Report - usps.ambition.com/

Report Overview

Submitted URL
usps.ambition.com/
IP
54.163.112.191
ASN
#14618 AMAZON-AES
Submitted
2024-03-28 16:25:50
Access
public
Website Title
Login | Salesforce
Final URL
usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
Tags
salesforce phishing
urlquery detections
Phishing - Salesforce

Detections

urlquery
15
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
usps-sites.secure.force.com	174055	1991-05-20	2019-07-08	2022-11-29	564 B	876 B	52.61.129.233
usps.my.salesforce-sites.com	unknown	2019-03-26	2023-07-12	2023-11-15	13 kB	545 kB	52.61.128.128
usps.ambition.com	unknown	unknown	No data	No data	2.0 kB	2.8 kB	54.86.123.84
usps.my.salesforce.com	657911	unknown	No data	No data	10 kB	101 kB	52.61.128.41
login.salesforce.com	5976	1998-12-02	2012-08-28	2024-03-21	1.2 kB	11 kB	85.222.154.67
na219.salesforce.com	unknown	1998-12-02	2022-02-18	2024-03-27	658 B	15 kB	52.61.130.66

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (24)

	URL	Size	First Seen	Last Seen
	usps.my.salesforce-sites.com/publicgenericpages/static/111213/js/functions.js	36 kB	2023-03-07	2024-03-28
Pretty URL usps.my.salesforce-sites.com/publicgenericpages/static/111213/js/functions.js IP 52.61.128.128 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10:31 Last Seen2024-03-28 17:25:59 Times Seen70 Hash 0453d9ce77f9a9b275087e0287439062 eebfa0b021d4cd143caa8b3487fedcdb5a37663a 10a45d9c8050a745d63519ba2782511020978010f7f980c14c4db261ae17a506 Loading...

	usps.my.salesforce-sites.com/publicgenericpages/static/111213/js/picklist4.js	9.9 kB	2023-03-07	2024-04-23
Pretty URL usps.my.salesforce-sites.com/publicgenericpages/static/111213/js/picklist4.js IP 52.61.128.128 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10:31 Last Seen2024-04-23 04:27:20 Times Seen339 Hash 590976eadadecc7d91693e3b45a1ed94 fcef2e5c621673e8ba015c2bbd861781f259a8b2 7da058a4e1bd6368be16eb513d108c61e9016968c859b28bc24ac2629e401773 Loading...

	usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner	136 B	2024-03-28	2024-03-28
Pretty URL usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner IP 52.61.128.128 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML true Observations First Seen2024-03-28 17:25:59 Last Seen2024-03-28 17:25:59 Times Seen1 Hash d22a672c91845a8b84c9869f8226d641 9ff2120efc34533070ae2805c9d32ec6191f8fd5 42ed11f360d1e1e0fae9f1c425a37877db8de08eaeed83f0e28779e7adf1f4ec Loading...

	usps.my.salesforce.com/jslibrary/SfdcSessionBase208.js	16 kB	2023-09-22	2024-04-28
Pretty URL usps.my.salesforce.com/jslibrary/SfdcSessionBase208.js IP 52.61.128.41 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-22 22:31:15 Last Seen2024-04-28 10:36:25 Times Seen144 Hash eede1b37a00f77c1143e618cf980b866 95388a2520cd89b8c9a837a336688520dee7ef45 680ee03715036c635c33fdd03f1ba69538ed2af3f569e2cc901c937653f90f06 Loading...

	usps.my.salesforce.com/jslibrary/LoginHint208.js	20 kB	2024-02-12	2024-04-28
Pretty URL usps.my.salesforce.com/jslibrary/LoginHint208.js IP 52.61.128.41 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-12 10:33:33 Last Seen2024-04-28 10:36:25 Times Seen146 Hash f1b06a808e5910093e3a8ecd1c70d695 d6ea29b885998bd24811333f6ceaffce42400f7d b4e09e04175d3fc81542f40d4d227db48c6199f93ca2737a1ce91e9e57865dff Loading...

	usps.my.salesforce-sites.com/publicgenericpages/jslibrary/jslabels/1711052978000/en_US.js	230 kB	2024-03-28	2024-03-28
Pretty URL usps.my.salesforce-sites.com/publicgenericpages/jslibrary/jslabels/1711052978000/en_US.js IP 52.61.128.128 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-28 17:25:59 Last Seen2024-03-28 17:25:59 Times Seen2 Hash 0dfbd609d16ed1c0a3336c03595f4dcc 0e843db69654e590b6caa9bea028ceb26714f2af c7b923b079af33698f14930c0f65621c5f737ec7ab724356913a8bd2022c3345 Loading...

