| usps.postpathexperts.com/ |  170.106.109.66 | 200 OK | 463 B |
URL User Request GET HTTP/2usps.postpathexperts.com/ IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hasha6db82ec3521cdffcdfcb657a88f9d39 46999c0d48cea56b3f35a3f88603d5b961ac16e2 94c5ea6ec7ad2a9cf4379b9e5b4c1fed29616bf8e33a256bad6002f5494c91c6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET / HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 16 Apr 2024 03:55:46 GMT
content-type: text/html
content-length: 463
last-modified: Fri, 12 Apr 2024 04:23:02 GMT
etag: "6618b726-1cf"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/css/mui.css | 170.106.109.66 | 404 Not Found | 146 B |
URL GET HTTP/2usps.postpathexperts.com/css/mui.css IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /css/mui.css HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 16 Apr 2024 03:55:46 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/js/mui.js | 170.106.109.66 | 404 Not Found | 146 B |
URL GET HTTP/2usps.postpathexperts.com/js/mui.js IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /js/mui.js HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 16 Apr 2024 03:55:46 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/ResourceConfig/urlConfig.json | 170.106.109.66 | 200 OK | 1.2 kB |
URL GET HTTP/2usps.postpathexperts.com/ResourceConfig/urlConfig.json IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeUnicode text, UTF-8 text, with CRLF line terminators Hashb853b32c98a19da77f7b4c6b0e54de8d d505e18121e21f99de3ca5d0077ecf6a83f03c5f 97beee8868eece2b4b7d140cf4e072a90ef48966b9b68308adae1617e1939053
| Analyzer | Verdict | Alert |
|---|
| urlquery | suspicious | Suspicious - Suspicious Javascript code | | OpenPhish | phishing | United States Postal Service |
GET /ResourceConfig/urlConfig.json HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 16 Apr 2024 03:55:46 GMT
content-type: application/json
content-length: 1177
last-modified: Fri, 12 Apr 2024 06:29:41 GMT
etag: "6618d4d5-499"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/static/js/jquery-ui.js | 170.106.109.66 | 200 OK | 7.2 kB |
URL GET HTTP/2usps.postpathexperts.com/static/js/jquery-ui.js IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typegzip compressed data, from Unix Hasha1932bd3c041f24ab17fef734672bbd3 7072aeb7747314a3b2f09f72173ac5bc00937565 3eee61b714ccf834603bde12f41d875e03b34441765b02930e9e9df176f946e7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /static/js/jquery-ui.js HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 16 Apr 2024 03:55:46 GMT
content-type: application/javascript
last-modified: Wed, 01 Mar 2023 19:03:24 GMT
vary: Accept-Encoding
etag: W/"63ffa17c-59f"
expires: Tue, 16 Apr 2024 15:55:46 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/static/js/axios.js | 170.106.109.66 | 200 OK | 17 kB |
URL GET HTTP/2usps.postpathexperts.com/static/js/axios.js IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typegzip compressed data, from Unix Hash017c08e525e01ef180adf3803a181c38 496d8c377856ae11d6395e62bc2efe823d960ea0 8c66e5e3f29c02454152cf25c0f05f90601a1f9810fce111512cac86761cb8d6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /static/js/axios.js HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 16 Apr 2024 03:55:46 GMT
content-type: application/javascript
last-modified: Sat, 10 Nov 2018 04:07:50 GMT
vary: Accept-Encoding
etag: W/"5be65996-a6f0"
expires: Tue, 16 Apr 2024 15:55:46 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/static/js/ResourceRedConfig.js | 170.106.109.66 | 200 OK | 20 kB |
