/html; charset=iso-8859-1
content-length: 315
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/fonts/b0ffdcf0-26da-47fd-8485-20e4a40d4b7d.ttf | 162.241.217.222 | 404 Not Found | 315 B |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/fonts/b0ffdcf0-26da-47fd-8485-20e4a40d4b7d.ttf IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/fonts/b0ffdcf0-26da-47fd-8485-20e4a40d4b7d.ttf HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/files/main.css
Cookie: nfdbrandname=bluehost
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Wed, 17 Apr 2024 08:47:39 GMT
server: nginx/1.21.6
content-type: text/html; charset=iso-8859-1
content-length: 315
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/favicon.ico | 162.241.217.222 | 404 Not Found | 315 B |
URL GET HTTP/2zip.qso.mybluehost.me/favicon.ico IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /favicon.ico HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Cookie: nfdbrandname=bluehost
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Wed, 17 Apr 2024 08:47:39 GMT
server: nginx/1.21.6
content-type: text/html; charset=iso-8859-1
content-length: 315
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/bootstrap.min.css | 162.241.217.222 | 200 OK | 121 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/bootstrap.min.css IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeASCII text, with very long lines (65371) Size121 kB (121091 bytes) Hash148113d0fc5638a9c63faa0852746a28 376560faf7b32f3768f9cceb0813cdc6125d6269 18961a60d0e8347696fb7f0b322232eef10638dcb029f9d3961f9db7e0a787cc
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/bootstrap.min.css HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 17 May 2024 08:47:37 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: text/css
date: Wed, 17 Apr 2024 08:47:37 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/2us/verification/files/jquery-3.2.1.js | 162.241.217.222 | 200 OK | 87 kB |
URL GET HTTP/2zip.qso.mybluehost.me/2us/verification/files/jquery-3.2.1.js IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeJavaScript source, ASCII text, with very long lines (32058) Hashc9f5aeeca3ad37bf2aa006139b935f0a 1055018c28ab41087ef9ccefe411606893dabea2 87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /2us/verification/files/jquery-3.2.1.js HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Mon, 08 Jan 2024 15:19:05 GMT
accept-ranges: bytes
cache-control: max-age=21600
expires: Wed, 17 Apr 2024 14:47:38 GMT
vary: Accept-Encoding
content-encoding: gzip
host-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==
x-newfold-cache-level: 2
x-endurance-cache-level: 2
x-nginx-cache: WordPress
content-type: application/javascript
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| zip.qso.mybluehost.me/global-elements/header/images/schedule-redelivery.svg | 162.241.217.222 | 404 Not Found | 315 B |
URL GET HTTP/2zip.qso.mybluehost.me/global-elements/header/images/schedule-redelivery.svg IP162.241.217.222:443 ASN#46606 UNIFIEDLAYER-AS-1
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerLet's Encrypt Subjectautodiscover.zip.qso.mybluehost.me Fingerprint08:2F:2C:61:56:C2:BE:C6:FB:5F:BB:50:41:B6:DA:D1:B4:32:F7:61 ValidityThu, 07 Mar 2024 09:14:08 GMT - Wed, 05 Jun 2024 09:14:07 GMT
File typeHTML document, ASCII text, with very long lines (326), with no line terminators Hash97ef40509b73c101d6815511c3adf98d a4242322497ea630ea72e26ba297a95a2bbe5ccd 322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /global-elements/header/images/schedule-redelivery.svg HTTP/1.1
Host: zip.qso.mybluehost.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/2us/verification/files/megamenu-v2.css
Cookie: nfdbrandname=bluehost
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-length: 315
content-type: text/html; charset=iso-8859-1
date: Wed, 17 Apr 2024 08:47:38 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/images/home/featured_clicknship.svg | 192.229.221.165 | 200 OK | 1.1 kB |
URL GET HTTP/2www.usps.com/assets/images/home/featured_clicknship.svg IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash4eaba35653e775df78f96942d040dcc3 f5fd90e8f32041520795f0c82a1652124a02f93c 08f3c04fe589387977fca30dc02a87bf42ce3c066fc28c1071be412aaf9cf852
GET /assets/images/home/featured_clicknship.svg HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 982
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "436-5494e7bfce000+gzip"
last-modified: Fri, 24 Feb 2017 22:45:20 GMT
server: ECAcc (dce/26C5)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 493
X-Firefox-Spdy: h2
|
|
| www.usps.com/assets/images/home/po_box.svg | 192.229.221.165 | 200 OK | 1.6 kB |
URL GET HTTP/2www.usps.com/assets/images/home/po_box.svg IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash2cc2a9cd603e3badb3f767a4a4728f5c 40f414f0ff209023650ca7014ec2a57939229d1d e60ecbbbdfaf3944b4ec3ffdb090954b0ede6607da1cdbf9fb7d2963fdee61b6
GET /assets/images/home/po_box.svg HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 1562
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "667-5494e7f259740+gzip"
last-modified: Fri, 24 Feb 2017 22:46:13 GMT
server: ECAcc (dce/26C8)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 848
X-Firefox-Spdy: h2
|
|
| www.usps.com/global-elements/header/images/utility-header/search.svg | 192.229.221.165 | 200 OK | 1.5 kB |
URL GET HTTP/2www.usps.com/global-elements/header/images/utility-header/search.svg IP192.229.221.165:443
Requested byhttps://zip.qso.mybluehost.me/2us/verification/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash72686f982dfebbd9157958b01f2ce9e6 525eb380721cdc53b170b7ed00d9a87f6ab71167 92f4f127afbc23dba0b9a8edd2b7baf572c6f2abec350a4d992e372b000e674c
GET /global-elements/header/images/utility-header/search.svg HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zip.qso.mybluehost.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 945
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: image/svg+xml
date: Wed, 17 Apr 2024 08:47:38 GMT
etag: "5b9-549b126599f40+gzip"
last-modified: Wed, 01 Mar 2017 20:28:05 GMT
server: ECAcc (dce/2688)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 795
X-Firefox-Spdy: h2
|
|