| GET royalmail.processingonlineg.xin/gb/assets/09bf01f8saHp3.js |  8.208.20.91 | 200 OK | 2.2 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/09bf01f8saHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, ASCII text, with very long lines (2170), with no line terminators Hash943a7ae2960e5ca942baec0e44ec2ed7 43fead429a6560402c2693af29180077c83eb363 067ad6e34c96d82c514559b74af7facf5b469228bc7d834c20a5b0bb247dd104
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/09bf01f8saHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/assets/902d1beasaHp3.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:54 GMT
ETag: W/"87a-18fc3e0b290"
Content-Encoding: gzip
|
|
| POST royalmail.processingonlineg.xin/socket.io/?EIO=4&transport=polling&t=PQxi2Vn&sid=sY9BZqx2Bk_KswAMARlP | 8.208.20.91 | 200 OK | 2 B |
URL POST royalmail.processingonlineg.xin/socket.io/?EIO=4&transport=polling&t=PQxi2Vn&sid=sY9BZqx2Bk_KswAMARlP IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
POST /socket.io/?EIO=4&transport=polling&t=PQxi2Vn&sid=sY9BZqx2Bk_KswAMARlP HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain;charset=UTF-8
Content-Length: 2
Origin: https://royalmail.processingonlineg.xin
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:26 GMT
Content-Type: text/html
Content-Length: 2
Connection: keep-alive
Access-Control-Allow-Origin: *
cache-control: no-store
|
|
| GET royalmail.processingonlineg.xin/socket.io/?EIO=4&transport=polling&t=PQxi2XM&sid=sY9BZqx2Bk_KswAMARlP | 8.208.20.91 | 200 OK | 58 B |
URL GET royalmail.processingonlineg.xin/socket.io/?EIO=4&transport=polling&t=PQxi2XM&sid=sY9BZqx2Bk_KswAMARlP IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeASCII text, with no line terminators Hash51cad7c9a3d10d7be878b777475eb3b8 6f56e821ad2a31b0ced2ba3ebed1e6c6dd77c17d a6d15159b0d4da4d3f080b08fa6a571921e545b2c8e96ea57a0efb7684aa1083
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /socket.io/?EIO=4&transport=polling&t=PQxi2XM&sid=sY9BZqx2Bk_KswAMARlP HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:26 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 58
Connection: keep-alive
Access-Control-Allow-Origin: *
cache-control: no-store
|
|
| GET royalmail.processingonlineg.xin/gb/assets/642f0d95saHp3.js | 8.208.20.91 | 200 OK | 114 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/642f0d95saHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65480), with no line terminators Size114 kB (113644 bytes) Hash2cdb1848a1c9dca69822871482f3b484 1bb264b1f43a4a23bf65744b0cbbb7a624011ed9 70c2d64cf54fec366e706a392aacdded698c7a946ee111c8ca649b01b1af4ebf
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/642f0d95saHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://royalmail.processingonlineg.xin/gb/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:56 GMT
ETag: W/"1bbec-18fc3e0ba60"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/assets/5e001149JNH37.png | 8.208.20.91 | 200 OK | 4.8 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/5e001149JNH37.png IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typePNG image data, 156 x 54, 8-bit/color RGBA, non-interlaced Hash630d6cbb728f969dd03c954fa76632ef a1b826a207e8112facbc03ec043e5c78eb5be512 5e001149ad167758a03acb66388cc23c2aba60bbe811da33bb2ea44c59157eb7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/5e001149JNH37.png HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/assets/f43bbd78JNH37.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:26 GMT
Content-Type: image/png
Content-Length: 4803
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:54 GMT
ETag: W/"12c3-18fc3e0b290"
|
|
| GET royalmail.processingonlineg.xin/gb/assets/a8c3bcb0JNH37.woff | 8.208.20.91 | 200 OK | 36 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/a8c3bcb0JNH37.woff IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeWeb Open Font Format, TrueType, length 35501, version 0.0 Hash1c88c6742af946bc4814557eb02e415a 29de862244f36836c2f5e23d4331cd92b645eb3c a8c3bcb00ae3ee45dc394906c4e5e23e88a905234d8343ed43c9069618a2d69e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/a8c3bcb0JNH37.woff HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/assets/f43bbd78JNH37.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:26 GMT
Content-Type: font/woff
Content-Length: 35501
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:54 GMT
ETag: W/"8aad-18fc3e0b290"
|
|
| POST royalmail.processingonlineg.xin/api/MC4yMTMyNTU1MTYyOTQxOTM0OA== | 8.208.20.91 | 200 OK | 36 B |