URL GET HTTP/2usps.postpathexperts.com/static/js/ResourceRedConfig.js IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typegzip compressed data, from Unix Hashec057edf57cdc75cb88f7e5a7b06d63f fd6dec4f81420995e29e6e9de15b8b020e5250dc 61f4de8ce73f61c3b16eec7004dace053744e8f1dd2ddd3221ca367f95f71462
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /static/js/ResourceRedConfig.js HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 16 Apr 2024 03:55:46 GMT
content-type: application/javascript
last-modified: Fri, 12 Apr 2024 04:23:57 GMT
vary: Accept-Encoding
etag: W/"6618b75d-82b9"
expires: Tue, 16 Apr 2024 15:55:46 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/static/images/loading-icon-transparent-background-12.jpg | 170.106.109.66 | 200 OK | 82 kB |
URL GET HTTP/2usps.postpathexperts.com/static/images/loading-icon-transparent-background-12.jpg IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeGIF image data, version 89a, 630 x 637 Hash9e0373c2b4410c49439dfd822c5fd16e 427f86c03751b7e107fd282bbe32be18fc2e0898 05eb745176d79ec27d52d544582483fc4d0f6378c7ed2060be24dfc4e8990668
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /static/images/loading-icon-transparent-background-12.jpg HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 16 Apr 2024 03:55:46 GMT
content-type: image/jpeg
content-length: 81572
last-modified: Wed, 21 Sep 2022 07:47:06 GMT
etag: "632ac17a-13ea4"
expires: Thu, 16 May 2024 03:55:46 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/favicon.ico | 170.106.109.66 | 404 Not Found | 146 B |
URL GET HTTP/2usps.postpathexperts.com/favicon.ico IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /favicon.ico HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 16 Apr 2024 03:55:47 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| hd.1-admin.top/websocket/62af4459f38498e6cd2dc3d0451e4a26 | 43.153.107.127 | | 0 B |
URL hd.1-admin.top/websocket/62af4459f38498e6cd2dc3d0451e4a26 IP43.153.107.127:0 ASN#132203 Tencent Building, Kejizhongyi Avenue
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /websocket/62af4459f38498e6cd2dc3d0451e4a26 HTTP/1.1
Host: hd.1-admin.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://usps.postpathexperts.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aH1KCybYYVpjpA60DAkLlA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101
Server: nginx
Date: Tue, 16 Apr 2024 03:55:48 GMT
Connection: upgrade
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Max-Age: 3600
Access-Control-Allow-Headers: *
Upgrade: websocket
Sec-WebSocket-Accept: 8rSTTTym1hNpDpgf4jeMtYRoVEk=
Sec-WebSocket-Extensions: permessage-deflate
|
|
| usps.postpathexperts.com/index_files/base.js.%E4%B8%8B%E8%BD%BD | 170.106.109.66 | 404 Not Found | 146 B |
URL GET HTTP/2usps.postpathexperts.com/index_files/base.js.%E4%B8%8B%E8%BD%BD IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /index_files/base.js.%E4%B8%8B%E8%BD%BD HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/index_files/js | 170.106.109.66 | 404 Not Found | 146 B |
URL GET HTTP/2usps.postpathexperts.com/index_files/js IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /index_files/js HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/index_files/base.js(1).%E4%B8%8B%E8%BD%BD | 170.106.109.66 | 404 Not Found | 146 B |
URL GET HTTP/2usps.postpathexperts.com/index_files/base.js(1).%E4%B8%8B%E8%BD%BD IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /index_files/base.js(1).%E4%B8%8B%E8%BD%BD HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/index_files/default.js.%E4%B8%8B%E8%BD%BD | 170.106.109.66 | 404 Not Found | 146 B |
