dhl.0394.potabox.com/dlogin.php?page=037tracking/6275159?page=037tracking/3782222?page=007tracking/1167472?page=007tracking/4074277?page=007tracking/6308640?page=007tracking/6826918?page=007tracking/2948184?page=007tracking/4054535?page=007tracking/5235643?page=007tracking/1021469?page=007tracking/4764343?page=007tracking/8552523?page=007tracking/5272522?page=007tracking/7915183?page=007tracking/4608772?page=007tracking/8114488?page=007tracking/5217753?page=007tracking/2730862?page=007tracking/8222881?page=007tracking/2197706?page=007tracking/3003756?page=007tracking/2606599?page=007tracking/2681923?page=007tracking/6450004?page=007tracking/8008275?page=007tracking/8860281?page=007tracking/7828691?page=007tracking/3243934?page=007tracking/1754987?page=007tracking/8878931?page=007tracking/2403089?page=007tracking/1420214?page=007tracking/1114966?page=007tracking/4433967?page=007tracking/6225458?page=007tracking/7453099?page=007tracking/1746421?page=007tracking/8960925?page=007tracking/7773800?page=007tracking/5306521?page=007tracking/5240066?page=007tracking/1770545?page=007tracking/1780236?page=007tracking/8327693?page=007tracking/4856812?page=007tracking/2123741?page=007tracking/7768163?page=007tracking/3743874?page=007tracking/8989209?page=007tracking/7507176?page=007tracking/6046924?page=007tracking/8499160?page=007tracking/8903099?page=007tracking/6099650?page=007tracking/7334574?page=007tracking/5235880?page=007tracking/8634126?page=007tracking/1471432?page=007tracking/7156294?page=007tracking/3317216?page=007tracking/2589075?page=007tracking/7122488?page=007tracking/7494424?page=007tracking/2298470?page=007tracking/1920046?page=007tracking/1092484?page=007tracking/1213804?page=007tracking/2180743?page=007tracking/1807427?page=007tracking/2534592?page=007tracking/8408787?page=007tracking/3231102?page=007tracking/3832235?page=007tracking/7328106?page=007tracking/7251040?page=007tracking/5599390?page=007tracking/5670687?page=007tracking/1551012?page=007tracking/6540797?page=007tracking/2394929?page=007tracking
91.212.166.175302 Found 63 B URL User Request GET HTTP/1.1 dhl.0394.potabox.com/dlogin.php?page=037tracking/6275159?page=037tracking/3782222?page=007tracking/1167472?page=007tracking/4074277?page=007tracking/6308640?page=007tracking/6826918?page=007tracking/2948184?page=007tracking/4054535?page=007tracking/5235643?page=007tracking/1021469?page=007tracking/4764343?page=007tracking/8552523?page=007tracking/5272522?page=007tracking/7915183?page=007tracking/4608772?page=007tracking/8114488?page=007tracking/5217753?page=007tracking/2730862?page=007tracking/8222881?page=007tracking/2197706?page=007tracking/3003756?page=007tracking/2606599?page=007tracking/2681923?page=007tracking/6450004?page=007tracking/8008275?page=007tracking/8860281?page=007tracking/7828691?page=007tracking/3243934?page=007tracking/1754987?page=007tracking/8878931?page=007tracking/2403089?page=007tracking/1420214?page=007tracking/1114966?page=007tracking/4433967?page=007tracking/6225458?page=007tracking/7453099?page=007tracking/1746421?page=007tracking/8960925?page=007tracking/7773800?page=007tracking/5306521?page=007tracking/5240066?page=007tracking/1770545?page=007tracking/1780236?page=007tracking/8327693?page=007tracking/4856812?page=007tracking/2123741?page=007tracking/7768163?page=007tracking/3743874?page=007tracking/8989209?page=007tracking/7507176?page=007tracking/6046924?page=007tracking/8499160?page=007tracking/8903099?page=007tracking/6099650?page=007tracking/7334574?page=007tracking/5235880?page=007tracking/8634126?page=007tracking/1471432?page=007tracking/7156294?page=007tracking/3317216?page=007tracking/2589075?page=007tracking/7122488?page=007tracking/7494424?page=007tracking/2298470?page=007tracking/1920046?page=007tracking/1092484?page=007tracking/1213804?page=007tracking/2180743?page=007tracking/1807427?page=007tracking/2534592?page=007tracking/8408787?page=007tracking/3231102?page=007tracking/3832235?page=007tracking/7328106?page=007tracking/7251040?page=007tracking/5599390?page=007tracking/5670687?page=007tracking/1551012?page=007tracking/6540797?page=007tracking/2394929?page=007tracking
