| usps-posta.top/admin/config.js |  47.236.2.231 | 404 Not Found | 146 B |
URL GET HTTP/2usps-posta.top/admin/config.js IP47.236.2.231:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://usps-posta.top/admin/ CertificateIssuerLet's Encrypt Subjectusps-posta.top Fingerprint8D:BF:3B:F3:B0:D5:64:D9:45:EC:7C:46:01:BE:69:58:28:DC:2F:53 ValidityFri, 05 Apr 2024 13:24:53 GMT - Thu, 04 Jul 2024 13:24:52 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /admin/config.js HTTP/1.1
Host: usps-posta.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps-posta.top/admin/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 10:50:38 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| usps-posta.top/assets/index.js | 47.236.2.231 | 200 OK | 85 kB |
URL GET HTTP/2usps-posta.top/assets/index.js IP47.236.2.231:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://usps-posta.top/admin/ CertificateIssuerLet's Encrypt Subjectusps-posta.top Fingerprint8D:BF:3B:F3:B0:D5:64:D9:45:EC:7C:46:01:BE:69:58:28:DC:2F:53 ValidityFri, 05 Apr 2024 13:24:53 GMT - Thu, 04 Jul 2024 13:24:52 GMT
File typegzip compressed data, from Unix Hashb2ed62ab6fb10cc346c1399131f4589a 81d0ed895ed8e2a9b323f761b686e4f13673e010 092823d38c093d9663f61ba976db51cb607a31979cf20b00195a817ce3b84b02
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /assets/index.js HTTP/1.1
Host: usps-posta.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps-posta.top/admin/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 10:50:38 GMT
content-type: application/javascript
last-modified: Sun, 05 Nov 2023 13:45:42 GMT
vary: Accept-Encoding
etag: W/"65479c86-301c0"
expires: Fri, 19 Apr 2024 22:50:38 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fast.fonts.net/t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0 |  104.16.41.28 | 200 OK | 0 B |
URL GET HTTP/2fast.fonts.net/t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0 IP104.16.41.28:443
Requested byhttps://usps-posta.top/admin/ CertificateIssuerGoogle Trust Services LLC Subjectfonts.net Fingerprint40:BB:71:39:9B:62:CA:2E:30:5E:D3:A9:33:D6:69:83:D8:1F:D0:57 ValidityThu, 04 Apr 2024 03:21:50 GMT - Wed, 03 Jul 2024 03:21:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0 HTTP/1.1
Host: fast.fonts.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps-posta.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:50:39 GMT
content-type: text/css; charset=utf-8
content-length: 0
x-amz-id-2: ki65sQC1HlYAvAwzpIlg68BKJDoZiZ/BwbN/hDH5RUfm7vMSBZqfat1D29ePjiEs20YJy+049dY=
x-amz-request-id: 4MWDSXH8MPCQQMJM
last-modified: Tue, 23 Mar 2021 12:59:23 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
cache-control: public, max-age=0, s-maxage=604800
x-amz-meta-mtime: 1519217722
x-amz-version-id: null
cf-cache-status: HIT
age: 57055
accept-ranges: bytes
set-cookie: __cf_bm=_G_0Ik0AFKBSitefO7B1wDCbK1HEhDGkyNOjoIcgGhI-1713523839-1.0.1.1-67Czt4EsexLIgQCzNhzuoNW7qETkyj4IyMxEIMpMgbtAYyBEjPTyReR95MVu6N8w2LQQ2xrGxCWnvCMqvMFsNw; path=/; expires=Fri, 19-Apr-24 11:20:39 GMT; domain=.fonts.net; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c55badcbe9307-CPH
X-Firefox-Spdy: h2
|
|
| usps-posta.top/assets/d5af76d8-a90b-4527-b3a3-182207cc3250.woff | 47.236.2.231 | 200 OK | 59 kB |
URL GET HTTP/2usps-posta.top/assets/d5af76d8-a90b-4527-b3a3-182207cc3250.woff IP47.236.2.231:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://usps-posta.top/admin/ CertificateIssuerLet's Encrypt Subjectusps-posta.top Fingerprint8D:BF:3B:F3:B0:D5:64:D9:45:EC:7C:46:01:BE:69:58:28:DC:2F:53 ValidityFri, 05 Apr 2024 13:24:53 GMT - Thu, 04 Jul 2024 13:24:52 GMT