URL GET HTTP/2usps.postpathexperts.com/index_files/default.js.%E4%B8%8B%E8%BD%BD IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /index_files/default.js.%E4%B8%8B%E8%BD%BD HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/index_files/base.js(2).%E4%B8%8B%E8%BD%BD | 170.106.109.66 | 404 Not Found | 146 B |
URL GET HTTP/2usps.postpathexperts.com/index_files/base.js(2).%E4%B8%8B%E8%BD%BD IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /index_files/base.js(2).%E4%B8%8B%E8%BD%BD HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/index_files/polyfill.min.js.%E4%B8%8B%E8%BD%BD | 170.106.109.66 | 404 Not Found | 146 B |
URL GET HTTP/2usps.postpathexperts.com/index_files/polyfill.min.js.%E4%B8%8B%E8%BD%BD IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /index_files/polyfill.min.js.%E4%B8%8B%E8%BD%BD HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/index_files/json | 170.106.109.66 | 404 Not Found | 146 B |
URL GET HTTP/2usps.postpathexperts.com/index_files/json IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /index_files/json HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| fly.linkcdn.to/images/blank.png |  104.21.68.98 | 200 OK | 14 kB |
URL GET HTTP/2fly.linkcdn.to/images/blank.png IP104.21.68.98:443
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectlinkcdn.to Fingerprint33:70:41:27:31:11:EB:7E:FF:59:3B:55:09:64:E9:28:47:AB:3D:7B ValidityTue, 05 Mar 2024 04:28:46 GMT - Mon, 03 Jun 2024 04:28:45 GMT
File typePNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced Hash7bd3f643b47e3cf4fa880988f4cf47a1 1d621101263e509fd7fb8106a9121bb22d5049d5 087f602507c9fcadc519196919f1a5b223cf9f2c0b7e3316906301fe6766e7d0
GET /images/blank.png HTTP/1.1
Host: fly.linkcdn.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: image/png
content-length: 14543
last-modified: Mon, 25 Jan 2021 08:23:50 GMT
strict-transport-security: max-age= 63072000; includeSubdomains; preload
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
access-control-allow-origin: *
etag: "7bd3f643b47e3cf4fa880988f4cf47a1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -s8aCVZIO6PTxltXP-2plnmcnwNS79sCRcjwHZJ7X6ylFm6XImFewQ==
cache-control: max-age=16070400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LtE%2Bx8M4bEE8ZkssLB3xvZMUZ80G9kDrYA7RnDRf%2FNjYY%2BbO3%2Baod8JvFBoWQUlbXAXyQfn76WLd1Xf%2FRvxK7%2FQLsB14Sr3VWkMYtuctKPWA7CielGRG0a95q8IrtvALfg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87513df0f9935689-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/index_files/css2 | 170.106.109.66 | 200 OK | 26 kB |
URL GET HTTP/2usps.postpathexperts.com/index_files/css2 IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
Hashcc7ba310beea2dc601260d160c89d06c c694765dc0e56c9d0a0e582e227580cbaf895581 50db2192122cd1e4c7840544b7edab345dfdeadb95eec91bfc719778324492ec
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /index_files/css2 HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: application/octet-stream
content-length: 25787
last-modified: Sat, 22 Jul 2023 15:58:47 GMT
etag: "64bbfcb7-64bb"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/index_files/theme.css.v2.3.js.%E4%B8%8B%E8%BD%BD | 170.106.109.66 | 404 Not Found | 146 B |
URL GET HTTP/2usps.postpathexperts.com/index_files/theme.css.v2.3.js.%E4%B8%8B%E8%BD%BD IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /index_files/theme.css.v2.3.js.%E4%B8%8B%E8%BD%BD HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/index_files/1682689100372.png | 170.106.109.66 | 200 OK | 19 kB |