IP 91.212.166.175:443
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type HTML document, ASCII text, with no line terminators
Hash 18dcd122e496ceef6c21c20c318370f3
888af542e0ec6f7caf5a65250f0246883398a4b0
cdd44b1e4471c6b3a52136ca866dffed66020211f3c4eb651ae50ed88dea6328
GET /dlogin.php?page=037tracking/6275159?page=037tracking/3782222?page=007tracking/1167472?page=007tracking/4074277?page=007tracking/6308640?page=007tracking/6826918?page=007tracking/2948184?page=007tracking/4054535?page=007tracking/5235643?page=007tracking/1021469?page=007tracking/4764343?page=007tracking/8552523?page=007tracking/5272522?page=007tracking/7915183?page=007tracking/4608772?page=007tracking/8114488?page=007tracking/5217753?page=007tracking/2730862?page=007tracking/8222881?page=007tracking/2197706?page=007tracking/3003756?page=007tracking/2606599?page=007tracking/2681923?page=007tracking/6450004?page=007tracking/8008275?page=007tracking/8860281?page=007tracking/7828691?page=007tracking/3243934?page=007tracking/1754987?page=007tracking/8878931?page=007tracking/2403089?page=007tracking/1420214?page=007tracking/1114966?page=007tracking/4433967?page=007tracking/6225458?page=007tracking/7453099?page=007tracking/1746421?page=007tracking/8960925?page=007tracking/7773800?page=007tracking/5306521?page=007tracking/5240066?page=007tracking/1770545?page=007tracking/1780236?page=007tracking/8327693?page=007tracking/4856812?page=007tracking/2123741?page=007tracking/7768163?page=007tracking/3743874?page=007tracking/8989209?page=007tracking/7507176?page=007tracking/6046924?page=007tracking/8499160?page=007tracking/8903099?page=007tracking/6099650?page=007tracking/7334574?page=007tracking/5235880?page=007tracking/8634126?page=007tracking/1471432?page=007tracking/7156294?page=007tracking/3317216?page=007tracking/2589075?page=007tracking/7122488?page=007tracking/7494424?page=007tracking/2298470?page=007tracking/1920046?page=007tracking/1092484?page=007tracking/1213804?page=007tracking/2180743?page=007tracking/1807427?page=007tracking/2534592?page=007tracking/8408787?page=007tracking/3231102?page=007tracking/3832235?page=007tracking/7328106?page=007tracking/7251040?page=007tracking/5599390?page=007tracking/5670687?page=007tracking/1551012?page=007tracking/6540797?page=007tracking/2394929?page=007tracking HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:09 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 63
Connection: keep-alive
location: tracking/1038746?page=007
dhl.0394.potabox.com/tracking/1038746?page=007
91.212.166.175302 Found 70 B URL User Request GET HTTP/1.1 dhl.0394.potabox.com/tracking/1038746?page=007
IP 91.212.166.175:443
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type HTML document, ASCII text, with no line terminators
Hash 1184a429f067f3c2b404f52d3aeb63d8
8e080c98cdcd6f8c7da0655117add8fe5840d1eb
89b8bf6fe95aac255d0eaabe0220e5f9dc4f06a22b44ea493239a2f0e02e952c
GET /tracking/1038746?page=007 HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:09 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 70
Connection: keep-alive
location: tracking.php?id=1038746&page=007
dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
91.212.166.175200 OK 19 kB URL User Request GET HTTP/1.1 dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
IP 91.212.166.175:443
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document, Unicode text, UTF-8 text, with very long lines (1304)
Hash ea1dc1ca05432b27e60034e518d80bfe
1169094c3b817db2d4d25036acf795b3e3dca4be
9c6f6000ecf8bd59f59748d3c9ebd24b2933de8845968a9b707bd2b2298f901d
GET /tracking/tracking.php?id=1038746&page=007 HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 19351
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
dhl.0394.potabox.com/tracking/css/5.css
91.212.166.175200 OK 9.6 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/css/5.css
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type ASCII text, with very long lines (661), with CRLF line terminators
Hash 24dc3728ee00aff8a8efb930c642ace7
efc9e641255ea868b5875dc120d0f85a3cfb462c