	usps.my.salesforce-sites.com/publicgenericpages/jslibrary/1699262264248/sfdc/main.js	879 kB	2024-02-15	2024-04-18
Pretty URL usps.my.salesforce-sites.com/publicgenericpages/jslibrary/1699262264248/sfdc/main.js IP 52.61.128.128 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-15 23:57:52 Last Seen2024-04-18 01:53:28 Times Seen16 Hash d88654a84c00fbd35fd1e507d20ae5f1 5d927f69ed7e43f9a967878b4aa5406460c52e57 c38ea70269da2e778689e1e1ec7b5e51bb46b3502842723859e93cf7366d6b03 Loading...

	usps.my.salesforce.com/marketing/survey/survey1/1386	4.8 kB	2023-03-07	2024-04-28
Pretty URL usps.my.salesforce.com/marketing/survey/survey1/1386 IP 52.61.128.41 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:30:28 Last Seen2024-04-28 08:07:12 Times Seen266 Hash 1e4e0e22a46635f71fc0e4ee5fb09186 50afcd33af5cfd2cca13abf882c7e2c63f95506c 42a531dce996297d2a03cb33044b36408821072ad24b9477a237bd8a3ed6ebf7 Loading...

	login.salesforce.com/jslibrary/SessionServer212.js	26 kB	2024-02-12	2024-04-18
Pretty URL login.salesforce.com/jslibrary/SessionServer212.js IP 85.222.154.67 ASN #14340 SALESFORCE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-12 10:33:33 Last Seen2024-04-18 00:06:01 Times Seen78 Hash 1eeb5a37c4cb173c3ba3d4728fed7a6b 4bf326b4baddf45d2b0309e662fe9b8e847502b8 3e800dbd0f5637eb67e1f56cbfdd4fbaff8ca757d03cc54a542e83423ff17d4f Loading...

	usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner	145 B	2023-03-07	2024-04-25
Pretty URL usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner IP 52.61.128.128 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:10:30 Last Seen2024-04-25 20:08:24 Times Seen370 Hash e50fb743eb26144b5e5a7df134bea825 4a11247c94871513b271f2833b0456d68bfb1a8b fa55c0a5628bf7c35cad5b6e2977dc15b39cbf2fd1e9bae7f0924bb938edcc3c Loading...

	usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner	5.9 kB	2024-03-28	2024-03-28
Pretty URL usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner IP 52.61.128.128 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML true Observations First Seen2024-03-28 17:25:59 Last Seen2024-03-28 17:25:59 Times Seen1 Hash 077d376a991ecbd40e5f5c8eac81cf9b a15a9346ef01b6d12af20fc08e00272e07747ea4 32f7085703d3a40d2af90dadfe020c9e566a5f9a1d87f664c5f812045ea13a7b Loading...

	usps.my.salesforce.com/jslibrary/baselogin.js	640 B	2024-02-05	2024-04-28
Pretty URL usps.my.salesforce.com/jslibrary/baselogin.js IP 52.61.128.41 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-05 11:09:42 Last Seen2024-04-28 01:21:11 Times Seen77 Hash 878e061042d5aaf284f315335c7124ce b30b4d44222bba76d949972a5bd2c52c811fd361 cd422ba76dcfff4790157b32c98a02fb98f1220b4a7befa870ef52fb4754a564 Loading...

	unknown	11 B	2023-03-08	2024-04-28
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-03-08 02:17:24 Last Seen2024-04-28 10:36:22 Times Seen313 Hash 4b80dcd0c4d0cacaf9e50f8afc01d5a5 b51772b16ae628996bf9bff731d7ba48eaee7652 12c24a63d2c9e7daddf3e42c629b68ad0fc0ad83d292f04f2c3d41d34e294b1a Loading...

	usps.my.salesforce.com/marketing/survey/survey4/1386	18 kB	2023-03-07	2024-04-28
Pretty URL usps.my.salesforce.com/marketing/survey/survey4/1386 IP 52.61.128.41 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 16:30:28 Last Seen2024-04-28 08:07:12 Times Seen281 Hash 86ea7330491091c384598149b414f1de e2c56cf951d20f12e58209aed48a07359294563b 6e254c656a029b64c10f320cb325858bc578c94d7a6ec1e5703ba03abb6738c0 Loading...

	usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC	249 B	2023-03-07	2024-04-28
Pretty URL usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC IP 52.61.128.41 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 14:55:54 Last Seen2024-04-28 10:36:22 Times Seen252 Hash b439fd40339842f031c9f54e3aba7574 ac9d6b66256117320dcbda64c500613fb1a9a9cb 575e02abf95b2eac6488e56b661bd126140df98f96381e4156eacd97c76354a2 Loading...

	usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC	566 B	2024-03-28	2024-03-28
Pretty URL usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC IP 52.61.128.41 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML true Observations First Seen2024-03-28 17:25:59 Last Seen2024-03-28 17:25:59 Times Seen1 Hash 2868cacd2924f32474225a790c92dbc1 5daeb3accc003b52848cb07f7577cb2f8b3351f9 02d45918bc01674d9c46f3032833bc75a4a999c1943ecb02815dfe10ef50ffdf Loading...

	usps.my.salesforce-sites.com/publicgenericpages/jslibrary/1698336664248/sfdc/VFState.js	5.9 kB	2024-02-15	2024-04-23
Pretty URL usps.my.salesforce-sites.com/publicgenericpages/jslibrary/1698336664248/sfdc/VFState.js IP 52.61.128.128 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-15 01:36:30 Last Seen2024-04-23 04:27:20 Times Seen94 Hash 1e3b202d2d902da68c636531d4e2e7d9 28ad943e92bf59e8b792ad4115b87256accb0a88 15ffd48d6c661f7ce1b24241017b230dc1b75ff69e2144657981df2f62a331bc Loading...

	usps.my.salesforce-sites.com/publicgenericpages/jslibrary/1698336664248/sfdc/NetworkTracking.js	3.1 kB	2024-02-15	2024-04-26
Pretty URL usps.my.salesforce-sites.com/publicgenericpages/jslibrary/1698336664248/sfdc/NetworkTracking.js IP 52.61.128.128 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-15 01:36:30 Last Seen2024-04-26 00:56:24 Times Seen108 Hash 04f1de15d6dc5e13aece1445b1162d58 c316c22e7b6117baaf23065570a17005f7d2a118 162a48a89746944d3ba05bf21bda05a16a227f552015b39af6ad25bcc371a46f Loading...

	usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC	26 B	2023-03-07	2024-04-28
Pretty URL usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC IP 52.61.128.41 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 14:55:54 Last Seen2024-04-28 10:36:22 Times Seen262 Hash 8103d3e8387e32cf361c0e8b2b344c51 9e5587feb21500aa44b24cf8443e30a496d3a088 73f9e62599202c81dea54a9448af6f96f07177807f358ca43cf3533581e88b6f Loading...

	usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC	36 B	2023-03-07	2024-04-28
Pretty URL usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC IP 52.61.128.41 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 14:55:54 Last Seen2024-04-28 10:36:22 Times Seen248 Hash d0c5cce62dc464e89fae808d1640c900 4afe4cb9dfef577682db08964d47ab44d712ec7b e9bcfe3afd2e8f3d30686f9b65b059b564e681174496d3d431c4b31089135290 Loading...

	usps.my.salesforce-sites.com/publicgenericpages/static/111213/js/perf/stub.js	1.4 kB	2023-03-07	2024-04-26
Pretty URL usps.my.salesforce-sites.com/publicgenericpages/static/111213/js/perf/stub.js IP 52.61.128.128 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10:31 Last Seen2024-04-26 00:56:24 Times Seen548 Hash ccd2f285b62cb74170797be357b5669f 68e668f6b43b9a87b87017a5a8db45671d550490 5830f6b53e1ea91abd5de97ef219269702f413575cfe0dd6149712d68d7d61eb Loading...

	usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner	160 B	2024-03-28	2024-03-28
Pretty URL usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner IP 52.61.128.128 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML true Observations First Seen2024-03-28 17:25:59 Last Seen2024-03-28 17:25:59 Times Seen1 Hash 06d5e984f05b2803347c367d5b5b1359 44478e14dfa3d35c8fcdb51118e529a90fbcd9e6 711ee1ab3b1cdbbf535901e1b8fdf12798caba807fc71beaaea5a2da07027942 Loading...

	usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC	478 B	2024-03-28	2024-03-28
Pretty URL usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC IP 52.61.128.41 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML true Observations First Seen2024-03-28 17:25:59 Last Seen2024-03-28 17:25:59 Times Seen1 Hash cc52045c36568efae2ed652995962be7 9ad232d4722b8d8534273235f6a1fe192ec3d8b5 9ef1c5e4a676f50403470acfbebec56241acbbff961ca98b999b0439b97dc6f8 Loading...