URL GET HTTP/2usps.postpathexperts.com/index_files/1682689100372.png IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typePNG image data, 400 x 400, 8-bit/color RGB, non-interlaced Hash416967d96470406640ea3a7bce3fa460 9b05d5eafe8c3fdca9112498fe40f49b94d21de6 c6a2ea6fe1b753d04b83612477fee217e6fbdc1bdc6c784837d5e1edb7747891
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /index_files/1682689100372.png HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: image/png
content-length: 19156
last-modified: Sat, 22 Jul 2023 15:58:48 GMT
etag: "64bbfcb8-4ad4"
expires: Thu, 16 May 2024 03:55:49 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/index_files/share-tmpl.v2.3.js.%E4%B8%8B%E8%BD%BD | 170.106.109.66 | 404 Not Found | 146 B |
URL GET HTTP/2usps.postpathexperts.com/index_files/share-tmpl.v2.3.js.%E4%B8%8B%E8%BD%BD IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /index_files/share-tmpl.v2.3.js.%E4%B8%8B%E8%BD%BD HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/index_files/urlConfig.json | 170.106.109.66 | 404 Not Found | 146 B |
URL GET HTTP/2usps.postpathexperts.com/index_files/urlConfig.json IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /index_files/urlConfig.json HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| fly.linkcdn.to/v2.5/js/share/base.js?t=475899 | 104.21.68.98 | 200 OK | 42 kB |
URL GET HTTP/2fly.linkcdn.to/v2.5/js/share/base.js?t=475899 IP104.21.68.98:443
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectlinkcdn.to Fingerprint33:70:41:27:31:11:EB:7E:FF:59:3B:55:09:64:E9:28:47:AB:3D:7B ValidityTue, 05 Mar 2024 04:28:46 GMT - Mon, 03 Jun 2024 04:28:45 GMT
File typeJavaScript source, ASCII text, with very long lines (40729) Hash8fb2193aba8ddc4b9c858a1503e3c7bc 10e5590bfb1b6d148b32cd16b7142ae7bf82b9b2 7f16fd7b64795cbc3a70cc46404970b484b7c68071c2306d8a83711967431a80
GET /v2.5/js/share/base.js?t=475899 HTTP/1.1
Host: fly.linkcdn.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: application/javascript
last-modified: Tue, 27 Jun 2023 01:42:12 GMT
etag: W/"8fb2193aba8ddc4b9c858a1503e3c7bc"
x-amz-storage-class: INTELLIGENT_TIERING
x-amz-server-side-encryption: AES256
strict-transport-security: max-age= 63072000; includeSubdomains; preload
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 235bf7a65ed49d73ef3ff61018265510.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P2
x-amz-cf-id: eVlqrUQfH9c4qKj48nPkpZYTz81-6sDgvIu1ZcgEL0vvODIV0dbREQ==
cache-control: max-age=16070400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yvg46wIkGDP85kmUa5WoqlmdKZCpQWzfHbw8TTt30uJNgyAv%2BQf4kP2wXmGDUBAylk%2B%2FLJYc%2FPAbBBfu4wMplyXjqe6YAF%2BWDzxSZ22Ju%2Fi3KcDc7iVa1PEAxKM1%2Fx3TlA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87513df0f9945689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fly.linkcdn.to/statics/links/icons-socials/spirit/1.png | 104.21.68.98 | 200 OK | 4.9 kB |
URL GET HTTP/3fly.linkcdn.to/statics/links/icons-socials/spirit/1.png IP104.21.68.98:443
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectlinkcdn.to Fingerprint33:70:41:27:31:11:EB:7E:FF:59:3B:55:09:64:E9:28:47:AB:3D:7B ValidityTue, 05 Mar 2024 04:28:46 GMT - Mon, 03 Jun 2024 04:28:45 GMT
File typePNG image data, 304 x 60, 8-bit/color RGBA, non-interlaced Hash8139cee41cfe4201b9021936e39de717 854f63367081a91a9ac08d16684d6d4f0fbf8075 fc8abacb97d2e71cafbfdd4705d6f914e189d7825edff03d7a95acaca7f98ef1
GET /statics/links/icons-socials/spirit/1.png HTTP/1.1
Host: fly.linkcdn.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: image/png
content-length: 4949
last-modified: Thu, 10 Sep 2020 13:28:40 GMT
strict-transport-security: max-age= 63072000; includeSubdomains; preload