5c0adb34716b331b834120937a8f6c9d1dd34fa9f4a1b24a6ad3b54e86b8c994
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /tracking/css/5.css HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: text/css
Content-Length: 9643
Connection: keep-alive
Last-Modified: Mon, 12 Jun 2023 17:20:08 GMT
ETag: "be26-5fdf1ee268200-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
dhl.0394.potabox.com/tracking/css/1.css
91.212.166.175200 OK 8.0 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/css/1.css
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type ASCII text, with very long lines (23076), with CRLF line terminators
Hash c773c2e44cb33bd02d04987a8017056b
af122938b5fab20abed2fd9df00af09e66294222
a116a577d744fd0c240b7f1c1b3139cc0d61b953d36fe2b61506e379e9c8bc0a
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /tracking/css/1.css HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: text/css
Content-Length: 7979
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 09:05:56 GMT
ETag: "d1f7-5edcf21490500-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
dhl.0394.potabox.com/tracking/css/2.css
91.212.166.175200 OK 9.6 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/css/2.css
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type ASCII text, with very long lines (661), with CRLF line terminators
Hash 68bb9d41de0ac82959f8f90c552e4948
fb4e7fd67a692ae70e6b3813fe7913f0c3800103
a0879b822817892ccecb11bc4c475d4bf3aad5e03a37a49eae46dfbdcf9e8fb3
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /tracking/css/2.css HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: text/css
Content-Length: 9568
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 09:05:56 GMT
ETag: "bd77-5edcf21490500-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
dhl.0394.potabox.com/tracking/css/3.css
91.212.166.175200 OK 4.3 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/css/3.css
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type ASCII text, with CRLF line terminators
Hash c54f6668454402879168d2782296d35e
dd3c72855079f3d074cfe6fd500959874650c736
d40a85d0988ad1b83645365ac9bd5ef15ed33517733d847317f86c6ea271ad32
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /tracking/css/3.css HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: text/css
Content-Length: 4339
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 09:05:56 GMT
ETag: "561e-5edcf21490500-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
dhl.0394.potabox.com/tracking/css/6.css
91.212.166.175200 OK 1.2 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/css/6.css
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type ASCII text, with CRLF line terminators
Hash 8eb7809b45d4079fbaa48175f64c7441
f865a99867d1eac58a575a518996ae2e9ca1de95
00d16054bb78393fecfbeff7eed0d44e005ebe51f034c838c1f69bdfddf40b01
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /tracking/css/6.css HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: text/css
Content-Length: 1188
Connection: keep-alive
Last-Modified: Sat, 19 Nov 2022 09:18:34 GMT
ETag: "10af-5edcf4e772e80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
dhl.0394.potabox.com/tracking/js/jquery-1.12.2.min.js
91.212.166.175200 OK 34 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/js/jquery-1.12.2.min.js
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type ASCII text, with very long lines (32029)
Hash bdc2b7efb1faf219d65edfe253a103e9
4921529fc15b8133f2fe65b3bebf53d1e9ef8579
95914789b5f3307a3718679e867d61b9d4c03f749cd2e2970570331d7d6c8ed9
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /tracking/js/jquery-1.12.2.min.js HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: application/javascript
Content-Length: 33809
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 15:27:22 GMT
ETag: "17bdc-5e8a4c3deea80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
dhl.0394.potabox.com/tracking/img/giropay.svg
91.212.166.175200 OK 2.4 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/img/giropay.svg
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type SVG Scalable Vector Graphics image
