Report - meinglobalespaket.com/card.php?

Report Overview

Submitted URL
meinglobalespaket.com/card.php?
IP
91.92.255.141
ASN
#394711 LIMENET
Submitted
2024-05-08 12:25:55
Access
public
Website Title
Global Shipping and Logistics Services | UPS
Final URL
meinglobalespaket.com/card.php?
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
12

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
kit.fontawesome.com	1868	2012-10-18	2019-12-16	2024-05-07	451 B	12 kB	104.18.40.68
meinglobalespaket.com	unknown	unknown	No data	No data	3.1 kB	28 kB	91.92.255.141
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-07	453 B	1.8 kB	142.250.74.106
www.ups.com	8098	1992-04-07	2012-05-22	2024-05-04	8.3 kB	870 kB	23.38.201.152
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-08	1.1 kB	33 kB	142.250.74.99
ka-f.fontawesome.com	3598	2012-10-18	2019-12-17	2024-05-07	2.5 kB	282 kB	172.67.139.119

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	meinglobalespaket.com	Sinkholed
2024-05-08	medium	meinglobalespaket.com	Sinkholed
2024-05-08	medium	meinglobalespaket.com	Sinkholed
2024-05-08	medium	meinglobalespaket.com	Sinkholed
2024-05-08	medium	meinglobalespaket.com	Sinkholed
2024-05-08	medium	meinglobalespaket.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	meinglobalespaket.com/card.php?	988 B	2024-04-19	2024-05-08
Pretty URL meinglobalespaket.com/card.php? IP 91.92.255.141 ASN #394711 LIMENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-19 19:25:42 Last Seen2024-05-08 18:44:07 Times Seen5 Hash 2efe74ecc949d49f1b41d7ea099035ea 048a5898652ff598fd31f13c781226a45fdaba37 30eb4e98c5fe97524e0e52118eb95d15d4d4998f31c246f4b0f75e830ab7869a Loading...

	kit.fontawesome.com/363d4a4d7b.js	12 kB	2024-04-19	2024-05-08
Pretty URL kit.fontawesome.com/363d4a4d7b.js IP 104.18.40.68 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-19 19:25:42 Last Seen2024-05-08 18:44:07 Times Seen8 Hash f4e15e60ee412880a1203ea60b04876e 584e95fd91f7ab67130da4912f23be697ffc3b8f 62d75a9de72fdc2f021d213b3e72f71332b6b4deb3a5a9028b0b6154fa85189c Loading...

	meinglobalespaket.com/card.php?	716 B	2024-04-19	2024-05-08
Pretty URL meinglobalespaket.com/card.php? IP 91.92.255.141 ASN #394711 LIMENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-19 19:25:42 Last Seen2024-05-08 18:44:07 Times Seen5 Hash 46875aec07f6a4acb1793e3960271f10 62c5fde700934c5e2ea3ec3dbc03f617935ccc02 cd3b82dc5eff18cf422f9f194018cf0b09729711f4eb0ca93400081b0b319ec4 Loading...

HTTP Transactions (31)

URL IP Response Size

meinglobalespaket.com/card.php?

91.92.255.141

200 OK

6.1 kB

URL User Request GET HTTP/2
meinglobalespaket.com/card.php?
IP
91.92.255.141:443
ASN
#394711 LIMENET

Certificate
IssuerLet's Encrypt
Subjectmeinglobalespaket.com
FingerprintA5:C1:48:DA:7E:F8:B3:36:C8:24:FA:AC:2E:9F:07:B6:A7:08:1A:63
ValidityTue, 07 May 2024 17:14:20 GMT - Mon, 05 Aug 2024 17:14:19 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (4155), with CRLF line terminators
Size
6.1 kB (6129 bytes)
Hash
1ec01ce9f410707d4346aa90bfa09ade
a4a3601c1da3b915b8d02f0af71ce638aa606ccb
c8fc1884ccf2df4c142399ab7d7d5b8d6b88f949335ba1b7fa77b2e61f862d6a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /card.php? HTTP/1.1
Host: meinglobalespaket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 12:25:30 GMT
content-type: text/html; charset=UTF-8
content-length: 6129
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=lh3lr5crp346r03gr70ce30khj; path=/
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PHP/7.4.33, PleskLin
X-Firefox-Spdy: h2

meinglobalespaket.com/img/packet.svg

91.92.255.141

200 OK

9.2 kB

URL GET HTTP/2
meinglobalespaket.com/img/packet.svg
IP
91.92.255.141:443
ASN
#394711 LIMENET

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerLet's Encrypt
Subjectmeinglobalespaket.com
FingerprintA5:C1:48:DA:7E:F8:B3:36:C8:24:FA:AC:2E:9F:07:B6:A7:08:1A:63
ValidityTue, 07 May 2024 17:14:20 GMT - Mon, 05 Aug 2024 17:14:19 GMT

File type
SVG Scalable Vector Graphics image
Size
9.2 kB (9203 bytes)
Hash
ed73d1a1453cde9d2499dc9229967545
caa84aa3feb7175468f0699a873e5a23668d6e35
379a369d74e27b8da523e06e640ad9a70af65d4f56f5b974b2a03b26a8cc78e6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/packet.svg HTTP/1.1
Host: meinglobalespaket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meinglobalespaket.com/card.php?
Cookie: PHPSESSID=lh3lr5crp346r03gr70ce30khj
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 12:25:30 GMT
content-type: image/svg+xml
content-length: 9203
last-modified: Tue, 15 Aug 2023 09:25:40 GMT
etag: "64db4494-23f3"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Roboto:400,700&display=swap