	usps.my.salesforce-sites.com/publicgenericpages/static/111213/desktop/desktopAjax.js	7.0 kB	2023-03-07	2024-03-28
Pretty URL usps.my.salesforce-sites.com/publicgenericpages/static/111213/desktop/desktopAjax.js IP 52.61.128.128 ASN #8987 Amazon Data Services Ireland Ltd Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10:31 Last Seen2024-03-28 17:25:59 Times Seen69 Hash 6ec15500519eab790aab648fa1938fa9 9b8dc0e4811b078ac5a2877c4f86aaa6598ac0c8 2ae9edda35d97cbd39d1b0b16c784f37a09d4da155969b0b6087d41c57579869 Loading...

HTTP Transactions (43)

URL IP Response Size

usps.ambition.com/

54.86.123.84

0 B

URL
usps.ambition.com/
IP
54.86.123.84:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: usps.ambition.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Thu, 28 Mar 2024 16:25:23 GMT
content-type: text/html; charset=utf-8
content-length: 0
server: nginx
location: /account-management/login/?next=/
vary: Cookie
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2

usps.ambition.com/account-management/login/?next=/

54.86.123.84

0 B

URL
usps.ambition.com/account-management/login/?next=/
IP
54.86.123.84:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /account-management/login/?next=/ HTTP/1.1
Host: usps.ambition.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
date: Thu, 28 Mar 2024 16:25:23 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: https://usps.my.salesforce.com/idp/endpoint/HttpRedirect?SAMLRequest=nZJLT8MwEIT%2FSuR7ngUEVhsptKBWaiFqCxLcXGebWvIjeJ1C%2Fj1ueIkeisTRq5ndb0Yeakxo0bqdXsJLC%2BiCNyU1Uj8ekdZqahgK%2F2QKkDpOV8ViTrMooY01znAjybchPW1giGCdMJoEs8mIiCp8Kq%2BK17bubpLtYj9XckyCR7DoJSPiHV6H2MJMo2Pa%2BVGSnYXJIMwu1%2BkFzc5pNngmwcQzC81c79o51yCN4xYbjFQXIZOAW2M5RNyoWFRNDLpqjNAunnrtEiphgTsSlJ9xroWuhK5PR9l8iJBO1%2BsyLO9XaxIUX%2FHGRmOrwK7A7gWHh%2BX8iIupjTgIeyTGuWm1CxXTrAYFHkyaWuiY5ENfKe0rsMGtsYq501SHiW9120up3yRcR%2FJ%2FnB7GP5cPFAm986tnk9JIwbs%2FWdIoPWZRTMiiqiwg%2BqakNK9jC8zBiGyZRCBBnB%2BO%2Fv6J%2BTs%3D&RelayState=%2F
server: nginx
x-frame-options: SAMEORIGIN
vary: Cookie
set-cookie: sessionid=568fli9po4rx3jzsa2rz2dxkrudqe12f; HttpOnly; Path=/; SameSite=None; Secure
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2

usps.my.salesforce.com/idp/endpoint/HttpRedirect?SAMLRequest=nZJLT8MwEIT%2FSuR7ngUEVhsptKBWaiFqCxLcXGebWvIjeJ1C%2Fj1ueIkeisTRq5ndb0Yeakxo0bqdXsJLC%2BiCNyU1Uj8ekdZqahgK%2F2QKkDpOV8ViTrMooY01znAjybchPW1giGCdMJoEs8mIiCp8Kq%2BK17bubpLtYj9XckyCR7DoJSPiHV6H2MJMo2Pa%2BVGSnYXJIMwu1%2BkFzc5pNngmwcQzC81c79o51yCN4xYbjFQXIZOAW2M5RNyoWFRNDLpqjNAunnrtEiphgTsSlJ9xroWuhK5PR9l8iJBO1%2BsyLO9XaxIUX%2FHGRmOrwK7A7gWHh%2BX8iIupjTgIeyTGuWm1CxXTrAYFHkyaWuiY5ENfKe0rsMGtsYq501SHiW9120up3yRcR%2FJ%2FnB7GP5cPFAm986tnk9JIwbs%2FWdIoPWZRTMiiqiwg%2BqakNK9jC8zBiGyZRCBBnB%2BO%2Fv6J%2BTs%3D&RelayState=%2F