- , ASCII text, with very long lines (2396), with no line terminators
Hash 9b9e19be4be87ab5a0b96cd99754747e
edc3926e9431d362d794de7388fb4d78b156c4e8
2ef06fae9ac89777a220421e87980ef61b2a914e3eb1dec5b5c06a93531a9e38
GET /tracking/img/giropay.svg HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: image/svg+xml
Content-Length: 2396
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 15:27:22 GMT
ETag: "95c-5e8a4c3deea80"
Accept-Ranges: bytes
dhl.0394.potabox.com/tracking/img/dhl-ssl-logo.svg
91.212.166.175200 OK 4.5 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/img/dhl-ssl-logo.svg
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type SVG Scalable Vector Graphics image
- SVG XML document
- XML 1.0 document text
- SVG XML document
- XML document text
- exported SGML document, ASCII text, with very long lines (403)
Hash f0e3cb96921af370a3ce18d1a1ded9b9
1fedecbb71184bc23dfdac38ef5b27d31da7f420
dc0fa4b8eaff05882b34c64260a6f630a3398a3a77584ef2ae6297ef10353578
GET /tracking/img/dhl-ssl-logo.svg HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: image/svg+xml
Content-Length: 4470
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 15:27:22 GMT
ETag: "1176-5e8a4c3deea80"
Accept-Ranges: bytes
dhl.0394.potabox.com/tracking/img/paypal.svg
91.212.166.175200 OK 3.4 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/img/paypal.svg
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type SVG Scalable Vector Graphics image
- , ASCII text, with very long lines (3369), with no line terminators
Hash 4ac4e26be0277fab62f57835bca7ee1e
edef7e834db1d63bd5290adf1f0308522cced7e0
5e9402048b0efae8235057fc5db4276b0472c9a42c59c0b759e059ffbdafb32b
GET /tracking/img/paypal.svg HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: image/svg+xml
Content-Length: 3369
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 15:27:22 GMT
ETag: "d29-5e8a4c3deea80"
Accept-Ranges: bytes
dhl.0394.potabox.com/tracking/img/amex.svg
91.212.166.175200 OK 734 B URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/img/amex.svg
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type SVG Scalable Vector Graphics image
- , ASCII text, with very long lines (565)
Hash 1c003076f46fc215f19de22568f3b5a1
112caa9374e6c1d0f8325cdcf2bde5b073f0f1ad
b64feafef2104c77f092f2bbfa526bad76e17fb053591284984e86a28ed721a2
GET /tracking/img/amex.svg HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: image/svg+xml
Content-Length: 734
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 15:27:22 GMT
ETag: "2de-5e8a4c3deea80"
Accept-Ranges: bytes
dhl.0394.potabox.com/tracking/img/1.png
91.212.166.175200 OK 23 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/img/1.png
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x375, components 3
- data
Hash b81b4f0bce1b456b53d4055f8369f989
5062099cea65bfe1fbfe641c0f171ed13e83f5e1
dd84eab37e7850c800fa91bf7d70e1b80958a8d5527f946a4f8a70cbdba7425a
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /tracking/img/1.png HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: image/png
Content-Length: 23440
Connection: keep-alive
Last-Modified: Thu, 27 Apr 2023 10:31:50 GMT
ETag: "5b90-5fa4edd417180"
Accept-Ranges: bytes
dhl.0394.potabox.com/tracking/img/visa.svg
91.212.166.175200 OK 4.6 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/img/visa.svg
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document, ASCII text, with very long lines (1577)
Hash 09d8b96a0853e0bc8cec7c677c0da93b
a6aebdb9c339cac93762338353517b67e23f1903
a60079ce89803190740ddcf6e03eace0492b8f73ec57ffb4132b72a9736b68fe
GET /tracking/img/visa.svg HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: image/svg+xml
Content-Length: 4586
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 15:27:22 GMT
ETag: "11ea-5e8a4c3deea80"
Accept-Ranges: bytes
dhl.0394.potabox.com/tracking/img/dhl-group.svg
91.212.166.175200 OK 8.7 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/img/dhl-group.svg
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type SVG Scalable Vector Graphics image
- HTML document, ASCII text, with very long lines (724)
