| cdn.cookielaw.org/scripttemplates/otSDKStub.js |  104.19.178.52 | 200 OK | 6.9 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/otSDKStub.js IP104.19.178.52:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (21229) Hash0cd317a7b9c520801230e944f7d50e41 e3985ff0c2e8b1eaacb617c7c5af5bebfcbceda6 6f08699117c1f15f6d35e7b4380d12d18a1881f075e177b5853b1017a3307544
GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:27:32 GMT
content-type: application/javascript
content-length: 6882
content-encoding: gzip
content-md5: zgTRIDojRJmnmBTwUyI2Vw==
last-modified: Wed, 17 Apr 2024 06:40:28 GMT
etag: 0x8DC5EA94574E6DA
x-ms-request-id: 4732fd52-501e-0032-7de1-9039f4000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 37222
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8761e7296f375696-OSL
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/chunks/pages/_app-bcfbcbbeb8c91266.js |  76.76.21.164 | 200 OK | 473 B |
URL GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/chunks/pages/_app-bcfbcbbeb8c91266.js IP76.76.21.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (473), with no line terminators Hash7c61bfee2a605ff3590bc8ffd8aed420 2915b1a7034d6f3ec100b364218cc53d12db3b57 e449e5c02f8ac97c7d6bcd2bb9716b6cbb53d8391f252c8c5288c596ea8a90f3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /_next/static/chunks/pages/_app-bcfbcbbeb8c91266.js HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="_app-bcfbcbbeb8c91266.js"
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 04:27:32 GMT
etag: "7c61bfee2a605ff3590bc8ffd8aed420"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-matched-path: /_next/static/chunks/pages/_app-bcfbcbbeb8c91266.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::m58zf-1713414452701-adf2f531ba12
content-length: 473
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/MdslMV38lOFNGdYLGAI6z/_ssgManifest.js | 76.76.21.164 | 200 OK | 77 B |
URL GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/MdslMV38lOFNGdYLGAI6z/_ssgManifest.js IP76.76.21.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with no line terminators Hashb6652df95db52feb4daf4eca35380933 65451d110137761b318c82d9071c042db80c4036 6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /_next/static/MdslMV38lOFNGdYLGAI6z/_ssgManifest.js HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="_ssgManifest.js"
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 04:27:32 GMT
etag: "b6652df95db52feb4daf4eca35380933"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-matched-path: /_next/static/MdslMV38lOFNGdYLGAI6z/_ssgManifest.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::gb5gt-1713414452710-a261f1f7ecf0
content-length: 77
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/otSDKStub.js | 104.19.178.52 | 200 OK | 6.9 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/otSDKStub.js IP104.19.178.52:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (21229) Hash0cd317a7b9c520801230e944f7d50e41 e3985ff0c2e8b1eaacb617c7c5af5bebfcbceda6 6f08699117c1f15f6d35e7b4380d12d18a1881f075e177b5853b1017a3307544
GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:27:33 GMT
content-type: application/javascript
content-length: 6882
content-encoding: gzip
content-md5: zgTRIDojRJmnmBTwUyI2Vw==
last-modified: Wed, 17 Apr 2024 06:40:28 GMT
etag: 0x8DC5EA94574E6DA
x-ms-request-id: 4732fd52-501e-0032-7de1-9039f4000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 37223
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8761e72b482d5696-OSL
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/consent/1d95f459-6167-408b-962e-a5696635fac1/1d95f459-6167-408b-962e-a5696635fac1.json | 104.19.178.52 | 200 OK | 2.0 kB |
URL GET HTTP/2cdn.cookielaw.org/consent/1d95f459-6167-408b-962e-a5696635fac1/1d95f459-6167-408b-962e-a5696635fac1.json IP104.19.178.52:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash737bfde9431832b06d7d67e2c410f2e9 2104da0734324093647c07fa17de914c02e1f628 d1786d3cab215740ebe74d1ba82edd74f7c88aa19ecf8a00fcaeb80ef4a85d94
GET /consent/1d95f459-6167-408b-962e-a5696635fac1/1d95f459-6167-408b-962e-a5696635fac1.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:27:33 GMT
content-type: application/x-javascript
content-length: 1983
cf-ray: 8761e72a589d5687-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DBC57ABEA23346
expires: Fri, 19 Apr 2024 04:27:33 GMT
last-modified: Thu, 05 Oct 2023 08:11:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: w8pnp7SmZKjHfaLcRHH7eA==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 4dde832c-e01e-00a1-65d5-7de2fe000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/202309.1.0/otBannerSdk.js | 104.19.178.52 | 200 OK | 104 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/202309.1.0/otBannerSdk.js IP104.19.178.52:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Size104 kB (104423 bytes) Hash96f89e028e2b8ae303a6ffde5bfe37c6 3429420d79fb0054f98c483f0a6e42054a64ba27 803f9665533b781ac3abb157ba32b9a1f48d3b7a30bada354656d4b89be22610