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
access-control-allow-origin: *
etag: "8139cee41cfe4201b9021936e39de717"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sVR78wlbUQbtdEhevgt1a2nvqmyQCv_cA4SdtwScM4TcqfBOc3Y1Ag==
age: 5095
cache-control: max-age=16070400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S6yHaUtRRF0HbJ%2FfwI68GeqFXwTGldgUalWgmh5nWXuL9zDLIbAfLQX4DqV5Yo9N%2B7d23WeDsj9ttJP1WDHNEuNyIeYzJ%2FeBGe8Sw0pDTwger4HJaabRygHjcHP9dQ1VTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87513df2c86d56be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fly.linkcdn.to/statics/links/icons-socials/spirit/3.png | 104.21.68.98 | 200 OK | 7.5 kB |
URL GET HTTP/3fly.linkcdn.to/statics/links/icons-socials/spirit/3.png IP104.21.68.98:443
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectlinkcdn.to Fingerprint33:70:41:27:31:11:EB:7E:FF:59:3B:55:09:64:E9:28:47:AB:3D:7B ValidityTue, 05 Mar 2024 04:28:46 GMT - Mon, 03 Jun 2024 04:28:45 GMT
File typePNG image data, 304 x 60, 8-bit/color RGBA, non-interlaced Hash229b5dca08997b920118bf7231011cf2 69c32741e08b5010b65359c627e9d97ddebffb89 aa2a82bbec6afb10324988b2003e61d47a09708b25ac0e2ce3b64950aa2b7a35
GET /statics/links/icons-socials/spirit/3.png HTTP/1.1
Host: fly.linkcdn.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: image/png
content-length: 7538
last-modified: Thu, 10 Sep 2020 13:28:40 GMT
strict-transport-security: max-age= 63072000; includeSubdomains; preload
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
access-control-allow-origin: *
etag: "229b5dca08997b920118bf7231011cf2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iuC6Fg1steT8Wz3R4wxqXxiYpRYnf3HzggDSZ4_1t0cD2UAK8QK1xg==
age: 5095
cache-control: max-age=16070400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aT81XYprxs2NNZ6oMozn%2BzBr5SPWRIgAgtV7BEmNFNsgqbZfCiVoka%2BVbr%2FbY9yfxzRDQu51RtdX6HEFbQ2c%2FGhYy7CdsT9T1HJpVNxCeY0S7CgNOl5CRbIh%2BZkjLXvP8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87513df2c87056be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fly.linkcdn.to/statics/links/icons-socials/spirit/6.png | 104.21.68.98 | 200 OK | 8.8 kB |
URL GET HTTP/3fly.linkcdn.to/statics/links/icons-socials/spirit/6.png IP104.21.68.98:443
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectlinkcdn.to Fingerprint33:70:41:27:31:11:EB:7E:FF:59:3B:55:09:64:E9:28:47:AB:3D:7B ValidityTue, 05 Mar 2024 04:28:46 GMT - Mon, 03 Jun 2024 04:28:45 GMT
File typePNG image data, 304 x 60, 8-bit/color RGBA, non-interlaced Hashcd115f6d3642f90c79b0af1ae9a93c2f d65536edb8c54d18b476936f0b24ed0e73f4f930 b106acf20bd4b5ff01ddb53be3c6f3173682ea42b893f31a1400e09de0be9e49
GET /statics/links/icons-socials/spirit/6.png HTTP/1.1
Host: fly.linkcdn.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: image/png
content-length: 8759
last-modified: Thu, 10 Sep 2020 13:28:42 GMT
strict-transport-security: max-age= 63072000; includeSubdomains; preload
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
access-control-allow-origin: *
etag: "cd115f6d3642f90c79b0af1ae9a93c2f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MvezV4nlrMg9NFfE0pGywQYzlMKH0tfKc-8ffEPkI1wM7yIfxAJvfA==
age: 5095
cache-control: max-age=16070400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N9GqKsJCKQRRlUFk1zr5b06zjNQbq9pn%2FPHk%2BTwQyRehLwHVG5bC18VlmbrNAEZ%2BH5KT33ILWRXF5eN4vR2o%2FHCIbrYrsWHlxLVnt%2B3bEeRBx%2Bj7SImEx2bEuUQCm%2FwgbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87513df2d87356be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fly.linkcdn.to/statics/links/icons-socials/spirit/32.png | 104.21.68.98 | 200 OK | 6.7 kB |