142.250.74.106

200 OK

1.2 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:400,700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
gzip compressed data, max compression
Size
1.2 kB (1169 bytes)
Hash
407e81ca5081b9c4cedbad3bcb2196e8
29321fa0e1305171de619157de55e0d67865b9e1
cdde553dfc9938df22c24229684380c11551a2eccc763ccb8365ebddb57d772f

HTTP Headers

GET /css?family=Roboto:400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meinglobalespaket.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 12:25:30 GMT
date: Wed, 08 May 2024 12:25:30 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

meinglobalespaket.com/assets/resources/webcontent/styles/fonts/Roboto-Light.ttf

91.92.255.141

404 Not Found

873 B

URL GET HTTP/2
meinglobalespaket.com/assets/resources/webcontent/styles/fonts/Roboto-Light.ttf
IP
91.92.255.141:443
ASN
#394711 LIMENET

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerLet's Encrypt
Subjectmeinglobalespaket.com
FingerprintA5:C1:48:DA:7E:F8:B3:36:C8:24:FA:AC:2E:9F:07:B6:A7:08:1A:63
ValidityTue, 07 May 2024 17:14:20 GMT - Mon, 05 Aug 2024 17:14:19 GMT

File type
HTML document, ASCII text
Size
873 B (873 bytes)
Hash
a943672a32297727bab01c3e76977550
3a667c4b7a457ef6c586cc581d533c128737bf53
b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Light.ttf HTTP/1.1
Host: meinglobalespaket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://meinglobalespaket.com/card.php?
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=lh3lr5crp346r03gr70ce30khj
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Wed, 08 May 2024 12:25:30 GMT
content-type: text/html
last-modified: Tue, 07 May 2024 18:13:44 GMT
etag: W/"328-617e1257abedf"
content-encoding: br
X-Firefox-Spdy: h2

meinglobalespaket.com/_onelink_/ups/sites/www.ups.com/onelink.css?ts=20211109

91.92.255.141

404 Not Found

9.1 kB

URL GET HTTP/2
meinglobalespaket.com/_onelink_/ups/sites/www.ups.com/onelink.css?ts=20211109
IP
91.92.255.141:443
ASN
#394711 LIMENET

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerLet's Encrypt
Subjectmeinglobalespaket.com
FingerprintA5:C1:48:DA:7E:F8:B3:36:C8:24:FA:AC:2E:9F:07:B6:A7:08:1A:63
ValidityTue, 07 May 2024 17:14:20 GMT - Mon, 05 Aug 2024 17:14:19 GMT

File type
HTML document, ASCII text
Size
9.1 kB (9124 bytes)
Hash
a943672a32297727bab01c3e76977550
3a667c4b7a457ef6c586cc581d533c128737bf53
b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_onelink_/ups/sites/www.ups.com/onelink.css?ts=20211109 HTTP/1.1
Host: meinglobalespaket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meinglobalespaket.com/card.php?
Cookie: PHPSESSID=lh3lr5crp346r03gr70ce30khj
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Wed, 08 May 2024 12:25:30 GMT
content-type: text/html
last-modified: Tue, 07 May 2024 18:13:44 GMT
etag: W/"328-617e1257abedf"
content-encoding: br
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Regular.woff2

23.38.201.152

200 OK

19 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Regular.woff2
IP
23.38.201.152:443
ASN
#16625 AKAMAI-AS

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 19392, version 1.0
Size
19 kB (19392 bytes)
Hash
0129881c0437c48433591878596ba145
c7311ad3ebaccbb9b33e6703df09c265b7d10ff5
c54a730394f47a040134beab422547426e7c7cd516a4d8865d2abc4871f6cbca

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Regular.woff2 HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://meinglobalespaket.com/
Origin: https://meinglobalespaket.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
last-modified: Thu, 19 Aug 2021 19:26:41 GMT
accept-ranges: bytes
content-length: 19392
content-type: font/woff2
cache-control: no-cache
expires: Wed, 08 May 2024 12:25:31 GMT
date: Wed, 08 May 2024 12:25:31 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1715171131033_388255527_548091557_29_9405_3_63_31";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Bold.woff

23.38.201.152

200 OK

27 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Bold.woff
IP
23.38.201.152:443
ASN
#16625 AKAMAI-AS

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 26564, version 1.0
Size
27 kB (26564 bytes)
Hash
849fd0ec4277f2e8ee9ebe2753a30edd
ebcff6b5216b7cfdacc058ab35023c6f9bd6f286
5fce1e38ce56a7e63a78d5811e54679dba8cd15d6455cf312f4d2bd886e42d36

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Bold.woff HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://meinglobalespaket.com/
Origin: https://meinglobalespaket.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
last-modified: Thu, 19 Aug 2021 19:26:34 GMT
accept-ranges: bytes
content-length: 26564
content-type: application/font-woff
cache-control: no-cache
date: Wed, 08 May 2024 12:25:31 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1715171131103_388255527_548091558_35_9190_3_0_31";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Bold.woff2

23.38.201.152

200 OK

20 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Bold.woff2
IP
23.38.201.152:443
ASN
#16625 AKAMAI-AS

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 19660, version 1.0
Size
20 kB (19660 bytes)
Hash
54ecb5ea0ec7edfcec9c5b2a15508cad
3b6c8aaceb8c1751b1aeda7c63c690fc36cdd945
b54b79ee86c7b666f57df9ff19d0f3483ae330b18d0aebc3dcc053d0ee8e0e02