GET /scripttemplates/202309.1.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:27:33 GMT
content-type: application/javascript
content-length: 104423
content-encoding: gzip
content-md5: wp4bduWb8cLN8oREjFODhQ==
last-modified: Thu, 19 Oct 2023 03:29:28 GMT
etag: 0x8DBD0539A07337D
x-ms-request-id: ebd2dd6e-701e-000a-56c3-139d34000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 37223
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8761e72b78525696-OSL
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js | 142.250.74.164 | 200 OK | 2.5 kB |
URL GET HTTP/2www.google.com/recaptcha/api.js IP142.250.74.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCC:CC:99:46:65:6C:77:0B:C8:AA:AD:5E:58:B6:2D:19:B2:C7:0B:06 ValidityMon, 04 Mar 2024 07:19:07 GMT - Mon, 27 May 2024 07:19:06 GMT
File typeJavaScript source, ASCII text, with very long lines (5651), with no line terminators Hashfa07a76b4940fc086d913e08e6b52e49 180d035b222d7e1f9da2558bf44e9a6f0d2a9a39 40ed40a5b24450e2db88e698e6842362081ecc36224cd398fdc5fdf92cd4fae7
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Thu, 18 Apr 2024 04:27:32 GMT
date: Thu, 18 Apr 2024 04:27:32 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/images/logo.png | 76.76.21.164 | 200 OK | 11 kB |
URL GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/images/logo.png IP76.76.21.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typePNG image data, 1181 x 167, 8-bit/color RGBA, non-interlaced Hash6ca57abf5741a5ac9ae8100ff5469b6e f596e4f8f725b5281768b38ef561573c268648a8 4971fe9d28caa4bb569fa335ab2949528d97d76a97938b0ece6c86b6d306adfb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /images/logo.png HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-ranges: bytes
access-control-allow-origin: *
age: 0
cache-control: no-cache
content-disposition: inline; filename="logo.png"
content-security-policy: default-src 'self' https://v2.dhlgpi.com https://cdn.cookielaw.org; script-src 'self' https://www.google.com https://www.gstatic.com https://cdn.cookielaw.org 'nonce-Zm9vYmFy' 'nonce-8ihJloga9'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; frame-src www.google.com/recaptcha/; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://v2.dhlgpi.com https://vitals.vercel-insights.com https://cdn.cookielaw.org; frame-ancestors 'self'; form-action 'self';
content-type: image/png
date: Thu, 18 Apr 2024 04:27:33 GMT
dnt: 1
etag: "6ca57abf5741a5ac9ae8100ff5469b6e"
forwarded: for=91.90.42.154;host=dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app;proto=https
pragma: no-cache
referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
user-agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
x-forwarded-for: 91.90.42.154
x-forwarded-host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
x-forwarded-proto: https
x-matched-path: /images/logo.png
x-nonce: ZGIwNmU4MzgtNTYxNi00OWQwLWExMTgtOTJkOGVlOWU0ZDU2
x-real-ip: 91.90.42.154
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-deployment-url: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
x-vercel-edge-region: arn1
x-vercel-id: arn1:arn1::5m8vd-1713414452879-5c5ce4b7e9bb
x-vercel-ip-city: Oslo
x-vercel-ip-country: NO
x-vercel-ip-country-region: 03
x-vercel-ip-latitude: 59.9016
x-vercel-ip-longitude: 10.7343
x-vercel-ip-timezone: Europe/Oslo
x-vercel-proxied-for: 91.90.42.154
content-length: 10607
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/media/Delivery_W_Rg.0cb34587.woff | 76.76.21.164 | 200 OK | 41 kB |
URL GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/media/Delivery_W_Rg.0cb34587.woff IP76.76.21.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeWeb Open Font Format, TrueType, length 41084, version 1.66 Hash03f859bf58e4d37841070de34be7d978 3436d4fa17e7ee470c3d62b08787cfa7de408408 5af5c3746b03792640b9cafdabddfb2c5407f72988e128541a88fa439607d940
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /_next/static/media/Delivery_W_Rg.0cb34587.woff HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/css/fd9febbc56d274a8.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="Delivery_W_Rg.0cb34587.woff"
content-type: font/woff
date: Thu, 18 Apr 2024 04:27:33 GMT
etag: "03f859bf58e4d37841070de34be7d978"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-matched-path: /_next/static/media/Delivery_W_Rg.0cb34587.woff
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::vp4j6-1713414452873-7ef9a32b0b99
content-length: 41084
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/202309.1.0/otBannerSdk.js | 104.19.178.52 | 200 OK | 104 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/202309.1.0/otBannerSdk.js IP104.19.178.52:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Size104 kB (104423 bytes) Hash96f89e028e2b8ae303a6ffde5bfe37c6 3429420d79fb0054f98c483f0a6e42054a64ba27 803f9665533b781ac3abb157ba32b9a1f48d3b7a30bada354656d4b89be22610