URL GET HTTP/3fly.linkcdn.to/statics/links/icons-socials/spirit/32.png IP104.21.68.98:443
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectlinkcdn.to Fingerprint33:70:41:27:31:11:EB:7E:FF:59:3B:55:09:64:E9:28:47:AB:3D:7B ValidityTue, 05 Mar 2024 04:28:46 GMT - Mon, 03 Jun 2024 04:28:45 GMT
File typePNG image data, 304 x 60, 8-bit/color RGBA, non-interlaced Hash78fd36b0d6c14772a8b46b88817087b3 b738599182b0eb67a9c91501f121a16cebef2d40 e36eaeb05ac9e38a5e6ee0fea36ded8da7707532912f061ef6d445603fb5bfa9
GET /statics/links/icons-socials/spirit/32.png HTTP/1.1
Host: fly.linkcdn.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: image/png
content-length: 6743
last-modified: Thu, 10 Sep 2020 13:28:55 GMT
strict-transport-security: max-age= 63072000; includeSubdomains; preload
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
access-control-allow-origin: *
etag: "78fd36b0d6c14772a8b46b88817087b3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CBqFo4DB49N3C8E18qaCHg2L1wgbLJ5McpVi6rZmUWqLD3GiaZPTOw==
age: 5095
cache-control: max-age=16070400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C66SjDutFiukjbokLqjSSgSOTapPBALA9yo9Rb%2BRU%2BnzvARSYdVXPGXYYl7O32ywWMBjM2T1%2Bh98dhUybeyrPkRo7pCvpiw87qWKWzzeldxliW8mHXOY0hy8qclRxY16FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87513df2d87456be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/mavenpro/v25/7Auup_AqnyWWAxW2Wk3swUz56MS91Eww8Rf21nejpBh8CvRBOA.woff | 216.58.207.227 | 200 OK | 13 kB |
URL GET HTTP/2fonts.gstatic.com/s/mavenpro/v25/7Auup_AqnyWWAxW2Wk3swUz56MS91Eww8Rf21nejpBh8CvRBOA.woff IP216.58.207.227:443
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format, TrueType, length 12580, version 1.1 Hashc329e5a724e3c186353c4af3a0f791ed 064959ddf1f461974203b7cc61cb168c10a78287 fc9e259669117b3e2c814392798e23871961db27b54ef88731aae886f5c4f58d
GET /s/mavenpro/v25/7Auup_AqnyWWAxW2Wk3swUz56MS91Eww8Rf21nejpBh8CvRBOA.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://usps.postpathexperts.com
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 22:35:05 GMT
expires: Tue, 15 Apr 2025 22:35:05 GMT
cache-control: public, max-age=31536000
age: 19244
last-modified: Wed, 03 Nov 2021 17:05:24 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/index_files/urlConfig.json | 170.106.109.66 | 404 Not Found | 146 B |
URL GET HTTP/2usps.postpathexperts.com/index_files/urlConfig.json IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /index_files/urlConfig.json HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| fly.linkcdn.to/upload/2023042513/1682429665015.png | 104.21.68.98 | 403 Forbidden | 0 B |
URL GET HTTP/2fly.linkcdn.to/upload/2023042513/1682429665015.png IP104.21.68.98:443
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectlinkcdn.to Fingerprint33:70:41:27:31:11:EB:7E:FF:59:3B:55:09:64:E9:28:47:AB:3D:7B ValidityTue, 05 Mar 2024 04:28:46 GMT - Mon, 03 Jun 2024 04:28:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /upload/2023042513/1682429665015.png HTTP/1.1
Host: fly.linkcdn.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: application/xml
strict-transport-security: max-age= 63072000; includeSubdomains; preload
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
access-control-allow-origin: *
x-cache: Error from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4yfAp85KV43ciLHKk5_-sS_Jr_0cOc-Bm7GPbIiWPEirMVpS_joxjA==