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Bold.woff2 HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://meinglobalespaket.com/
Origin: https://meinglobalespaket.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
last-modified: Thu, 19 Aug 2021 19:26:35 GMT
accept-ranges: bytes
content-length: 19660
content-type: font/woff2
cache-control: no-cache
expires: Wed, 08 May 2024 12:25:31 GMT
date: Wed, 08 May 2024 12:25:31 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1715171131103_388255527_548091559_78_8753_3_0_31";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Bold.ttf

23.38.201.152

200 OK

170 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Bold.ttf
IP
23.38.201.152:443
ASN
#16625 AKAMAI-AS

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo
Size
170 kB (170348 bytes)
Hash
e07df86cef2e721115583d61d1fb68a6
3dd713113ff2d79b94d2df343e2e28fa8e7279cf
c9cc991deb5d27f267830a19f2301eb164d9e61ec08669c1a1a291c5620ff40a

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Bold.ttf HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://meinglobalespaket.com/
Origin: https://meinglobalespaket.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
last-modified: Thu, 19 Aug 2021 19:26:36 GMT
accept-ranges: bytes
content-length: 170348
content-type: font/ttf
cache-control: no-cache
expires: Wed, 08 May 2024 12:25:31 GMT
date: Wed, 08 May 2024 12:25:31 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1715171131103_388255527_548091560_40_9169_3_0_31";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Regular.woff

23.38.201.152

200 OK

26 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Regular.woff
IP
23.38.201.152:443
ASN
#16625 AKAMAI-AS

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 26152, version 1.0
Size
26 kB (26152 bytes)
Hash
c1de44acf1411a188b1efb3e415e66b8
2a9601e8dd8dd62422139ab415101d13542c31bf
444b94c2f00b433b4297bc32a247be7d30db791abb13d9d77bbec032c141eb46

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Regular.woff HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://meinglobalespaket.com/
Origin: https://meinglobalespaket.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
last-modified: Thu, 19 Aug 2021 19:26:39 GMT
accept-ranges: bytes
content-length: 26152
content-type: font/woff
cache-control: no-cache
expires: Wed, 08 May 2024 12:25:31 GMT
date: Wed, 08 May 2024 12:25:31 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1715171131115_388255527_548091650_25_9494_2_0_31";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Regular.ttf

23.38.201.152

200 OK

171 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Regular.ttf
IP
23.38.201.152:443
ASN
#16625 AKAMAI-AS

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob
Size
171 kB (171272 bytes)
Hash
11eabca2251325cfc5589c9c6fb57b46
096c9245b6a192d1403a82848e104a65f578a8ec
017c0be9aaa6d0359737e1fa762ad304c0e0107927faff5a6c1f415c7f5244ed

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Regular.ttf HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://meinglobalespaket.com/
Origin: https://meinglobalespaket.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
referrer-policy: same-origin, same-origin
accept-ranges: bytes
x-onelinkprocessing: content is new
x-onelinktook: init: 22 msecs, fetch: 10 msecs, parse+trans: 0 msecs, other: 0 msecs, total: 32 msecs
x-onelinkhost: gaalplpapp008f8 (CLI-TPT-UPS-WW01-18)
x-onelinkservicetype: onelink.fcgi
last-modified: Thu, 19 Aug 2021 19:26:41 GMT
content-length: 171272
content-type: font/ttf
cache-control: no-cache
expires: Wed, 08 May 2024 12:25:31 GMT
date: Wed, 08 May 2024 12:25:31 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1715171131115_388255527_548091651_28_9459_2_0_31";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/img/icp.gif

23.38.201.152

200 OK

43 B

URL GET HTTP/2
www.ups.com/img/icp.gif
IP
23.38.201.152:443
ASN
#16625 AKAMAI-AS

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
GIF image data, version 89a, 2 x 2
Size
43 B (43 bytes)
Hash
ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506

HTTP Headers

GET /img/icp.gif HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meinglobalespaket.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
pragma: no-cache
last-modified: Wed, 29 Apr 2015 19:29:01 GMT
accept-ranges: bytes
content-length: 43
content-type: image/gif
debug-ak-tls: No bypass
cache-control: no-cache
expires: Wed, 08 May 2024 12:25:31 GMT
date: Wed, 08 May 2024 12:25:31 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1715171131144_388255527_548091880_177_7909_6_0_11";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Medium.woff

23.38.201.152

200 OK

94 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Medium.woff
IP
23.38.201.152:443
ASN
#16625 AKAMAI-AS

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 94364, version 2.137
Size
94 kB (94364 bytes)
Hash
7350337b673e86f2d62ee0eb5761e1e2
eb11f6c75c34069217cc1692d00e8ac3945c8a3d
4f543ad26c42709ef00a1921f7dd1aa27a1930a354ecb353196665e43dac3706

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Medium.woff HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://meinglobalespaket.com/
Origin: https://meinglobalespaket.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
last-modified: Tue, 21 Jun 2022 17:17:41 GMT
accept-ranges: bytes
content-length: 94364
content-type: application/font-woff
cache-control: no-cache
date: Wed, 08 May 2024 12:25:31 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1715171131124_388255527_548091751_29_10854_0_0_31";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/images/ups-logo.svg

23.38.201.152

200 OK

997 B

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/images/ups-logo.svg
IP
23.38.201.152:443
ASN
#16625 AKAMAI-AS

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
997 B (997 bytes)
Hash
d0844ff2e7a14df3ea3ab44e655954df
1fc8335cbae890c2cbac90dd6ab87014583bb9cd
9f5ae3f644595dc6c5aa69ae618a108102bb62e1a38a50b89fd7af1b8ffe5eae