URL POST royalmail.processingonlineg.xin/api/MC4yMTMyNTU1MTYyOTQxOTM0OA== IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeopenssl enc'd data with salted password, base64 encoded Hashcf154a481b265f531dd13a2bf44628bc 30a4010dfe1fdb2bbe6230f23329572f0af6dc7d febce327decfd5485e09ac9361571a24ebe80ee4b89873e4f6684da0bcccb66a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
POST /api/MC4yMTMyNTU1MTYyOTQxOTM0OA== HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/encrypt
Content-Length: 304
Origin: https://royalmail.processingonlineg.xin
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:28 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 36
Connection: keep-alive
Access-Control-Allow-Origin: *
ETag: W/"24-MKQBDf4f2yu+YjDyMylXLwr23H0"
|
|
| GET royalmail.processingonlineg.xin/favicon.ico | 8.208.20.91 | 200 OK | 9.7 kB |
URL GET royalmail.processingonlineg.xin/favicon.ico IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeMS Windows icon resource - 1 icon, 48x48, 32 bits/pixel Hash3b1e1a3f7ea2c1ae22748f963728cba6 28efe94d6b4cd534d13afc58d69958938ca010af ab4b5e968d24c8856868affe8055f2681577d5af57fc9ab1c24b9d8d3f745e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /favicon.ico HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 9662
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:48 GMT
ETag: W/"25be-18fc3e09b20"
|
|
| GET royalmail.processingonlineg.xin/gb/assets/f43bbd78JNH37.css | 8.208.20.91 | 200 OK | 30 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/f43bbd78JNH37.css IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeassembler source, ASCII text, with very long lines (29469) Hash7e74647e892721f626680bf23e93fce4 587e942edfbf30ace6e490e2f023cac6419f4c3c f43bbd782d538b590603c6f59983028b3841684f8e48b3a24168caa358d1b155
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/f43bbd78JNH37.css HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: text/css; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:54 GMT
ETag: W/"731e-18fc3e0b290"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/assets/317239a9saHp3.js | 8.208.20.91 | 200 OK | 2.6 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/317239a9saHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, ASCII text, with very long lines (2635), with no line terminators Hash40476af0fa43661fa61561f3c4161b58 7e4fbf34ed2d3177358f34062139b8c14705c111 7b9a24f7aa3824919440b31f54a25474023e322dd00b42b8412824d600e926a5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/317239a9saHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/assets/902d1beasaHp3.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:56 GMT
ETag: W/"a4b-18fc3e0ba60"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/assets/59b1b91dJNH37.woff | 8.208.20.91 | 200 OK | 35 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/59b1b91dJNH37.woff IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeWeb Open Font Format, TrueType, length 34566, version 0.0 Hashbe4328e7b85080e76bce1b9e3f884ed1 ad839383cc3e65f5083227eced643d378fc89a04 59b1b91d85d2c035f814c3bf2022b2b45cff6f816dfb9e918e1820d4e527d451
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/59b1b91dJNH37.woff HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/assets/f43bbd78JNH37.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: font/woff
Content-Length: 34566
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:54 GMT
ETag: W/"8706-18fc3e0b290"
|
|
| GET royalmail.processingonlineg.xin/gb/assets/902d1beasaHp3.js | 8.208.20.91 | 200 OK | 35 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/902d1beasaHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, ASCII text, with very long lines (35296), with no line terminators Hasha9b15e15cddaaae7869946213c4ddc5e 74ac2cb7f96aaf09a73148b5502e358fcaec5005 c80521b789ddf42f7182ae36b62c180f2e286918c0682ba450a22cc9e5386313
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/902d1beasaHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/assets/index-0423d1f6.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:58 GMT
ETag: W/"89e0-18fc3e0c230"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/assets/80d84ceasaHp3.js | 8.208.20.91 | 200 OK | 307 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/80d84ceasaHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size307 kB (306575 bytes) Hashdb2f8ed0f8c163360205a79399880673 07995ccf8b018295e62aa07e9b68f2de5cc1c085 e38b6d4116e68b52f810491ee9f837436ae23b286ac6694397defd1f454e3ccf
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/80d84ceasaHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/assets/e62f0ff6saHp3.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:58 GMT