File typeWeb Open Font Format, TrueType, length 58690, version 1.0 Hasha6e2d3921c9ea0fd81897d9ae7a33ba4 bc31969f2fb1926a15cd678b3e573c37a44e5421 f2e2ef638dd9aac863f0f6027ceb784cd4c5a14a676bed909c8f2ac4b088d510
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /assets/d5af76d8-a90b-4527-b3a3-182207cc3250.woff HTTP/1.1
Host: usps-posta.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://usps-posta.top/assets/index.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 10:50:39 GMT
content-type: font/woff
content-length: 58690
last-modified: Sun, 05 Nov 2023 13:45:42 GMT
etag: "65479c86-e542"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| usps-posta.top/favicon.ico | 47.236.2.231 | 200 OK | 32 kB |
URL GET HTTP/2usps-posta.top/favicon.ico IP47.236.2.231:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://usps-posta.top/admin/ CertificateIssuerLet's Encrypt Subjectusps-posta.top Fingerprint8D:BF:3B:F3:B0:D5:64:D9:45:EC:7C:46:01:BE:69:58:28:DC:2F:53 ValidityFri, 05 Apr 2024 13:24:53 GMT - Thu, 04 Jul 2024 13:24:52 GMT
File typeMS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hash3f0f72ed57a54b97cda500bcf0545efb 2f252619c18e729d98e16b96d37cd7cd567b38eb 67fbe8ef9020e5c776aadf6801a1fef8dc563e2e4dc9ddc740af8010c0c38943
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: usps-posta.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps-posta.top/admin/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 10:50:39 GMT
content-type: image/x-icon
content-length: 32038
last-modified: Sat, 10 Jun 2023 01:02:42 GMT
etag: "6483cbb2-7d26"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| | 47.236.2.231 | 200 OK | 6.3 kB |
URL User Request GET HTTP/2IP47.236.2.231:443 ASN#45102 Alibaba US Technology Co., Ltd.
CertificateIssuerLet's Encrypt Subjectusps-posta.top Fingerprint8D:BF:3B:F3:B0:D5:64:D9:45:EC:7C:46:01:BE:69:58:28:DC:2F:53 ValidityFri, 05 Apr 2024 13:24:53 GMT - Thu, 04 Jul 2024 13:24:52 GMT
File typegzip compressed data, from Unix Hash91e402c829da03118ea4256e559eb3d1 ab3573c41db618022088caf9c950bddd21871a66 5c3a0625f660729ab7dedc7e92c28132df30227349ee611eecc5b99e4807c3f2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /admin/ HTTP/1.1
Host: usps-posta.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 10:50:38 GMT
content-type: text/html
last-modified: Sat, 04 Nov 2023 18:58:02 GMT
vary: Accept-Encoding
etag: W/"6546943a-892"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| usps-posta.top/assets/index.css | 47.236.2.231 | 200 OK | 310 kB |
URL GET HTTP/2usps-posta.top/assets/index.css IP47.236.2.231:443 ASN#45102 Alibaba US Technology Co., Ltd.
Requested byhttps://usps-posta.top/admin/ CertificateIssuerLet's Encrypt Subjectusps-posta.top Fingerprint8D:BF:3B:F3:B0:D5:64:D9:45:EC:7C:46:01:BE:69:58:28:DC:2F:53 ValidityFri, 05 Apr 2024 13:24:53 GMT - Thu, 04 Jul 2024 13:24:52 GMT
File typeASCII text, with very long lines (65275) Size310 kB (310286 bytes) Hash3b8fd6f9a4f47abcd5587844dd3aea48 9dfecc12393c9c87c76059a8506f8e073e07cf3d 5a0d71ead8b996efb89a6ec99e93d2a79ed647b890838bbaf890dc238ab87303
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | United States Postal Service | | PhishTank | phishing | Other | | Quad9 DNS | malicious | Sinkholed |
GET /assets/index.css HTTP/1.1
Host: usps-posta.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps-posta.top/admin/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 10:50:38 GMT
content-type: text/css
last-modified: Sun, 05 Nov 2023 13:45:42 GMT
vary: Accept-Encoding
etag: W/"65479c86-4bc0e"
expires: Fri, 19 Apr 2024 22:50:38 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|