GET /scripttemplates/202309.1.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:27:33 GMT
content-type: application/javascript
content-length: 104423
content-encoding: gzip
content-md5: wp4bduWb8cLN8oREjFODhQ==
last-modified: Thu, 19 Oct 2023 03:29:28 GMT
etag: 0x8DBD0539A07337D
x-ms-request-id: ebd2dd6e-701e-000a-56c3-139d34000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 37223
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8761e72c28b15696-OSL
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/chunks/webpack-9916b8d7f6f29450.js | 76.76.21.164 | 200 OK | 2.0 kB |
URL GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/chunks/webpack-9916b8d7f6f29450.js IP76.76.21.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (4022), with no line terminators Hash1733eb7aa6ee019289e2cccf5d98116f 0af330752fc73a2a0126a7ff9deb18b670095b0c aafcae1dd07a12e27b947a7226fefe8c4150a64eea929e9ef3cab5e08ba3f7c7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /_next/static/chunks/webpack-9916b8d7f6f29450.js HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="webpack-9916b8d7f6f29450.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 04:27:32 GMT
etag: W/"1733eb7aa6ee019289e2cccf5d98116f"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-matched-path: /_next/static/chunks/webpack-9916b8d7f6f29450.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::vp4j6-1713414452703-b03870ab6990
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/consent/1d95f459-6167-408b-962e-a5696635fac1/d0b2d24a-3f10-412a-b16e-f41b837161b3/en.json | 104.19.178.52 | 200 OK | 13 kB |
URL GET HTTP/2cdn.cookielaw.org/consent/1d95f459-6167-408b-962e-a5696635fac1/d0b2d24a-3f10-412a-b16e-f41b837161b3/en.json IP104.19.178.52:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hashd6808de49e3153d8851a0b01fa5d9643 41c67102c1efc40c5d96464d75061be64b36e3c6 d3042a1576f36911c006ddf095717e52e66f57046caa97745bde17b71812cad9
GET /consent/1d95f459-6167-408b-962e-a5696635fac1/d0b2d24a-3f10-412a-b16e-f41b837161b3/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Origin: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:27:33 GMT
content-type: application/x-javascript
content-length: 13092
cf-ray: 8761e72c29a55687-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DBC57AC4A36BB3
expires: Fri, 19 Apr 2024 04:27:33 GMT
last-modified: Thu, 05 Oct 2023 08:12:07 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: 9+Fjv8CR7LSBNG/3DRKn1Q==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: b504034f-e01e-0037-1d0a-91eb2f000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/images/login-bg.jpg | 76.76.21.164 | 200 OK | 431 kB |
URL GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/images/login-bg.jpg IP76.76.21.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2401, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=3600], baseline, precision 8, 1920x1089, components 3 Size431 kB (430779 bytes) Hash21701304f993f4f78ef53658a0e36496 f538106869ede3d89fe99bfe97754d5f04620815 143f456188f25191ac5d169bee839295dae78beaddb763b564853b285b530961
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /images/login-bg.jpg HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/css/fd9febbc56d274a8.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept: image/avif,image/webp,*/*
accept-language: en-US,en;q=0.5
accept-ranges: bytes
access-control-allow-origin: *
age: 0
cache-control: no-cache
content-disposition: inline; filename="login-bg.jpg"
content-security-policy: default-src 'self' https://v2.dhlgpi.com https://cdn.cookielaw.org; script-src 'self' https://www.google.com https://www.gstatic.com https://cdn.cookielaw.org 'nonce-Zm9vYmFy' 'nonce-8ihJloga9'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; frame-src www.google.com/recaptcha/; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://v2.dhlgpi.com https://vitals.vercel-insights.com https://cdn.cookielaw.org; frame-ancestors 'self'; form-action 'self';
content-type: image/jpeg
date: Thu, 18 Apr 2024 04:27:33 GMT
dnt: 1
etag: "21701304f993f4f78ef53658a0e36496"
forwarded: for=91.90.42.154;host=dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app;proto=https
pragma: no-cache
referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/css/fd9febbc56d274a8.css
sec-fetch-dest: image
sec-fetch-mode: no-cors
sec-fetch-site: same-origin
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
user-agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
x-forwarded-for: 91.90.42.154
x-forwarded-host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
x-forwarded-proto: https
x-matched-path: /images/login-bg.jpg
x-nonce: YzEwY2JlZDMtZmIwNC00MjdiLWJjODctNGVlNjNiN2FhNjhm
x-real-ip: 91.90.42.154
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-deployment-url: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
x-vercel-edge-region: arn1
x-vercel-id: arn1:arn1::5g9s9-1713414452872-115a7ea61445
x-vercel-ip-city: Oslo