HTTP Headers

GET /assets/resources/webcontent/images/ups-logo.svg HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meinglobalespaket.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
accept-ranges: bytes
content-encoding: gzip
last-modified: Sun, 28 Apr 2024 05:34:04 GMT
referrer-policy: same-origin
server: Akamai Resource Optimizer
x-frame-options: SAMEORIGIN
content-length: 997
expires: Wed, 08 May 2024 12:25:31 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 08 May 2024 12:25:31 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1715171131143_388255527_548091878_38_10026_6_0_13";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/smallbusiness/images/hero/express-delivery.jpg

23.38.201.152

200 OK

26 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/smallbusiness/images/hero/express-delivery.jpg
IP
23.38.201.152:443
ASN
#16625 AKAMAI-AS

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ISO Media, AVIF Image
Size
26 kB (25882 bytes)
Hash
b74a7bfdf3baea8f51e01d5c641f9443
a453e51391f60a6de6f45a9950f37c1a68ea0864
aa836c90e325c61e938890090bb862241d82bcd1075470ef51cb1c49ab0f69c7

HTTP Headers

GET /assets/resources/webcontent/smallbusiness/images/hero/express-delivery.jpg HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meinglobalespaket.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-frame-options: SAMEORIGIN
last-modified: Wed, 06 Sep 2023 03:03:05 GMT
server: Akamai Image Manager
x-serial: 1639
x-check-cacheable: YES
content-length: 25882
content-type: image/avif
cache-control: private, no-transform, max-age=43200
expires: Thu, 09 May 2024 00:25:31 GMT
date: Wed, 08 May 2024 12:25:31 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1715171131143_388255527_548091879_95_10211_6_0_11";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/ae0fc40a90ceb2cb6785ea730fd896f2d0453d5260d

23.38.201.152

200 OK

58 kB

URL GET HTTP/2
www.ups.com/assets/ae0fc40a90ceb2cb6785ea730fd896f2d0453d5260d
IP
23.38.201.152:443
ASN
#16625 AKAMAI-AS

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (1096)
Size
58 kB (57849 bytes)
Hash
f854fe6e40d574a75426407b02b30d0a
6ba7dbc67f80b5195275fae85e0c524368c3ecc2
4349f5e1575f8d0538c81c310a4dfef7036c42f113742f8a8f3f67ed4518a5a7

HTTP Headers

GET /assets/ae0fc40a90ceb2cb6785ea730fd896f2d0453d5260d HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meinglobalespaket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
content-md5: +FT+bkDVdKdUJkB7ArMNCg==
last-modified: Tue, 23 Apr 2024 17:28:50 GMT
etag: 0x8DC63BAD7286378
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-encoding: gzip
content-length: 57849
timing-allow-origin: *
access-control-allow-methods: GET, POST, HEAD
access-control-allow-origin: *
cache-control: max-age=600
expires: Wed, 08 May 2024 12:35:31 GMT
date: Wed, 08 May 2024 12:25:31 GMT
vary: Accept-Encoding
server-timing: edge; dur=1, origin; dur=9, cdn-cache; desc=MISS, ak_p; desc="1715171131039_388255527_548091877_933_3300_6_78_41";dur=1
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/ups.styles.b112d13750ec.css

23.38.201.152

200 OK

35 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/ups.styles.b112d13750ec.css
IP
23.38.201.152:443
ASN
#16625 AKAMAI-AS

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (65439)
Size
35 kB (35424 bytes)
Hash
66d3f3f68f1bcc941b34778b0ebaafce
de0b824d74993392bf9464cce2de74a67a535b75
f451530350ec58738762de87c5b9e0b9b7c99f72f8d9baa4715dd386a8e94373

HTTP Headers

GET /assets/resources/webcontent/styles/ups.styles.b112d13750ec.css HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meinglobalespaket.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
accept-ranges: bytes
content-encoding: br
last-modified: Mon, 06 May 2024 16:37:34 GMT
referrer-policy: same-origin
server: Akamai Resource Optimizer
x-frame-options: SAMEORIGIN
content-length: 35424
expires: Wed, 08 May 2024 12:25:31 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 08 May 2024 12:25:31 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=25, origin; dur=0, ak_p; desc="1715171131143_388255527_548091881_2489_9340_6_0_21";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Medium.ttf

23.38.201.152

200 OK

172 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Medium.ttf
IP
23.38.201.152:443
ASN
#16625 AKAMAI-AS

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
TrueType Font data, 18 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med
Size
172 kB (171656 bytes)
Hash
58aef543c97bbaf6a9896e8484456d98
f6783010d5def128c4a1539333324f75701d9bab
e35252aa3dc2e84e9d7211586fee9aede2a426d3230c8b131881d985f16ff836

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Medium.ttf HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://meinglobalespaket.com/
Origin: https://meinglobalespaket.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
last-modified: Thu, 19 Aug 2021 19:26:41 GMT
accept-ranges: bytes
content-length: 171656
content-type: font/ttf
cache-control: no-cache
expires: Wed, 08 May 2024 12:25:31 GMT
date: Wed, 08 May 2024 12:25:31 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1715171131217_388255527_548092451_32_10412_0_0_31";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Medium.woff2

23.38.201.152

200 OK

20 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Medium.woff2
IP
23.38.201.152:443
ASN
#16625 AKAMAI-AS

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 19488, version 1.0
Size
20 kB (19488 bytes)
Hash
0144478d6b5350e77084c9b5673719be
a7f0512c295c2dd279914b6f8a0de3085b84a91c
a9be050cd531fa9a5f06f2e209829ea95edae28a8425908462ef55fd82979a89