ETag: W/"4ad8f-18fc3e0c230"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/assets/c88a0394saHp3.js | 8.208.20.91 | 200 OK | 117 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/c88a0394saHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (59909), with no line terminators Size117 kB (116754 bytes) Hashbacd8db414f0dc6a328d98140e601cf6 8dc7c667642480e767eec094a58ce3b149f4f0ce 8c8de7bc94cd640c69443ae0a890608fedbddf304685f8647b19d4a0957f14c8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/c88a0394saHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/assets/index-0423d1f6.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:26 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:24:00 GMT
ETag: W/"1c812-18fc3e0ca00"
Content-Encoding: gzip
|
|
| GET wss://royalmail.processingonlineg.xin/socket.io/?EIO=4&transport=websocket&sid=sY9BZqx2Bk_KswAMARlP | 8.208.20.91 | 101 Switching Protocols | 0 B |
URL GET wss://royalmail.processingonlineg.xin/socket.io/?EIO=4&transport=websocket&sid=sY9BZqx2Bk_KswAMARlP IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit |
GET /socket.io/?EIO=4&transport=websocket&sid=sY9BZqx2Bk_KswAMARlP HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://royalmail.processingonlineg.xin
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: /UnIoqPXl9SnLcM6Oi/xiA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:26 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: uWjhf2NJDtElwBBTDoI92x24i3U=
Access-Control-Allow-Origin: *
|
|
| GET royalmail.processingonlineg.xin/gb/ | 8.208.20.91 | 200 OK | 1.6 kB |
URL User Request GET royalmail.processingonlineg.xin/gb/ IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeHTML document, ASCII text, with very long lines (435) Hashb66b9c101aeb4383e46a10224010f83b 892bda4ba24f9e8b738166973a55aad12d72216f 16aa8a7b9755269c47aae83070c968451dce5694d6425099d898e4937d328be2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/ HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:54 GMT
ETag: W/"666-18fc3e0b290"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/assets/902d1beasaHp3.js | 8.208.20.91 | 200 OK | 35 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/902d1beasaHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, ASCII text, with very long lines (35296), with no line terminators Hasha9b15e15cddaaae7869946213c4ddc5e 74ac2cb7f96aaf09a73148b5502e358fcaec5005 c80521b789ddf42f7182ae36b62c180f2e286918c0682ba450a22cc9e5386313
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/902d1beasaHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://royalmail.processingonlineg.xin/gb/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:58 GMT
ETag: W/"89e0-18fc3e0c230"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/assets/09bf01f8saHp3.js | 8.208.20.91 | 200 OK | 2.2 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/09bf01f8saHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, ASCII text, with very long lines (2170), with no line terminators Hash943a7ae2960e5ca942baec0e44ec2ed7 43fead429a6560402c2693af29180077c83eb363 067ad6e34c96d82c514559b74af7facf5b469228bc7d834c20a5b0bb247dd104
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/09bf01f8saHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://royalmail.processingonlineg.xin/gb/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:54 GMT
ETag: W/"87a-18fc3e0b290"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/assets/317239a9saHp3.js | 8.208.20.91 | 200 OK | 2.6 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/317239a9saHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, ASCII text, with very long lines (2635), with no line terminators Hash40476af0fa43661fa61561f3c4161b58 7e4fbf34ed2d3177358f34062139b8c14705c111 7b9a24f7aa3824919440b31f54a25474023e322dd00b42b8412824d600e926a5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/317239a9saHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://royalmail.processingonlineg.xin/gb/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:56 GMT
ETag: W/"a4b-18fc3e0ba60"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/layout/images/21.png | 8.208.20.91 | 200 OK | 13 kB |
URL GET royalmail.processingonlineg.xin/gb/layout/images/21.png IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typePNG image data, 204 x 132, 8-bit/color RGBA, non-interlaced Hashf9083115e91b676717bfcd5a46626c31 7b3b46b90f2702b5403ecf20b116985487b1c8aa 344b29deab56ac203aa9d4c258a097020f4b207da082f1267e2b9a4280903c34