x-vercel-ip-country: NO
x-vercel-ip-country-region: 03
x-vercel-ip-latitude: 59.9016
x-vercel-ip-longitude: 10.7343
x-vercel-ip-timezone: Europe/Oslo
x-vercel-proxied-for: 91.90.42.154
content-length: 430779
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/202309.1.0/assets/otFlat.json | 104.19.178.52 | 200 OK | 3.0 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/202309.1.0/assets/otFlat.json IP104.19.178.52:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash4d4429a2dfaa8a27fbe9659e8e717f74 28ad4885ff33594fa46eced61bd42874926aa17c ea5db5581e262d77d1a43fbb3f0fa3661b51d097b40ca38f584b4943f47cf2e0
GET /scripttemplates/202309.1.0/assets/otFlat.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Origin: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:27:33 GMT
content-type: application/json
content-length: 3017
content-encoding: gzip
content-md5: Ku3O1VFWoltPW4n5m1lGVQ==
last-modified: Thu, 19 Oct 2023 03:29:22 GMT
etag: 0x8DBD053964DC527
x-ms-request-id: 4d183012-101e-008a-438d-896232000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8761e72d3a365687-OSL
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/202309.1.0/assets/v2/otPcCenter.json | 104.19.178.52 | 200 OK | 13 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/202309.1.0/assets/v2/otPcCenter.json IP104.19.178.52:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash901793eec95c3211c0297e8f2f7e9d3a 9e1e8c45cd1f68f9ac3ef71beee4579df6215d0e 0b0a210e89ac35b54a9b4ccb0336ea91c561e6dc5f8bda49574da98d40799c6e
GET /scripttemplates/202309.1.0/assets/v2/otPcCenter.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Origin: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:27:33 GMT
content-type: application/json
content-length: 12708
content-encoding: gzip
content-md5: Xznrm5/jaKmHSjGeIIkHOA==
last-modified: Thu, 19 Oct 2023 03:29:24 GMT
etag: 0x8DBD05397A0A023
x-ms-request-id: ad59d18b-801e-0053-780a-911ab7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8761e72d3a3a5687-OSL
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/data/MdslMV38lOFNGdYLGAI6z/privacy.json | 76.76.21.164 | 200 OK | 13 kB |
URL GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/data/MdslMV38lOFNGdYLGAI6z/privacy.json IP76.76.21.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
Hash05ea50adccaa3626de3d2ac5e1a0f3b9 4d00162d86c1200ea892647640fe2af3d76a031d 953df900134a523e9bcaf7f951d45e6e6344be596b3987db20c2529535afe5b3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /_next/data/MdslMV38lOFNGdYLGAI6z/privacy.json HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
purpose: prefetch
x-middleware-prefetch: 1
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
date: Thu, 18 Apr 2024 04:27:33 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-matched-path: /privacy
x-middleware-skip: 1
x-robots-tag: noindex
x-vercel-id: arn1::jbghs-1713414453030-b28be455e90b
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/logos/9375bad7-f65e-4f8a-bc16-8254723bd66a/233dac18-317c-4c2c-9914-7fac4789526f/95b2bf3e-0ba5-4e38-8cfb-d19cfa4f5bf6/DHL_Logo.PNG | 104.19.178.52 | 200 OK | 1.8 kB |
URL GET HTTP/2cdn.cookielaw.org/logos/9375bad7-f65e-4f8a-bc16-8254723bd66a/233dac18-317c-4c2c-9914-7fac4789526f/95b2bf3e-0ba5-4e38-8cfb-d19cfa4f5bf6/DHL_Logo.PNG IP104.19.178.52:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typePNG image data, 197 x 53, 8-bit/color RGBA, non-interlaced Hashc11081bd2b7d36eafeb9e5c5d396d356 38b54ccb126e0b1f98b837bf0d086b44d8935b1b 904b70e4997d2154d462c8514522e03846ba539466c01c3b310a824ea4418caa
GET /logos/9375bad7-f65e-4f8a-bc16-8254723bd66a/233dac18-317c-4c2c-9914-7fac4789526f/95b2bf3e-0ba5-4e38-8cfb-d19cfa4f5bf6/DHL_Logo.PNG HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:27:33 GMT
content-type: image/png
content-length: 1756
content-md5: wRCBvSt9Nur+ueXF05bTVg==
last-modified: Wed, 30 Dec 2020 04:42:33 GMT
etag: 0x8D8AC7D53226189
x-ms-request-id: 08956dde-601e-0029-0344-1407f7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 37199
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8761e72df9a35696-OSL
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/chunks/7397-5cfd49845f83407a.js | 76.76.21.164 | 200 OK | 38 kB |
URL GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/chunks/7397-5cfd49845f83407a.js IP76.76.21.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (63906) Hash13964d74d81c6447c29edb0e6448f067 59bf8831c3d7725cd32554ea7092ea74d261b20b e39fcfdac64ee023347e959fd3c61657dc778dc9e62238eec764c2cc90481338
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /_next/static/chunks/7397-5cfd49845f83407a.js HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="7397-5cfd49845f83407a.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 04:27:32 GMT
etag: W/"13964d74d81c6447c29edb0e6448f067"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-matched-path: /_next/static/chunks/7397-5cfd49845f83407a.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::vp4j6-1713414452707-44fe2a199250