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hHeEBrAQBzuWxf61Nrmyha9vyHhOVCZg756pA058EofUUSzmNccdOYhSimPuHcdES5xCPp1Sr%2FW7IVe8DdXn3pQr2gJaKbJmQOfW%2FYkwSq%2BLyB6aD3rd%2FOJJo73j26VCQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87513df0f9905689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fly.linkcdn.to/images/favicon.ico | 0.0.0.0 | | 0 B |
URL GET fly.linkcdn.to/images/favicon.ico IP0.0.0.0:0
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectlinkcdn.to Fingerprint33:70:41:27:31:11:EB:7E:FF:59:3B:55:09:64:E9:28:47:AB:3D:7B ValidityTue, 05 Mar 2024 04:28:46 GMT - Mon, 03 Jun 2024 04:28:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/favicon.ico HTTP/1.1
Host: fly.linkcdn.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: image/x-icon
last-modified: Mon, 15 Mar 2021 07:50:44 GMT
strict-transport-security: max-age= 63072000; includeSubdomains; preload
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
access-control-allow-origin: *
etag: W/"a4cedb09a224bfc2bb7d5c6c90d2c8fc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pomg-POeF7pvghgfNUhN2tIfIGrsv3EFF2iKlg2BFyzKIVrql9Wh3w==
age: 6479
cache-control: max-age=16070400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JUcxLePcVJ8pslC0kSsPbWppRj5fwNt6XubWQEzTC0ny4JA%2FL4r5zuC7h8JWLVt58DfPNf1bkckFpV%2BGb6yImMLcALVRlkDcP6izxP7748qvJL2YDOwaiEG3CdQ8I7sHWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87513df408e456be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.postpathexperts.com/index_files/defaultWhite.css | 170.106.109.66 | 200 OK | 3.3 kB |
URL GET HTTP/2usps.postpathexperts.com/index_files/defaultWhite.css IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeASCII text, with very long lines (3295), with no line terminators Hash0ff1a71401b2bcdb0026cdd54a23ab10 d2da99553b0e5b0624bb63b7a71067ccf5e093d8 d8d6988eb9a559d0fd8884e107c6cba9b84960febb9fdecf52025400160214fe
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /index_files/defaultWhite.css HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: text/css
last-modified: Sat, 22 Jul 2023 15:58:48 GMT
vary: Accept-Encoding
etag: W/"64bbfcb8-cdd"
expires: Tue, 16 Apr 2024 15:55:49 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| hd.1-admin.top/websocket/62af4459f38498e6cd2dc3d0451e4a26 | 43.153.107.127 | 101 | 0 B |
URL GET HTTP/1.1hd.1-admin.top/websocket/62af4459f38498e6cd2dc3d0451e4a26 IP43.153.107.127:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjecthd.1-admin.top Fingerprint9F:B2:9E:31:8A:D7:73:EA:B8:23:BF:AC:4D:C9:22:73:83:09:A3:6B ValidityWed, 03 Apr 2024 08:04:45 GMT - Tue, 02 Jul 2024 08:04:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /websocket/62af4459f38498e6cd2dc3d0451e4a26 HTTP/1.1
Host: hd.1-admin.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://usps.postpathexperts.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aH1KCybYYVpjpA60DAkLlA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101
Server: nginx
Date: Tue, 16 Apr 2024 03:55:48 GMT
Connection: upgrade
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Max-Age: 3600
Access-Control-Allow-Headers: *
Upgrade: websocket
Sec-WebSocket-Accept: 8rSTTTym1hNpDpgf4jeMtYRoVEk=
Sec-WebSocket-Extensions: permessage-deflate
|
|
| usps.postpathexperts.com/index_files/default.css | 170.106.109.66 | 200 OK | 74 kB |
URL GET HTTP/2usps.postpathexperts.com/index_files/default.css IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeASCII text, with very long lines (65088) Hash6ce0643777e3c133f4ff244f5689890f 971683839a46073b56424423d0c886517b98c505 95ab69441b0c43b4c1560aa5eb0a2b25f62b96dd4ddedd3aeb23bbe57ec616f3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /index_files/default.css HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: text/css