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/layout/images/21.png HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:26 GMT
Content-Type: image/png
Content-Length: 12718
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:48 GMT
ETag: W/"31ae-18fc3e09b20"
|
|
| GET royalmail.processingonlineg.xin/socket.io/?EIO=4&transport=polling&t=PQxi2Vq&sid=sY9BZqx2Bk_KswAMARlP | 8.208.20.91 | 200 OK | 32 B |
URL GET royalmail.processingonlineg.xin/socket.io/?EIO=4&transport=polling&t=PQxi2Vq&sid=sY9BZqx2Bk_KswAMARlP IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeASCII text, with no line terminators Hash82a22c50eaf8a966c024307d010df806 af9fddb34d0324e124f9e09edc69c343aabd4d3e adb22ecb54b0e190a2b36fe3618d43c6175361163e1d7d5d495339df3c42bac3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /socket.io/?EIO=4&transport=polling&t=PQxi2Vq&sid=sY9BZqx2Bk_KswAMARlP HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:26 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 32
Connection: keep-alive
Access-Control-Allow-Origin: *
cache-control: no-store
|
|
| GET royalmail.processingonlineg.xin/gb/assets/f6170fbbJNH37.css | 8.208.20.91 | 200 OK | 952 B |
URL GET royalmail.processingonlineg.xin/gb/assets/f6170fbbJNH37.css IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeASCII text, with very long lines (951) Hash32fac03c421dcba16fb4a965fc089e7a f6ac75910f20381d4478c1d302b4dd30fd1ee9ad f6170fbbee0af98d737510b5689b31d78cf4e9a152590e594175b79212210911
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/f6170fbbJNH37.css HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: text/css; charset=utf-8
Content-Length: 952
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:54 GMT
ETag: W/"3b8-18fc3e0b290"
|
|
| GET royalmail.processingonlineg.xin/gb/assets/f573ffeasaHp3.js | 8.208.20.91 | 200 OK | 53 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/f573ffeasaHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, ASCII text, with very long lines (52408) Hashc14fc9752c99e5b03cebe0ba726c9005 53a01d6779560ed73c435d709b9ac89e8ca15aaa 5d37451119d45f6a98549180c4cb6cd11e1a03f1163f2e3e0e45540eb50bac73
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/f573ffeasaHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/assets/e62f0ff6saHp3.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:24:00 GMT
ETag: W/"d0bf-18fc3e0ca00"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/assets/80d84ceasaHp3.js | 8.208.20.91 | 200 OK | 307 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/80d84ceasaHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size307 kB (306575 bytes) Hashdb2f8ed0f8c163360205a79399880673 07995ccf8b018295e62aa07e9b68f2de5cc1c085 e38b6d4116e68b52f810491ee9f837436ae23b286ac6694397defd1f454e3ccf
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/80d84ceasaHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://royalmail.processingonlineg.xin/gb/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:58 GMT
ETag: W/"4ad8f-18fc3e0c230"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/assets/f4397cedJNH37.css | 8.208.20.91 | 200 OK | 400 B |
URL GET royalmail.processingonlineg.xin/gb/assets/f4397cedJNH37.css IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeASCII text, with very long lines (399) Hash2b914e8858486eab2dcfeaa859ea8357 b782507d4e8cedba35aad5cbd1c4778115a1cb12 f4397ced557e01524d17b5d0988131cbf8b4c9cb5af39749e74e3671b8eb1917
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/f4397cedJNH37.css HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:26 GMT
Content-Type: text/css; charset=utf-8
Content-Length: 400
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:54 GMT
ETag: W/"190-18fc3e0b290"
|
|
| GET royalmail.processingonlineg.xin/gb/assets/3060f58cJNH37.woff | 8.208.20.91 | 200 OK | 33 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/3060f58cJNH37.woff IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeWeb Open Font Format, TrueType, length 33288, version 1.0 Hash7f3997d4c9607c7f6ddedd43f20a7afb b586be39a2d1819333378432939e397f3f1cec90 3060f58cd766bb2fcaab5b176a99cc2d731086d6b895137554ceac63ee31db03
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/3060f58cJNH37.woff HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/assets/f43bbd78JNH37.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:26 GMT
Content-Type: font/woff
Content-Length: 33288
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:54 GMT
ETag: W/"8208-18fc3e0b290"
|
|