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Medium.woff2 HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://meinglobalespaket.com/
Origin: https://meinglobalespaket.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
last-modified: Thu, 19 Aug 2021 19:26:37 GMT
accept-ranges: bytes
content-length: 19488
content-type: font/woff2
cache-control: no-cache
expires: Wed, 08 May 2024 12:25:31 GMT
date: Wed, 08 May 2024 12:25:31 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1715171131247_388255527_548092625_115_11832_5_0_31";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/ups.vendor.161a0d161a0d.css

23.38.201.152

200 OK

13 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/ups.vendor.161a0d161a0d.css
IP
23.38.201.152:443
ASN
#16625 AKAMAI-AS

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (65466)
Size
13 kB (12551 bytes)
Hash
3549987cec3bf08c7480db6111b7f96e
006b2c1152eadc2696382eef5a258015368eae1b
a549adbd193f091a69c8995eb7b34c5ec73ef15f098af300cb297f78254e1013

HTTP Headers

GET /assets/resources/webcontent/styles/ups.vendor.161a0d161a0d.css HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meinglobalespaket.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: default-src 'unsafe-inline' 'unsafe-eval' 'self' blob: data: ups.com *.ups.com *.doubleclick.net doubleclick.net googleads.g.doubleclick.net *.jquery.com jquery.com nuance.com *.nuance.com inq.com *.inq.com *.salesforce-sites.com salesforce-sites.com *.salesforceliveagent.com salesforceliveagent.com *.salesforce.com salesforce.com *.bootstrapcdn.com bootstrapcdn.com tiqcdn.com *.tiqcdn.com tealiumiq.com *.tealiumiq.com youtube.com *.youtube.com adsrvr.org *.adsrvr.org demandbase.com *.demandbase.com facebook.net *.facebook.net facebook.com *.facebook.com bing.com *.bing.com googletagmanager.com *.googletagmanager.com www.google.com google.com *.google.com fullstory.com *.fullstory.com qualtrics.com *.qualtrics.com ups.demdex.net demdex.net *.demdex.net omtrdc.net *.omtrdc.net  google-analytics.com *.google-analytics.com googleadservices.com *.googleadservices.com company-target.com *.company-target.com marketo.com *.marketo.com  marketo.net *.marketo.net licdn.com *.licdn.com linkedin.com *.linkedin.com blueconic.net *.blueconic.net mpsnare.iesnare.com iesnare.com *.iesnare.com virtualearth.net *.virtualearth.net iovation.com *.iovation.com cdn-apple.com *.cdn-apple.com gstatic.com *.gstatic.com googleapis.com *.googleapis.com parcelpath.com:7141 *.parcelpath.com:7141 *.ytimg.com ytimg.com everesttech.net *.everesttech.net rlcdn.com *.rlcdn.com fonts.googleapis.com fonts.gstatic.com online-metrix.net *.online-metrix.net customerfeedback.ups.com login.microsoftonline.com mktoresp.com *.mktoresp.com; frame-ancestors 'self' parcelpath.com:7141 *.parcelpath.com:7141 ups.com *.ups.com;
last-modified: Fri, 19 Apr 2024 03:33:35 GMT
referrer-policy: same-origin
server: Akamai Resource Optimizer
x-frame-options: SAMEORIGIN
content-length: 12551
expires: Wed, 08 May 2024 12:25:31 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 08 May 2024 12:25:31 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1715171131359_388255527_548093408_39_9551_1_0_21";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

142.250.74.99

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://meinglobalespaket.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 10:46:32 GMT
expires: Wed, 07 May 2025 10:46:32 GMT
cache-control: public, max-age=31536000
age: 92339
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

142.250.74.99

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://meinglobalespaket.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 06:08:19 GMT
expires: Sat, 03 May 2025 06:08:19 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 454632
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.ups.com/nuance/nuance-chat.html?IFRAME&nuance-frame-ac=0

23.38.201.152

200 OK

2.0 kB

URL GET HTTP/2
www.ups.com/nuance/nuance-chat.html?IFRAME&nuance-frame-ac=0
IP
23.38.201.152:443
ASN
#16625 AKAMAI-AS

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (4156), with CRLF, LF line terminators
Size
2.0 kB (2003 bytes)
Hash
3f3f37fbc9262c1d6585c5ecdce2ec73
4cde58fd3ecb072c198863729c1e2edd69bd695c
7d9602001add33895ed825d30b56297ebce065f09e07f99184c22899385beebd