Hash 56ceadc8919cd52c7b19d6bfd2ed1a96
5716fe99efb512515553b02fc4ca7f858aa5c980
55de7fa1d7d120cab791bbbeadf10fe0f15783b296aceee56dc72c80896e4114
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /tracking/img/dhl-group.svg HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: image/svg+xml
Content-Length: 8715
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 15:27:22 GMT
ETag: "220b-5e8a4c3deea80"
Accept-Ranges: bytes
dhl.0394.potabox.com/tracking/img/rating-play-store.svg
91.212.166.175200 OK 904 B URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/img/rating-play-store.svg
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type SVG Scalable Vector Graphics image
- , ASCII text, with very long lines (512)
Hash 19a24c818ad0e0eab9418b77ff8e7c1c
3787691d98fd4b9f494664274a641226e33c1588
a6b35b6b7cabb9d33c2e1d6afef2d5f546a2fd3912f5f3e96495cd64218b9251
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /tracking/img/rating-play-store.svg HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: image/svg+xml
Content-Length: 904
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 15:27:22 GMT
ETag: "388-5e8a4c3deea80"
Accept-Ranges: bytes
dhl.0394.potabox.com/tracking/img/mastercard.svg
91.212.166.175200 OK 15 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/img/mastercard.svg
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document, ASCII text, with very long lines (1435)
Hash b81045f3a463d4aabc0a41fef3bc55ef
0cf6c882fac621b65b627cb39c3bbc9d669e20d3
f4551892c81a15874332cfa9639f76a41356c9ed4ca79ff682c9114aeb12563e
GET /tracking/img/mastercard.svg HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: image/svg+xml
Content-Length: 14915
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 15:27:22 GMT
ETag: "3a43-5e8a4c3deea80"
Accept-Ranges: bytes
dhl.0394.potabox.com/tracking/img/dhl-official.svg
91.212.166.175200 OK 2.0 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/img/dhl-official.svg
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type SVG Scalable Vector Graphics image
- SVG XML document
- XML 1.0 document text
- SVG XML document
- XML document text
- exported SGML document, ASCII text, with very long lines (2040), with no line terminators
Hash d5a053f0005dd58489a461f599b5a508
ba71dd77800ef3d410beb8282d790642bec8193b
aeed178a287002e32c4a7767dc24b3c732a812cdd42017835055e42db4d2eae1
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /tracking/img/dhl-official.svg HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: image/svg+xml
Content-Length: 2040
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 15:27:22 GMT
ETag: "7f8-5e8a4c3deea80"
Accept-Ranges: bytes
dhl.0394.potabox.com/tracking/img/sepapay.svg
91.212.166.175200 OK 12 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/img/sepapay.svg
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type SVG Scalable Vector Graphics image
- , ASCII text, with very long lines (12024), with no line terminators
Hash 176e69bbf00a8da5fe4921dbff1a30eb
384bbdee655135ef9a290f1365902ed6c9316969
b1764022abfe9e716542e55a05b94b851e369cd75407474874a439c61f5bd982
GET /tracking/img/sepapay.svg HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: image/svg+xml
Content-Length: 12024
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 15:27:22 GMT
ETag: "2ef8-5e8a4c3deea80"
Accept-Ranges: bytes
dhl.0394.potabox.com/tracking/img/icons-nepal.svg
91.212.166.175200 OK 26 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/img/icons-nepal.svg
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type SVG Scalable Vector Graphics image
- SVG XML document
- XML 1.0 document text
- SVG XML document
- XML document text
- exported SGML document, ASCII text, with very long lines (25753), with CRLF line terminators
Hash 953dd00cb38ca1767d1145caf35a035b
8510eeee5a546b92d2cb4413f065aa5d49d0bfdb
2691d1e5392f267802498adb1ddc58e4d8a95a5fc69de8380e0d4ae7850c2e1c
GET /tracking/img/icons-nepal.svg HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:11 GMT
Content-Type: image/svg+xml
Content-Length: 25893
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 15:27:22 GMT