| GET royalmail.processingonlineg.xin/gb/assets/e62f0ff6saHp3.js | 8.208.20.91 | 200 OK | 5.6 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/e62f0ff6saHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (5510), with no line terminators Hashc007a6d6b7c777118982499646c8f1a0 5b0c8e2f808a764347a898e08438ee1823b1e225 36666c9b22f76e6879759efebded9ef2265dcb6bd75856f69a51d18ab74a0b15
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/e62f0ff6saHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://royalmail.processingonlineg.xin/gb/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:24:00 GMT
ETag: W/"15c0-18fc3e0ca00"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/assets/index-0423d1f6.js | 8.208.20.91 | 200 OK | 504 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/index-0423d1f6.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size504 kB (504429 bytes) Hashbfedba9ba2066f098c9236cb595dbe0d b445d53e49031127e188e008e4015d953e8a7480 d58f60d110946943fb3b9b4c1ab68290e93c59e885f1743148d5f721550dfede
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/index-0423d1f6.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://royalmail.processingonlineg.xin/gb/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:24:02 GMT
ETag: W/"7b26d-18fc3e0d1d0"
Content-Encoding: gzip
|
|
| POST royalmail.processingonlineg.xin/api/MC41NTAzODcyMDI3NzQ5MDA5 | 8.208.20.91 | 200 OK | 2.2 kB |
URL POST royalmail.processingonlineg.xin/api/MC41NTAzODcyMDI3NzQ5MDA5 IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeopenssl enc'd data with salted password, base64 encoded Hashd1249199f19992ef756c1ef4c5903d15 e302bdd6d3cb3810fc5ca6b453832d7c71c2c6b8 fe26b77c544cb53c08db6b33d0dbfad871831e68d941c759fc2807d26279b031
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
POST /api/MC41NTAzODcyMDI3NzQ5MDA5 HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/encrypt
Content-Length: 296
Origin: https://royalmail.processingonlineg.xin
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
ETag: W/"890-4wK91tPLOBD8XKa0U4MtfHHCxrg"
Content-Encoding: gzip
|
|
| POST royalmail.processingonlineg.xin/socket.io/?EIO=4&transport=polling&t=PQxi2XP&sid=sY9BZqx2Bk_KswAMARlP | 8.208.20.91 | 200 OK | 2 B |
URL POST royalmail.processingonlineg.xin/socket.io/?EIO=4&transport=polling&t=PQxi2XP&sid=sY9BZqx2Bk_KswAMARlP IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
POST /socket.io/?EIO=4&transport=polling&t=PQxi2XP&sid=sY9BZqx2Bk_KswAMARlP HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain;charset=UTF-8
Content-Length: 49
Origin: https://royalmail.processingonlineg.xin
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:26 GMT
Content-Type: text/html
Content-Length: 2
Connection: keep-alive
Access-Control-Allow-Origin: *
cache-control: no-store
|
|
| GET royalmail.processingonlineg.xin/gb/assets/e62f0ff6saHp3.js | 8.208.20.91 | 200 OK | 5.6 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/e62f0ff6saHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (5510), with no line terminators Hashc007a6d6b7c777118982499646c8f1a0 5b0c8e2f808a764347a898e08438ee1823b1e225 36666c9b22f76e6879759efebded9ef2265dcb6bd75856f69a51d18ab74a0b15
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/e62f0ff6saHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/assets/index-0423d1f6.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:24:00 GMT
ETag: W/"15c0-18fc3e0ca00"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/layout/images/22.png | 8.208.20.91 | 200 OK | 6.6 kB |
URL GET royalmail.processingonlineg.xin/gb/layout/images/22.png IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typePNG image data, 164 x 100, 8-bit/color RGBA, non-interlaced Hash0eeb3d5035849437cd7d972f06bb23ac c1435ff1861d439a4b9a18facf91e26624c9e992 8e5bd63208d0cf73eb49c33fe135dbb66e5fe3d680fac9abeb4a4670a79b01a7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/layout/images/22.png HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:26 GMT
Content-Type: image/png
Content-Length: 6588
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:48 GMT
ETag: W/"19bc-18fc3e09b20"
|
|
| GET royalmail.processingonlineg.xin/socket.io/?EIO=4&transport=polling&t=PQxi2cb&sid=sY9BZqx2Bk_KswAMARlP | 8.208.20.91 | 200 OK | 98 B |
URL GET royalmail.processingonlineg.xin/socket.io/?EIO=4&transport=polling&t=PQxi2cb&sid=sY9BZqx2Bk_KswAMARlP IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeASCII text, with no line terminators Hash34a60da00c4177db76eba2cd319304bb 11c351853d1907245339a80b1f0759a444a5dd44 6fa8ba3732731342ab7c3d0a3093e9f9e71ac5334bb638c2a8e6d6f61541a41a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /socket.io/?EIO=4&transport=polling&t=PQxi2cb&sid=sY9BZqx2Bk_KswAMARlP HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:26 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 98