last-modified: Sat, 22 Jul 2023 15:58:48 GMT
vary: Accept-Encoding
etag: W/"64bbfcb8-1203d"
expires: Tue, 16 Apr 2024 15:55:49 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| usps.postpathexperts.com/index_files/share-common.css | 170.106.109.66 | 200 OK | 48 kB |
URL GET HTTP/2usps.postpathexperts.com/index_files/share-common.css IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeASCII text, with very long lines (24473) Hash58a5b83f87c9cead14212a3d42f23df2 97f552c24b11fb7c6c00d769faacbb28f0d492b5 9e448238639792210d43bde27374200528b632a1b2b84ba343b360ec5a35aa8d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /index_files/share-common.css HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: text/css
last-modified: Sat, 22 Jul 2023 15:58:48 GMT
vary: Accept-Encoding
etag: W/"64bbfcb8-bce2"
expires: Tue, 16 Apr 2024 15:55:49 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fly.linkcdn.to/images/verified_sprite.png | 104.21.68.98 | 200 OK | 3.5 kB |
URL GET HTTP/3fly.linkcdn.to/images/verified_sprite.png IP104.21.68.98:443
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectlinkcdn.to Fingerprint33:70:41:27:31:11:EB:7E:FF:59:3B:55:09:64:E9:28:47:AB:3D:7B ValidityTue, 05 Mar 2024 04:28:46 GMT - Mon, 03 Jun 2024 04:28:45 GMT
File typePNG image data, 284 x 72, 8-bit colormap, non-interlaced Hash8302f6a83bd1aec82c83d2830f210470 4399125de0cb0d08ca50698a07756105ce10347a 4d11f37fae309c522c4c45d9f75cb48f0651a09a9d278cddbd19a1a8e31aa9a3
GET /images/verified_sprite.png HTTP/1.1
Host: fly.linkcdn.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 03:55:49 GMT
content-type: image/png
content-length: 3460
last-modified: Tue, 19 Sep 2023 08:47:05 GMT
etag: "8302f6a83bd1aec82c83d2830f210470"
x-amz-server-side-encryption: AES256
strict-transport-security: max-age= 63072000; includeSubdomains; preload
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
referrer-policy: same-origin
access-control-allow-origin: *
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vPW2u8uvSXOtQEfQOGtRjcQVErEyToz592zHG6fQQGnQjD1GZKeWrg==
age: 5095
cache-control: max-age=16070400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Za%2FIRoLtoV85IptKk7E9SEk2wDHUY4ySOxl4HDY35gXMHicuJM7FOa1q%2FySRUpdhTeddR8eZCNWrE7oySwSv55P%2FUvCOPfUTSJx1pejGNi8VbFbg15L%2Fcn1OYpM4dEppPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87513df2b86b56be-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.postpathexperts.com/static/js/chasdj.js | 170.106.109.66 | 200 OK | 1.1 kB |
URL GET HTTP/2usps.postpathexperts.com/static/js/chasdj.js IP170.106.109.66:443 ASN#132203 Tencent Building, Kejizhongyi Avenue
Requested byhttps://usps.postpathexperts.com/ CertificateIssuerLet's Encrypt Subjectusps.posttrackwave.com FingerprintA8:9F:56:17:2D:9E:D6:38:6B:F7:C6:DC:7B:EA:1A:6B:BD:85:82:CE ValidityFri, 12 Apr 2024 07:31:16 GMT - Thu, 11 Jul 2024 07:31:15 GMT
File typeHTML document, ASCII text, with very long lines (1239), with no line terminators Hash521545b0f7e96f3b10f337850665452b 16240deeb0f6f95fc7b1a5e9b34a33c72def413f 0fbc52576d1edee5f3bed2b51c4c97a00fad81b7e5382ab9fa39a5ba39c03fcb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service |
GET /static/js/chasdj.js HTTP/1.1
Host: usps.postpathexperts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.postpathexperts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 16 Apr 2024 03:55:46 GMT
content-type: application/javascript
last-modified: Fri, 03 Mar 2023 17:34:29 GMT
vary: Accept-Encoding
etag: W/"64022fa5-43f"
expires: Tue, 16 Apr 2024 15:55:46 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|