ETag: "6525-5e8a4c3deea80"
Accept-Ranges: bytes
dhl.0394.potabox.com/tracking/img/sprite.svg
91.212.166.175200 OK 41 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/img/sprite.svg
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type SVG Scalable Vector Graphics image
- HTML document text
- exported SGML document, ASCII text, with very long lines (28844), with CRLF line terminators
Hash cebbc77896c22e29f2a223a9efe685e3
ab3e7dc74207c4bb1f45a712d334c3d3ef8bdce8
07908237900ec13b078abee11041a05af9a7c8930a9a0e1c7d85f2c5f8ca9425
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /tracking/img/sprite.svg HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: image/svg+xml
Content-Length: 41430
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 15:27:22 GMT
ETag: "a1d6-5e8a4c3deea80"
Accept-Ranges: bytes
dhl.0394.potabox.com/tracking/fonts/delivery-rg.woff2
91.212.166.175200 OK 34 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/fonts/delivery-rg.woff2
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type Web Open Font Format (Version 2), TrueType, length 33580, version 1.0
- data
Hash 1a05a4d2566dc2490cae801e9d885ec6
2fae1307a017a9afe73d351cf15932e51dc57887
2a2dc315ce559a3636bcbfaf666ee1ac382222798eceeef8d464c8d1e4e18de7
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /tracking/fonts/delivery-rg.woff2 HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:11 GMT
Content-Type: font/woff2
Content-Length: 33580
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 15:27:22 GMT
ETag: "832c-5e8a4c3deea80"
Accept-Ranges: bytes
dhl.0394.potabox.com/tracking/fonts/delivery-bd.woff2
91.212.166.175200 OK 34 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/fonts/delivery-bd.woff2
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type Web Open Font Format (Version 2), TrueType, length 33840, version 1.0
- data
Hash 682ea1d6962cd47974cd715fa3b80b4a
94a563948862a70f4d1be0a3aebc3a9f7aa800a6
4d5879466a996b0bc74a71e513a743e240b69199449fa59e51d32d133b99576f
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /tracking/fonts/delivery-bd.woff2 HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:11 GMT
Content-Type: font/woff2
Content-Length: 33840
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 15:27:22 GMT
ETag: "8430-5e8a4c3deea80"
Accept-Ranges: bytes
dhl.0394.potabox.com/tracking/fonts/delivery-cdblk.woff2
91.212.166.175200 OK 37 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/fonts/delivery-cdblk.woff2
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type Web Open Font Format (Version 2), TrueType, length 36652, version 1.0
- data
Hash 774e0efbb9da45395efa24c9ca4248de
04eab63ba86f912514fc0ea04b025b7f2df6145b
ccdf7761ca4d7eaa78f7135627c83d85ed7324d9e12a36258f1f21a5842c27b1
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /tracking/fonts/delivery-cdblk.woff2 HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:11 GMT
Content-Type: font/woff2
Content-Length: 36652
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 15:27:22 GMT
ETag: "8f2c-5e8a4c3deea80"
Accept-Ranges: bytes
dhl.0394.potabox.com/tracking/phplib/ajax.php?id=1038746
91.212.166.175200 OK 0 B URL POST HTTP/1.1 dhl.0394.potabox.com/tracking/phplib/ajax.php?id=1038746
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /tracking/phplib/ajax.php?id=1038746 HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 17
Origin: https://dhl.0394.potabox.com
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:11 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Set-Cookie: PHPSESSID=7499mtt9i1ql3hl2t6ul8qar67; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
dhl.0394.potabox.com/tracking/favicon.ico
91.212.166.175200 OK 7.4 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/favicon.ico
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel
- data
Hash bbba65f5c0e656750df8c649749447c8
107d1dc536e768776a10d20b362e253ec684832a
c4caa8b38ca6962dfeaa34445597ba59d691d60633f4dda63630f27738c06497
Analyzer Verdict Alert urlquery phishing Phishing - DHL
GET /tracking/favicon.ico HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Cookie: PHPSESSID=7499mtt9i1ql3hl2t6ul8qar67