HTTP Headers

GET /nuance/nuance-chat.html?IFRAME&nuance-frame-ac=0 HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meinglobalespaket.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache
pragma: no-cache
content-security-policy-report-only: default-src 'unsafe-inline' 'unsafe-eval' 'self' blob: data: ups.com *.ups.com *.doubleclick.net doubleclick.net googleads.g.doubleclick.net *.jquery.com jquery.com nuance.com *.nuance.com inq.com *.inq.com *.salesforce-sites.com salesforce-sites.com *.salesforceliveagent.com salesforceliveagent.com *.salesforce.com salesforce.com *.bootstrapcdn.com bootstrapcdn.com tiqcdn.com *.tiqcdn.com tealiumiq.com *.tealiumiq.com youtube.com *.youtube.com adsrvr.org *.adsrvr.org demandbase.com *.demandbase.com facebook.net *.facebook.net facebook.com *.facebook.com bing.com *.bing.com googletagmanager.com *.googletagmanager.com www.google.com google.com *.google.com fullstory.com *.fullstory.com qualtrics.com *.qualtrics.com ups.demdex.net demdex.net *.demdex.net omtrdc.net *.omtrdc.net  google-analytics.com *.google-analytics.com googleadservices.com *.googleadservices.com company-target.com *.company-target.com marketo.com *.marketo.com  marketo.net *.marketo.net licdn.com *.licdn.com linkedin.com *.linkedin.com blueconic.net *.blueconic.net mpsnare.iesnare.com iesnare.com *.iesnare.com virtualearth.net *.virtualearth.net iovation.com *.iovation.com cdn-apple.com *.cdn-apple.com gstatic.com *.gstatic.com googleapis.com *.googleapis.com parcelpath.com:7141 *.parcelpath.com:7141 *.ytimg.com ytimg.com everesttech.net *.everesttech.net rlcdn.com *.rlcdn.com fonts.googleapis.com fonts.gstatic.com online-metrix.net *.online-metrix.net customerfeedback.ups.com login.microsoftonline.com mktoresp.com *.mktoresp.com; frame-ancestors 'self' parcelpath.com:7141 *.parcelpath.com:7141 ups.com *.ups.com;
accept-ranges: bytes
x-oneagent-js-injection: true
x-ruxit-js-agent: true
content-type: text/html
x-akamai-transformed: 9l 472 0 pmb=mNONE,1mTOE,1
content-encoding: gzip
date: Wed, 08 May 2024 12:25:31 GMT
content-length: 2003
vary: Accept-Encoding
set-cookie: dtCookie=v_4_srv_6_sn_9056E1729792EBF9614102A90C417BE2_perc_94_ol_1_app-3A83374a5b8f461e02_0_rcs-3Acss_0; Path=/; Domain=.ups.com; SameSite=Strict; secure
AKA_A2=A; expires=Wed, 08-May-2024 13:25:31 GMT; path=/; domain=ups.com; secure; HttpOnly
_abck=2C05F0502ECA610EB5C6C3936D9DF792~-1~YAAQJ08kF097FFKPAQAAq4EqWAuGidhz1MmM8KFI3B/x+qBWL8iXg00/snW7OFSnMJWAgMHedbaf1jYqqURWArJNmm61RqSuevw4ykL6v6f0wp1SznSIJWOhtnSzuG68rNqr4j5d1RHoQApEgUk1C1/RnTKVyo0xeN6oH6JY+1v4Kt/u1QjPFEdtRJKImxaLy8k5BEC44oXVe7nivo2IzgHzozJ2cAV+XccJkCZ5eLY/wM84OXfSBLc2cqPlvMtZxhQErvhDv0bMV+ISCI+GpSCBKE5RQTM+XUy4B2v8/KDMMlia//paqreYCgtct85JDjw85Gyv5iwM8kFavGJBW9mWlReVWAll5rPUNNyghYjFeZ8d9xzYSiM3KpynUPrs9eAR9g==~-1~-1~-1; Domain=.ups.com; Path=/; Expires=Thu, 08 May 2025 12:25:31 GMT; Max-Age=31536000; Secure
bm_sz=3A1EE99DCEBE9998F13C07F4367B0F67~YAAQJ08kF1B7FFKPAQAAq4EqWBef4FUH9t/f7E6EzTTRhY5p+fAUjMIv06kX4LhoHtjd3RY2963xhXvbPHKMWUo+hfhwD4D8uwgfH0l5Zn4raSPCfm7mzYDtA1QduK2LN8xbmfHZLyZA7wRY6UJuh+s3z5bGLfOH8tcBLbREYuME905p4w63+dJhtBJZLGXVBVI2Fi90gjbAfjyp5B9OHMbn/1lsuDKZI/E9xaPe9pfFV1pLZS0gHqg8Si9bPS8wAIJWgU3p5a2a2Pb+cf/VzBmsOc/S8mamMIVP9Fa5jYo5Qwz2wIW94Kd4QdBg4u2S6PdgG7YAXLEg76rSuEbbA0JooAnzotsD8eRHfv3Ov5rEZl8=~4342338~3356484; Domain=.ups.com; Path=/; Expires=Wed, 08 May 2024 16:25:31 GMT; Max-Age=14400
x-akam-sw-version: 0.5.0
link: <https://www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Regular.woff2>;rel="preload";as="font";type="font/woff2";crossorigin,<https://www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Bold.woff2>;rel="preload";as="font";type="font/woff2";crossorigin,<https://www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Medium.woff2>;rel="preload";as="font";type="font/woff2";crossorigin,<https://www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Bold.woff>;rel="preload";as="font";type="font/woff";crossorigin,<https://www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Regular.woff>;rel="preload";as="font";type="font/woff";crossorigin,<https://www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Medium.woff>;rel="preload";as="font";type="font/woff";crossorigin,<https://www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Medium.ttf>;rel="preload";as="font";type="font/ttf";crossorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dtSInfo;desc="1", ak_p; desc="1715171131650_388255527_548095344_15722_11642_5_0_21";dur=1
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/webfonts/free-fa-solid-900.woff2

172.67.139.119

200 OK

156 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/webfonts/free-fa-solid-900.woff2
IP
172.67.139.119:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintB7:87:04:20:5C:0E:FA:B1:92:D1:3B:91:3F:39:7C:48:5C:CB:01:EA
ValidityFri, 03 May 2024 11:08:04 GMT - Thu, 01 Aug 2024 11:08:03 GMT

File type
Web Open Font Format (Version 2), TrueType, length 156388, version 773.1280
Size
156 kB (156388 bytes)
Hash
ae015e3286ef56a0daf8e83838a32a88
7c18577fd6c4e7d9036b244215ace3945372eefe
41dca0965bdfd255f85e7fc8e9a3dc1fe3eb810996c553d4ef2b8872737ee825