Connection: keep-alive
Access-Control-Allow-Origin: *
cache-control: no-store
|
|
| GET royalmail.processingonlineg.xin/gb/assets/51bcffa3JNH37.css | 8.208.20.91 | 200 OK | 365 B |
URL GET royalmail.processingonlineg.xin/gb/assets/51bcffa3JNH37.css IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeASCII text, with very long lines (364) Hash89d11ab2bdcf0a088f57cee516def4cb 58657c9dcda2654620a61e9056049afbd9bde302 51bcffa3286d969170deabafb0a22437ffdda1ba281e29c21850699149620a68
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/51bcffa3JNH37.css HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: text/css; charset=utf-8
Content-Length: 365
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:54 GMT
ETag: W/"16d-18fc3e0b290"
|
|
| GET royalmail.processingonlineg.xin/gb/assets/c27b6911saHp3.js | 8.208.20.91 | 200 OK | 1.9 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/c27b6911saHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, ASCII text, with very long lines (1913), with no line terminators Hasheceb209bb4459f4aa49d61c5cf474440 814aa89a4947896f6ec1bbc4d5faf9bfc82311c4 1d176df856736cb3455322befe6557c2a8821d31679ccdc93d948bd100015e41
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/c27b6911saHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/assets/05024a61saHp3.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:24:00 GMT
ETag: W/"779-18fc3e0ca00"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/assets/9314ec2dJNH37.png | 8.208.20.91 | 200 OK | 11 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/9314ec2dJNH37.png IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typePNG image data, 100 x 134, 8-bit/color RGBA, non-interlaced Hasha3afe6e4c1b27df19e17927fea251c42 23d494613a85fd0ce0615801c33a36012e738a83 9314ec2d98780f916a6357eaee875203f4fb04438313c111fafa9a36ba579997
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/9314ec2dJNH37.png HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/assets/f43bbd78JNH37.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:26 GMT
Content-Type: image/png
Content-Length: 10897
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:54 GMT
ETag: W/"2a91-18fc3e0b290"
|
|
| GET royalmail.processingonlineg.xin/gb/assets/05024a61saHp3.js | 8.208.20.91 | 200 OK | 6.1 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/05024a61saHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, ASCII text, with very long lines (6131), with no line terminators Hash5534170de44c7c011b95c1a23169f45b 99de73cff63c488fee9ea6ab1da5910432ca5437 71e51cc7f2bb48ac867df09b973bf13d05bcb4fbec3266cf537c935ae8c78afb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/05024a61saHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/assets/e62f0ff6saHp3.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:54 GMT
ETag: W/"17f3-18fc3e0b290"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/assets/642f0d95saHp3.js | 8.208.20.91 | 200 OK | 114 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/642f0d95saHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65480), with no line terminators Size114 kB (113644 bytes) Hash2cdb1848a1c9dca69822871482f3b484 1bb264b1f43a4a23bf65744b0cbbb7a624011ed9 70c2d64cf54fec366e706a392aacdded698c7a946ee111c8ca649b01b1af4ebf
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/642f0d95saHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/assets/902d1beasaHp3.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:26 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:56 GMT
ETag: W/"1bbec-18fc3e0ba60"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/socket.io/?EIO=4&transport=polling&t=PQxi2VI | 8.208.20.91 | 200 OK | 118 B |
URL GET royalmail.processingonlineg.xin/socket.io/?EIO=4&transport=polling&t=PQxi2VI IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeASCII text, with no line terminators Hash6cb5ffc80d9ab655b1cbb656cd57ff68 0d5c60ffe2a65d113707b9b5b8fbb85e23bdfb1d 029ce6fed5141ca12326cca3e3595844c70d7079a293f693f88324f7a9a7c510
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /socket.io/?EIO=4&transport=polling&t=PQxi2VI HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:26 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 118
Connection: keep-alive
Access-Control-Allow-Origin: *
cache-control: no-store
|
|