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/202309.1.0/assets/otFlat.json | 104.19.178.52 | 200 OK | 3.0 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/202309.1.0/assets/otFlat.json IP104.19.178.52:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
Hash4d4429a2dfaa8a27fbe9659e8e717f74 28ad4885ff33594fa46eced61bd42874926aa17c ea5db5581e262d77d1a43fbb3f0fa3661b51d097b40ca38f584b4943f47cf2e0
GET /scripttemplates/202309.1.0/assets/otFlat.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Origin: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:27:33 GMT
content-type: application/json
content-length: 3017
content-encoding: gzip
content-md5: Ku3O1VFWoltPW4n5m1lGVQ==
last-modified: Thu, 19 Oct 2023 03:29:22 GMT
etag: 0x8DBD053964DC527
x-ms-request-id: 4d183012-101e-008a-438d-896232000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 0
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8761e72e3ab15687-OSL
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js | 142.250.74.35 | 200 OK | 203 kB |
URL GET HTTP/2www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js IP142.250.74.35:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeJavaScript source, ASCII text, with very long lines (554) Size203 kB (203369 bytes) Hashe9ccb3dbde79ba5ffdf9cad4b32d59fd 3a8cd67adc7c885bdf683f1e7f491e6a4a50679f 8f2c6777c7ccc01ab67290fa8acd5a4c4866be64129f39dfaeb9197dfa15e137
GET /recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 203369
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 13 Apr 2024 02:30:15 GMT
expires: Sun, 13 Apr 2025 02:30:15 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 29 Mar 2024 04:30:36 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 439038
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/chunks/framework-7f2eb667d43508b3.js | 76.76.21.164 | 200 OK | 47 kB |
URL GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/chunks/framework-7f2eb667d43508b3.js IP76.76.21.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65201) Hash2cdf631f7c362a433b60b15aa56ff5fb 745f24f0e6d8fc35c6d40de45739c641de40216e 88b967bd2580f618d215a4ac0367863bb15eb754c25edf11aa03cefadd00b5a1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /_next/static/chunks/framework-7f2eb667d43508b3.js HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="framework-7f2eb667d43508b3.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 04:27:32 GMT
etag: W/"2cdf631f7c362a433b60b15aa56ff5fb"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-matched-path: /_next/static/chunks/framework-7f2eb667d43508b3.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::h2f49-1713414452701-3b0b5b5667fb
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/favicon.ico | 76.76.21.164 | 200 OK | 10 kB |
URL GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/favicon.ico IP76.76.21.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeMS Windows icon resource - 1 icon, 256x-102, 32 bits/pixel Hashef3891cb7a34d5f61cb9b6dbd88c0baa a7e79602ef9b32646db299fa2e8f1772e5c258a2 c2a2fa60f2c8460d4670f96737f56fc890a7118645feb58a9ebe49a3b4a82b26
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /favicon.ico HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 0
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="favicon.ico"
content-encoding: br
content-type: image/vnd.microsoft.icon
date: Thu, 18 Apr 2024 04:27:33 GMT
etag: W/"ef3891cb7a34d5f61cb9b6dbd88c0baa"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-matched-path: /favicon.ico
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::jbghs-1713414453423-03c6d322a6af
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/chunks/5675-ba696e2944891cbb.js | 76.76.21.164 | 200 OK | 13 kB |
URL GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/chunks/5675-ba696e2944891cbb.js IP76.76.21.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (9163), with no line terminators Hash4c7dcc7f000640b4915911ad43166881 2f9f6538bf587b9f8f90e492a23cc8ce2a497ab9 c56234374fa65b9b9029d4c46cc2d9923c06cf4b8e6ff7428f9f070016f5275f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /_next/static/chunks/5675-ba696e2944891cbb.js HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="5675-ba696e2944891cbb.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 04:27:32 GMT
etag: W/"4c7dcc7f000640b4915911ad43166881"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-matched-path: /_next/static/chunks/5675-ba696e2944891cbb.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::5g9s9-1713414452707-f1d641907016
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/chunks/1664-9cffbbd623b4240d.js | 76.76.21.164 | 200 OK | 11 kB |