HTTP Headers

GET /releases/v6.5.2/webfonts/free-fa-solid-900.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://meinglobalespaket.com
DNT: 1
Connection: keep-alive
Referer: https://meinglobalespaket.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 08 May 2024 12:25:31 GMT
content-type: font/woff2
content-length: 156388
last-modified: Tue, 02 Apr 2024 15:51:14 GMT
etag: "ae015e3286ef56a0daf8e83838a32a88"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: fa-kit-token
access-control-max-age: 3000
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: K_KLT1o-vHzb1LMIgeQVeEGhg-5Y132HrlIpNkbHvYG2x6HggcY4ag==
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VLmmT1PM2kNxRfx%2F%2FOxr869MpO2QlUG%2BgFHoQsK8T55fKdMSxuLsUpHf933P92gGgnTHTtrNuvj82FCD1D7AT%2FvcPRJFDXe0%2FjwvGP%2BY2FpUocXJkwxvVn1%2FSAr%2BHT1bOtMu4qo2PQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88096ed5dc3fb523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-shims.min.css?token=363d4a4d7b

172.67.139.119

200 OK

14 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-shims.min.css?token=363d4a4d7b
IP
172.67.139.119:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintB7:87:04:20:5C:0E:FA:B1:92:D1:3B:91:3F:39:7C:48:5C:CB:01:EA
ValidityFri, 03 May 2024 11:08:04 GMT - Thu, 01 Aug 2024 11:08:03 GMT

File type
ASCII text, with very long lines (27377)
Size
14 kB (13833 bytes)
Hash
940b066040a876fa1dc7b2ee2d222a58
64b2aea0b4d60d879d4ff7540192a906ffc0fd92
f4e953827930889e844103c3a6771bd2e9de17d091b36378c40362271858e075

HTTP Headers

GET /releases/v6.5.2/css/free-v4-shims.min.css?token=363d4a4d7b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://meinglobalespaket.com/
Origin: https://meinglobalespaket.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 12:25:31 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"940b066040a876fa1dc7b2ee2d222a58"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _oCiz4bAR167B_iBAELK3aa6md5Blf8rfgAnaRYAH0CFPeG9jBb8-Q==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UgHQVFGXcqOpNDsAkVn3uGytJh0r1fTE3q2vw5dBPEqUziTR6CqVr5IcNg9%2FBubjlmzz%2FYBaqkHfwiHPvGQScn%2BNIYI5hWjGF%2BDAdv%2FfHNwN54BpQjX%2BMbdh%2BB%2F%2FImAHXYR4Xa4ljA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88096ed4ca57b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

meinglobalespaket.com/favicon.ico

91.92.255.141

404 Not Found

808 B

URL GET HTTP/2
meinglobalespaket.com/favicon.ico
IP
91.92.255.141:443
ASN
#394711 LIMENET

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerLet's Encrypt
Subjectmeinglobalespaket.com
FingerprintA5:C1:48:DA:7E:F8:B3:36:C8:24:FA:AC:2E:9F:07:B6:A7:08:1A:63
ValidityTue, 07 May 2024 17:14:20 GMT - Mon, 05 Aug 2024 17:14:19 GMT

File type
HTML document, ASCII text, with very long lines (866), with no line terminators
Size
808 B (808 bytes)
Hash
b45bdabc5c2538b0c4e5f352bcdfb585
5a97ce87ce8d3d86a043c1a5e68e968e20a1e146
c96189c857253fcdbe13dfcbc7f919050fae21ccb7116c3078ee3c8d8d0f12c7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: meinglobalespaket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meinglobalespaket.com/card.php?
Cookie: PHPSESSID=lh3lr5crp346r03gr70ce30khj
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Wed, 08 May 2024 12:25:31 GMT
content-type: text/html
last-modified: Tue, 07 May 2024 18:13:44 GMT
etag: W/"328-617e1257abedf"
content-encoding: br
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/css/free.min.css?token=363d4a4d7b

172.67.139.119

200 OK

104 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/css/free.min.css?token=363d4a4d7b
IP
172.67.139.119:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintB7:87:04:20:5C:0E:FA:B1:92:D1:3B:91:3F:39:7C:48:5C:CB:01:EA
ValidityFri, 03 May 2024 11:08:04 GMT - Thu, 01 Aug 2024 11:08:03 GMT

File type
ASCII text, with very long lines (65321)
Size
104 kB (103541 bytes)
Hash
7f29cd8c97789aa298af8c61623ca28b
af8109e0e5c8bb2c1c3ab44ba7b5d25900ca454a
3e9c73fa687cd4110688668977a7caa87f5a1dee0d11f03687bd4871deedf1c1

HTTP Headers

GET /releases/v6.5.2/css/free.min.css?token=363d4a4d7b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://meinglobalespaket.com/
Origin: https://meinglobalespaket.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 12:25:31 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"7f29cd8c97789aa298af8c61623ca28b"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZBPpTY1FpPHQLFOXed5TzCs-bWI4gL8FEQ13jq2eaDThw79OJzyZjw==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FBpmR99NU6ZUEnXiKTwUK8hrXKODE7cuw00WX5uOC%2Bwjts7eV8R3pV1NMlQDD6sVfHH49Qd4qce2an8owibS3msJSiPbUJUuy0o9jqKBDut99mj%2FlH%2BhVNykK1hsotHBvl7GvMkTqw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88096ed4ba53b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

kit.fontawesome.com/363d4a4d7b.js

104.18.40.68

200 OK

12 kB

URL GET HTTP/2
kit.fontawesome.com/363d4a4d7b.js
IP
104.18.40.68:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D
ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (11461)
Size
12 kB (11889 bytes)
Hash
f4e15e60ee412880a1203ea60b04876e
584e95fd91f7ab67130da4912f23be697ffc3b8f
62d75a9de72fdc2f021d213b3e72f71332b6b4deb3a5a9028b0b6154fa85189c