| GET royalmail.processingonlineg.xin/gb/assets/c88a0394saHp3.js | 8.208.20.91 | 200 OK | 117 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/c88a0394saHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (59909), with no line terminators Size117 kB (116754 bytes) Hashbacd8db414f0dc6a328d98140e601cf6 8dc7c667642480e767eec094a58ce3b149f4f0ce 8c8de7bc94cd640c69443ae0a890608fedbddf304685f8647b19d4a0957f14c8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/c88a0394saHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://royalmail.processingonlineg.xin/gb/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:26 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:24:00 GMT
ETag: W/"1c812-18fc3e0ca00"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/assets/index-0423d1f6.js | 8.208.20.91 | 200 OK | 504 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/index-0423d1f6.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size504 kB (504429 bytes) Hashbfedba9ba2066f098c9236cb595dbe0d b445d53e49031127e188e008e4015d953e8a7480 d58f60d110946943fb3b9b4c1ab68290e93c59e885f1743148d5f721550dfede
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/index-0423d1f6.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:24:02 GMT
ETag: W/"7b26d-18fc3e0d1d0"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/assets/f573ffeasaHp3.js | 8.208.20.91 | 200 OK | 53 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/f573ffeasaHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, ASCII text, with very long lines (52408) Hashc14fc9752c99e5b03cebe0ba726c9005 53a01d6779560ed73c435d709b9ac89e8ca15aaa 5d37451119d45f6a98549180c4cb6cd11e1a03f1163f2e3e0e45540eb50bac73
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/f573ffeasaHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://royalmail.processingonlineg.xin/gb/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:24:00 GMT
ETag: W/"d0bf-18fc3e0ca00"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/assets/05024a61saHp3.js | 8.208.20.91 | 200 OK | 6.1 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/05024a61saHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, ASCII text, with very long lines (6131), with no line terminators Hash5534170de44c7c011b95c1a23169f45b 99de73cff63c488fee9ea6ab1da5910432ca5437 71e51cc7f2bb48ac867df09b973bf13d05bcb4fbec3266cf537c935ae8c78afb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/05024a61saHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://royalmail.processingonlineg.xin/gb/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:54 GMT
ETag: W/"17f3-18fc3e0b290"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/assets/c27b6911saHp3.js | 8.208.20.91 | 200 OK | 1.9 kB |
URL GET royalmail.processingonlineg.xin/gb/assets/c27b6911saHp3.js IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeJavaScript source, ASCII text, with very long lines (1913), with no line terminators Hasheceb209bb4459f4aa49d61c5cf474440 814aa89a4947896f6ec1bbc4d5faf9bfc82311c4 1d176df856736cb3455322befe6557c2a8821d31679ccdc93d948bd100015e41
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/c27b6911saHp3.js HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://royalmail.processingonlineg.xin/gb/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:25 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:24:00 GMT
ETag: W/"779-18fc3e0ca00"
Content-Encoding: gzip
|
|
| GET royalmail.processingonlineg.xin/gb/assets/51e0af0eJNH37.svg | 8.208.20.91 | 200 OK | 289 B |
URL GET royalmail.processingonlineg.xin/gb/assets/51e0af0eJNH37.svg IP8.208.20.91:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://royalmail.processingonlineg.xin/gb/ CertificateIssuerLet's Encrypt Subjectroyalmail.processingonlineg.xin FingerprintA8:6C:A9:7F:7A:D9:6C:B0:C3:CD:74:47:8F:33:4E:1E:3C:FE:71:4D ValidityFri, 09 May 2025 08:06:34 GMT - Thu, 07 Aug 2025 08:06:33 GMT
File typeSVG Scalable Vector Graphics image Hash2f587210092e709726a33dc0e8dc6316 c493ff70d096fbf6d6558db8efb6f9677b1315cc 51e0af0ef371a2295c8cf115b147bc14d729106bec94d4063463f15040720614
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Darcula Phishing Kit | | PhishTank | phishing | Other |
GET /gb/assets/51e0af0eJNH37.svg HTTP/1.1
Host: royalmail.processingonlineg.xin
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://royalmail.processingonlineg.xin/gb/assets/f43bbd78JNH37.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.0
Date: Sat, 10 May 2025 19:33:26 GMT
Content-Type: image/svg+xml
Content-Length: 289
Connection: keep-alive
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Cache-Control: public, max-age=86400
Last-Modified: Wed, 29 May 2024 10:23:54 GMT
ETag: W/"121-18fc3e0b290"
|
|