URL GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/chunks/1664-9cffbbd623b4240d.js IP76.76.21.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (6340), with no line terminators Hash77a5d9db1f35abef2468193c1b3f609c 824e1b4cbf706e1f163c2528a350d5968e516703 51332cd7e2582f09372832c662271cf8fafe1fbb1b4794d3173bf6948066019b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /_next/static/chunks/1664-9cffbbd623b4240d.js HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="1664-9cffbbd623b4240d.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 04:27:32 GMT
etag: W/"77a5d9db1f35abef2468193c1b3f609c"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-matched-path: /_next/static/chunks/1664-9cffbbd623b4240d.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::xkvkv-1713414452702-4efe997add1d
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/chunks/main-6dbaaaafb15883e2.js | 76.76.21.164 | 200 OK | 38 kB |
URL GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/chunks/main-6dbaaaafb15883e2.js IP76.76.21.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash46b27b6ccd456b45dd880e55513a5634 d1c8c2fddf40615b384fe760fadbd393702f9968 b3ce67b9423245d4f5557db184c6e5486bd96b50c064065c0177227c465ce48d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /_next/static/chunks/main-6dbaaaafb15883e2.js HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="main-6dbaaaafb15883e2.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 04:27:32 GMT
etag: W/"46b27b6ccd456b45dd880e55513a5634"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-matched-path: /_next/static/chunks/main-6dbaaaafb15883e2.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::9d6kb-1713414452701-47517bf61432
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/202309.1.0/assets/otCommonStyles.css | 104.19.178.52 | 200 OK | 22 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/202309.1.0/assets/otCommonStyles.css IP104.19.178.52:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (21778), with no line terminators Hash73bc4067d312180a1b19a4d883f42d6a ad328a9a572fbea43f295e7769835ff08f6ff1fd d3f7b0ec4de079928a999641e781e80f33597a392a561bc460276dfb4efb6eec
GET /scripttemplates/202309.1.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Origin: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:27:33 GMT
content-type: text/css
content-md5: c7xAZ9MSGAobGaTYg/Qtag==
last-modified: Thu, 19 Oct 2023 03:29:33 GMT
x-ms-request-id: 57bf407e-f01e-0082-670a-91783d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 0
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8761e72e3ab75687-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/css/fd9febbc56d274a8.css | 76.76.21.164 | 200 OK | 20 kB |
URL GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/css/fd9febbc56d274a8.css IP76.76.21.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (19524) Hashbf074d9f6782ac1c696d1305da8a96fd 9519ff3a7e275d3eb0e03c270c16de6de068f333 9201ab50e84746ae6644396ba304f69b636773b59959bfc067302b87a03d4e98
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /_next/static/css/fd9febbc56d274a8.css HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="fd9febbc56d274a8.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Thu, 18 Apr 2024 04:27:32 GMT
etag: W/"bf074d9f6782ac1c696d1305da8a96fd"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-matched-path: /_next/static/css/fd9febbc56d274a8.css
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::m4h8m-1713414452698-e1d823173822
X-Firefox-Spdy: h2
|
|
| vitals.vercel-insights.com/v1/vitals |  52.212.167.88 | 200 OK | 2 B |
URL POST HTTP/2vitals.vercel-insights.com/v1/vitals IP52.212.167.88:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerAmazon Subjectvercel-insights.com Fingerprint6E:D3:87:6C:53:FE:19:37:3A:70:C1:CF:7F:E6:17:99:3B:86:65:63 ValidityWed, 23 Aug 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashe0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /v1/vitals HTTP/1.1
Host: vitals.vercel-insights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 182
Origin: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:27:33 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-ratelimit-limit: 1000
x-ratelimit-remaining: 999
x-ratelimit-reset: 60
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
|
|
| vitals.vercel-insights.com/v1/vitals | 52.212.167.88 | 200 OK | 2 B |
URL POST HTTP/2vitals.vercel-insights.com/v1/vitals IP52.212.167.88:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerAmazon Subjectvercel-insights.com Fingerprint6E:D3:87:6C:53:FE:19:37:3A:70:C1:CF:7F:E6:17:99:3B:86:65:63 ValidityWed, 23 Aug 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashe0aa021e21dddbd6d8cecec71e9cf564 9ce3bd4224c8c1780db56b4125ecf3f24bf748b7 565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
POST /v1/vitals HTTP/1.1
Host: vitals.vercel-insights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 181
Origin: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:27:33 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-ratelimit-limit: 1000
x-ratelimit-remaining: 999
x-ratelimit-reset: 60