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:11 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 7406
Connection: keep-alive
Last-Modified: Sat, 29 Oct 2022 02:03:10 GMT
ETag: "1cee-5ec22c6afb380"
Accept-Ranges: bytes
dhl.0394.potabox.com/tracking/img/icon-sprite.svg
91.212.166.175200 OK 116 kB URL GET HTTP/1.1 dhl.0394.potabox.com/tracking/img/icon-sprite.svg
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
File type SVG Scalable Vector Graphics image
- HTML document text
- exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Size 116 kB (116511 bytes)
Hash a2f73421956e77814bc75b9f1ef7978c
76fff6b10243ee8b0d9f2b8c281e5023bef29816
616309a0321797f048d134f8c83c2ad6a94170f166093baa5fa6fd999461772e
GET /tracking/img/icon-sprite.svg HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:10 GMT
Content-Type: image/svg+xml
Content-Length: 116511
Connection: keep-alive
Last-Modified: Wed, 14 Sep 2022 15:27:22 GMT
ETag: "1c71f-5e8a4c3deea80"
Accept-Ranges: bytes
dhl.0394.potabox.com/tracking/phplib/ajax.php?id=1038746
91.212.166.175200 OK 0 B URL POST HTTP/1.1 dhl.0394.potabox.com/tracking/phplib/ajax.php?id=1038746
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /tracking/phplib/ajax.php?id=1038746 HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 17
Origin: https://dhl.0394.potabox.com
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Cookie: PHPSESSID=7499mtt9i1ql3hl2t6ul8qar67
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:21 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
dhl.0394.potabox.com/tracking/phplib/ajax.php?id=1038746
91.212.166.175200 OK 0 B URL POST HTTP/1.1 dhl.0394.potabox.com/tracking/phplib/ajax.php?id=1038746
IP 91.212.166.175:443
Requested by https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Certificate IssuerLet's Encrypt
Subjectdhl.0394.potabox.com
Fingerprint71:9A:44:A6:46:C4:E7:7F:CF:69:C4:B8:6F:B5:D8:AD:28:C4:C8:58
ValidityMon, 04 Dec 2023 05:16:17 GMT - Sun, 03 Mar 2024 05:16:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /tracking/phplib/ajax.php?id=1038746 HTTP/1.1
Host: dhl.0394.potabox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 17
Origin: https://dhl.0394.potabox.com
DNT: 1
Connection: keep-alive
Referer: https://dhl.0394.potabox.com/tracking/tracking.php?id=1038746&page=007
Cookie: PHPSESSID=7499mtt9i1ql3hl2t6ul8qar67
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 09 Dec 2023 22:10:31 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
normandy.cdn.mozilla.net/api/v1/
35.201.103.21 598 B URL normandy.cdn.mozilla.net/api/v1/
IP 35.201.103.21:0
File type JSON data
- , ASCII text, with very long lines (598), with no line terminators
Hash 3076f9a5cb273105528b893ff7111e41
b8990c145fe71b9a2410eea41a60a712b43b82bf
69c578fb0c03a28141a975833f660f4571e7991dc28ae7f9cead37672ee2c9b3
GET /api/v1/ HTTP/1.1
Host: normandy.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 598
allow: GET, HEAD, OPTIONS
content-security-policy: form-action 'self'; block-all-mixed-content; frame-src 'none'; worker-src 'none'; object-src 'none'; base-uri 'none'; default-src 'self' https://normandy.cdn.mozilla.net/; report-uri /__cspreport__
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000
via: 1.1 google
date: Fri, 08 Dec 2023 23:43:42 GMT
cache-control: public, max-age=86400
content-type: application/json
vary: Accept, Origin
age: 80815
alt-svc: clear
X-Firefox-Spdy: h2
classify-client.services.mozilla.com/api/v1/classify_client/
34.98.75.36 64 B URL classify-client.services.mozilla.com/api/v1/classify_client/
IP 34.98.75.36:0
File type JSON data
- , ASCII text, with no line terminators
Hash 5fb01e441da5e7e7ec7048a275870237
2fa6c7c6a6ad40f71919018277629e1ff88a5b3f
3ded2c263fcdcdf698a19b2467ac7caacfd1f5f6e3aa8d6eaf7fdf137db6b56f
GET /api/v1/classify_client/ HTTP/1.1
Host: classify-client.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 09 Dec 2023 22:10:37 GMT
content-type: application/json
content-length: 64
cache-control: max-age=0, no-cache, no-store, must-revalidate
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2