HTTP Headers

GET /363d4a4d7b.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://meinglobalespaket.com
DNT: 1
Connection: keep-alive
Referer: https://meinglobalespaket.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 12:25:31 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, stale-while-revalidate=30
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F81qQoQdF3XANqRGW0Gh
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 88096ed009337129-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

meinglobalespaket.com/_onelink_/ups/sites/www.ups.com/en2engb/onelink.css?ts=20210305

91.92.255.141

404 Not Found

808 B

URL GET HTTP/2
meinglobalespaket.com/_onelink_/ups/sites/www.ups.com/en2engb/onelink.css?ts=20210305
IP
91.92.255.141:443
ASN
#394711 LIMENET

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerLet's Encrypt
Subjectmeinglobalespaket.com
FingerprintA5:C1:48:DA:7E:F8:B3:36:C8:24:FA:AC:2E:9F:07:B6:A7:08:1A:63
ValidityTue, 07 May 2024 17:14:20 GMT - Mon, 05 Aug 2024 17:14:19 GMT

File type
HTML document, ASCII text, with very long lines (866), with no line terminators
Size
808 B (808 bytes)
Hash
b45bdabc5c2538b0c4e5f352bcdfb585
5a97ce87ce8d3d86a043c1a5e68e968e20a1e146
c96189c857253fcdbe13dfcbc7f919050fae21ccb7116c3078ee3c8d8d0f12c7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_onelink_/ups/sites/www.ups.com/en2engb/onelink.css?ts=20210305 HTTP/1.1
Host: meinglobalespaket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://meinglobalespaket.com/card.php?
Cookie: PHPSESSID=lh3lr5crp346r03gr70ce30khj
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Wed, 08 May 2024 12:25:30 GMT
content-type: text/html
last-modified: Tue, 07 May 2024 18:13:44 GMT
etag: W/"328-617e1257abedf"
content-encoding: br
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-font-face.min.css?token=363d4a4d7b

172.67.139.119

200 OK

1.8 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-font-face.min.css?token=363d4a4d7b
IP
172.67.139.119:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintB7:87:04:20:5C:0E:FA:B1:92:D1:3B:91:3F:39:7C:48:5C:CB:01:EA
ValidityFri, 03 May 2024 11:08:04 GMT - Thu, 01 Aug 2024 11:08:03 GMT

File type
ASCII text, with very long lines (1803), with no line terminators
Size
1.8 kB (1775 bytes)
Hash
36f549800bc029aaadd0d7ac3d1d0f54
45bfcbb57c0155a2f22a47117deae6dc87706d4a
4048a832df1b9ac88058b1964ab9c45300daf6c10b0a02d697a29d729a81ea30

HTTP Headers

GET /releases/v6.5.2/css/free-v4-font-face.min.css?token=363d4a4d7b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://meinglobalespaket.com/
Origin: https://meinglobalespaket.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 12:25:31 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"9c9f596493867f0e7ef5f9fe99103fce"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: r2joU6OYlcapdO8qR9hP8bUTH9fFM6sEQJ5KTvFiv76GVd1wZoBNEQ==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cbVK2gminaixTZJi9eh452YO99lF9BwzjDkQpLRFR7zhmQCfJm9I8CN2sO0ByzV861Z2DeeJgpsPbOcWiIcZ6CGt4qh%2B%2Feq6lNy%2BF2ZeqGCcJv%2BdNU7qdUoOU3aytVbaHcdQ33NVyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88096ed4ca5db523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/css/free-v5-font-face.min.css?token=363d4a4d7b

172.67.139.119

200 OK

823 B

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/css/free-v5-font-face.min.css?token=363d4a4d7b
IP
172.67.139.119:443
ASN
#13335 CLOUDFLARENET

Requested by
https://meinglobalespaket.com/card.php?
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintB7:87:04:20:5C:0E:FA:B1:92:D1:3B:91:3F:39:7C:48:5C:CB:01:EA
ValidityFri, 03 May 2024 11:08:04 GMT - Thu, 01 Aug 2024 11:08:03 GMT

File type
ASCII text, with very long lines (845), with no line terminators
Size
823 B (823 bytes)
Hash
d8a0274a5097af25642c9310d6d4bb3e
61512d739400e60d9360863446eaf008395859fb
84f5ae05668bcfe4bd7447d5035e909686423e998d8dfc2c96789875ef78cdd3

HTTP Headers

GET /releases/v6.5.2/css/free-v5-font-face.min.css?token=363d4a4d7b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://meinglobalespaket.com/
Origin: https://meinglobalespaket.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 12:25:31 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"a3d53e21a02e37af6cbc00ac63b3cc1e"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9vAAftQnEREOOKJ9hQH0MLPajhc2q8lPruf2_eyQL2tSfz7xBBB-zA==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qXh8aJChSVkWgmGoyFcdZylYoLMAKVGOHrcIbdKgIJg0DlpOhCMQm40Ux8Chowrm0qb0RYpsFFSPqsyJ2m5AN2dbtAqRhJn7Iz1iUU7Y41AF7BH9Df4hWCsqaAffxlWRm44ENKNifA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88096ed4ca61b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (31)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by