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ | 76.76.21.164 | 200 OK | 6.1 kB |
URL User Request GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ IP76.76.21.164:443
CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeHTML document, ASCII text, with very long lines (6371), with no line terminators Hash803fec8a89373d02fc247b0ab0dbfda9 933027b57993544a3afc192db2178b0f3250e1ad 0f77aff4b76a693bd5f3ab6452400b20990a33d1f0b66fed969208ca70526fd7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET / HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
accept-language: en-US,en;q=0.5
access-control-allow-origin: *
age: 21728
cache-control: no-cache
content-disposition: inline
content-encoding: br
content-security-policy: default-src 'self' https://v2.dhlgpi.com https://cdn.cookielaw.org; script-src 'self' https://www.google.com https://www.gstatic.com https://cdn.cookielaw.org 'nonce-Zm9vYmFy' 'nonce-8ihJloga9'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; frame-src www.google.com/recaptcha/; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://v2.dhlgpi.com https://vitals.vercel-insights.com https://cdn.cookielaw.org; frame-ancestors 'self'; form-action 'self';
content-type: text/html; charset=utf-8
date: Thu, 18 Apr 2024 04:27:32 GMT
dnt: 1
etag: W/"9485f0e8add4369ae24a689a77c84438"
forwarded: for=91.90.42.154;host=dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app;proto=https
pragma: no-cache
sec-fetch-dest: document
sec-fetch-mode: navigate
sec-fetch-site: cross-site
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
x-forwarded-for: 91.90.42.154
x-forwarded-host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
x-forwarded-proto: https
x-matched-path: /
x-nonce: OWE3YTNiMGQtOTQyZi00YmMwLWIwMzUtMWYyNmM4ZDc5Nzgx
x-real-ip: 91.90.42.154
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-deployment-url: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
x-vercel-edge-region: arn1
x-vercel-id: arn1:arn1::m4h8m-1713414452324-e93d7bac9c0d
x-vercel-ip-city: Oslo
x-vercel-ip-country: NO
x-vercel-ip-country-region: 03
x-vercel-ip-latitude: 59.9016
x-vercel-ip-longitude: 10.7343
x-vercel-ip-timezone: Europe/Oslo
x-vercel-proxied-for: 91.90.42.154
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/MdslMV38lOFNGdYLGAI6z/_buildManifest.js | 76.76.21.164 | 200 OK | 7.4 kB |
URL GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/MdslMV38lOFNGdYLGAI6z/_buildManifest.js IP76.76.21.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (7727), with no line terminators Hash75c243019cffe5e1a1419718aaadcbf5 d5fd648a7acc4455ccfcfb412543c53b3bb64252 d27d088c1404933521ac0841ac713d77d345d8ac93923d6d88ea8d12edafe7f7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /_next/static/MdslMV38lOFNGdYLGAI6z/_buildManifest.js HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="_buildManifest.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 04:27:32 GMT
etag: W/"8f4594c88c1f2c7d002362e846f2074e"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-matched-path: /_next/static/MdslMV38lOFNGdYLGAI6z/_buildManifest.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::5m8vd-1713414452709-515ab2d2dd5f
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/logos/static/powered_by_logo.svg | 104.19.178.52 | 200 OK | 5.2 kB |
URL GET HTTP/2cdn.cookielaw.org/logos/static/powered_by_logo.svg IP104.19.178.52:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash38b5388f36f8f885deb26afdac0e3116 112eccab1891a3a7cab1c5602ba72c9e127136e0 a8562f11c5a80a5c1c4ab388cfa2a69598203a57a5c67d1f80512bddd80d09ef
GET /logos/static/powered_by_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:27:33 GMT
content-type: image/svg+xml
content-md5: Y+c301RBZNK39PvKQWrIBw==
last-modified: Tue, 16 Apr 2024 07:41:16 GMT
x-ms-request-id: 7f360be9-801e-0088-1367-90dc8a000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 37223
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8761e72df9a65696-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/logos/static/ot_guard_logo.svg | 104.19.178.52 | 200 OK | 497 B |
URL GET HTTP/2cdn.cookielaw.org/logos/static/ot_guard_logo.svg IP104.19.178.52:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash4cefeea2da1f500b581d4842d6454a50 9939dd4c1394641f53655e558bfdca7499480c52 220f235f0188ff469b92b56eb86adf4e828b8a90c587ebfa073383b8583aaeb2
GET /logos/static/ot_guard_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Origin: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:27:33 GMT
content-type: image/svg+xml
content-md5: tXyZydHjxQshFMbbBT1/8A==
last-modified: Wed, 17 Apr 2024 06:40:30 GMT
x-ms-request-id: 248c4b6d-101e-0023-1c0a-91a340000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 0
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8761e72ebb0c5687-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/chunks/4853-80838185500543e6.js | 76.76.21.164 | 200 OK | 12 kB |
URL GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/chunks/4853-80838185500543e6.js IP76.76.21.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeJavaScript source, ASCII text, with very long lines (9339) Hash1ae5ca20fa9b62e5a824625d93880b98 dd4528a326d870613a8e94be0c24a3c9c3731081 bc60f210bbaf77c0fdcc107445870bc37f7aecf3a8e819d419030cef01e0e6f4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /_next/static/chunks/4853-80838185500543e6.js HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="4853-80838185500543e6.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 04:27:32 GMT
etag: W/"1ae5ca20fa9b62e5a824625d93880b98"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-matched-path: /_next/static/chunks/4853-80838185500543e6.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::5g9s9-1713414452707-4f52a5ab1b04
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/data/MdslMV38lOFNGdYLGAI6z/tnc.json | 76.76.21.164 | 200 OK | 3 B |
URL GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/data/MdslMV38lOFNGdYLGAI6z/tnc.json IP76.76.21.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with no line terminators Hashfdf48e6b3239e0b378031fb47d5b202a b1806f381758bc595c29988c05ef5e0ef580c90a fcd393d2c13bad308661b62b34d9c3234a3ce840e22909b0a180e85f76b5d24d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /_next/data/MdslMV38lOFNGdYLGAI6z/tnc.json HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
purpose: prefetch
x-middleware-prefetch: 1
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
date: Thu, 18 Apr 2024 04:27:33 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-matched-path: /tnc
x-middleware-skip: 1
x-robots-tag: noindex
x-vercel-id: arn1::gb5gt-1713414453028-65cc522c77b2
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/scripttemplates/202309.1.0/assets/otCommonStyles.css | 104.19.178.52 | 200 OK | 22 kB |
URL GET HTTP/2cdn.cookielaw.org/scripttemplates/202309.1.0/assets/otCommonStyles.css IP104.19.178.52:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (21778), with no line terminators Hash73bc4067d312180a1b19a4d883f42d6a ad328a9a572fbea43f295e7769835ff08f6ff1fd d3f7b0ec4de079928a999641e781e80f33597a392a561bc460276dfb4efb6eec
GET /scripttemplates/202309.1.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Origin: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:27:33 GMT
content-type: text/css
content-md5: c7xAZ9MSGAobGaTYg/Qtag==
last-modified: Thu, 19 Oct 2023 03:29:33 GMT
x-ms-request-id: 57bf407e-f01e-0082-670a-91783d000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8761e72d4a3c5687-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.cookielaw.org/logos/static/ot_guard_logo.svg | 104.19.178.52 | 200 OK | 497 B |
URL GET HTTP/2cdn.cookielaw.org/logos/static/ot_guard_logo.svg IP104.19.178.52:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerCloudflare, Inc. Subjectcookielaw.org FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31 ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash4cefeea2da1f500b581d4842d6454a50 9939dd4c1394641f53655e558bfdca7499480c52 220f235f0188ff469b92b56eb86adf4e828b8a90c587ebfa073383b8583aaeb2
GET /logos/static/ot_guard_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Origin: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 04:27:33 GMT
content-type: image/svg+xml
content-md5: tXyZydHjxQshFMbbBT1/8A==
last-modified: Wed, 17 Apr 2024 06:40:30 GMT
x-ms-request-id: 248c4b6d-101e-0023-1c0a-91a340000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8761e72e0a9a5687-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/chunks/pages/index-d72143e46dfe6b13.js | 76.76.21.164 | 200 OK | 7.4 kB |
URL GET HTTP/2dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/_next/static/chunks/pages/index-d72143e46dfe6b13.js IP76.76.21.164:443
Requested byhttps://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app FingerprintAF:CF:A8:04:27:73:53:77:D1:D5:CD:E4:60:09:23:4A:DE:CA:82:C4 ValidityMon, 15 Apr 2024 01:56:22 GMT - Sun, 14 Jul 2024 01:56:21 GMT
File typeASCII text, with very long lines (7783), with no line terminators Hashad2b56c472d8923328a2d5fe33201e78 b19713d543bb7f4b556c6a03bbe81c681d364833 2e70b6db526052dd1617232107b2b6d8883b7533b4ebc7fb49d43906711b32a7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | DHL Airways, Inc. |
GET /_next/static/chunks/pages/index-d72143e46dfe6b13.js HTTP/1.1
Host: dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhlgpi-v2-frontend-fog0edws8-darvinhuangg.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 0
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="index-d72143e46dfe6b13.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 18 Apr 2024 04:27:32 GMT
etag: W/"612a1ada99d5f17548c43c1dab712f88"
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-matched-path: /_next/static/chunks/pages/index-d72143e46dfe6b13.js
x-robots-tag: noindex
x-vercel-cache: HIT
x-vercel-id: arn1::m58zf-1713414452708-11b5fbcfbb0a
X-Firefox-Spdy: h2
|
|