52.61.128.41

0 B

URL
usps.my.salesforce.com/idp/endpoint/HttpRedirect?SAMLRequest=nZJLT8MwEIT%2FSuR7ngUEVhsptKBWaiFqCxLcXGebWvIjeJ1C%2Fj1ueIkeisTRq5ndb0Yeakxo0bqdXsJLC%2BiCNyU1Uj8ekdZqahgK%2F2QKkDpOV8ViTrMooY01znAjybchPW1giGCdMJoEs8mIiCp8Kq%2BK17bubpLtYj9XckyCR7DoJSPiHV6H2MJMo2Pa%2BVGSnYXJIMwu1%2BkFzc5pNngmwcQzC81c79o51yCN4xYbjFQXIZOAW2M5RNyoWFRNDLpqjNAunnrtEiphgTsSlJ9xroWuhK5PR9l8iJBO1%2BsyLO9XaxIUX%2FHGRmOrwK7A7gWHh%2BX8iIupjTgIeyTGuWm1CxXTrAYFHkyaWuiY5ENfKe0rsMGtsYq501SHiW9120up3yRcR%2FJ%2FnB7GP5cPFAm986tnk9JIwbs%2FWdIoPWZRTMiiqiwg%2BqakNK9jC8zBiGyZRCBBnB%2BO%2Fv6J%2BTs%3D&RelayState=%2F
IP
52.61.128.41:0
ASN
#8987 Amazon Data Services Ireland Ltd

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /idp/endpoint/HttpRedirect?SAMLRequest=nZJLT8MwEIT%2FSuR7ngUEVhsptKBWaiFqCxLcXGebWvIjeJ1C%2Fj1ueIkeisTRq5ndb0Yeakxo0bqdXsJLC%2BiCNyU1Uj8ekdZqahgK%2F2QKkDpOV8ViTrMooY01znAjybchPW1giGCdMJoEs8mIiCp8Kq%2BK17bubpLtYj9XckyCR7DoJSPiHV6H2MJMo2Pa%2BVGSnYXJIMwu1%2BkFzc5pNngmwcQzC81c79o51yCN4xYbjFQXIZOAW2M5RNyoWFRNDLpqjNAunnrtEiphgTsSlJ9xroWuhK5PR9l8iJBO1%2BsyLO9XaxIUX%2FHGRmOrwK7A7gWHh%2BX8iIupjTgIeyTGuWm1CxXTrAYFHkyaWuiY5ENfKe0rsMGtsYq501SHiW9120up3yRcR%2FJ%2FnB7GP5cPFAm986tnk9JIwbs%2FWdIoPWZRTMiiqiwg%2BqakNK9jC8zBiGyZRCBBnB%2BO%2Fv6J%2BTs%3D&RelayState=%2F HTTP/1.1
Host: usps.my.salesforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Thu, 28 Mar 2024 16:25:25 GMT
Set-Cookie: CookieConsentPolicy=0:1; path=/; expires=Fri, 28-Mar-2025 16:25:25 GMT; Max-Age=31536000; secure; SameSite=None
LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Fri, 28-Mar-2025 16:25:25 GMT; Max-Age=31536000; secure; SameSite=None
BrowserId=yIn_P-0fEe6pl5EvhnfALw; domain=.salesforce.com; path=/; expires=Fri, 28-Mar-2025 16:25:25 GMT; Max-Age=31536000
BrowserId_sec=yIn_P-0fEe6pl5EvhnfALw; domain=.salesforce.com; path=/; expires=Fri, 28-Mar-2025 16:25:25 GMT; Max-Age=31536000; secure; SameSite=None
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
Content-Security-Policy: upgrade-insecure-requests
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private
Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Location: https://usps.my.salesforce.com/idp/login?app=0spBY0000000006&RelayState=%2F&binding=HttpPost&inresponseto=id-YP9AwugyE0fMvLmlC
Content-Length: 0

usps.ambition.com/

54.86.123.84

134 B

URL
usps.ambition.com/
IP
54.86.123.84:0
ASN
#14618 AMAZON-AES

File type
HTML document, ASCII text, with CRLF line terminators
Size
134 B (134 bytes)
Hash
4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a

HTTP Headers

GET / HTTP/1.1
Host: usps.ambition.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Thu, 28 Mar 2024 16:25:26 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://usps.ambition.com:443/

usps.ambition.com/

54.86.123.84

0 B

URL
usps.ambition.com/
IP
54.86.123.84:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: usps.ambition.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Thu, 28 Mar 2024 16:25:26 GMT
content-type: text/html; charset=utf-8
content-length: 0
server: nginx
location: /account-management/login/?next=/
vary: Cookie
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2

usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC

52.61.128.41

200 OK

4.1 kB

URL User Request GET HTTP/1.1
usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
IP
52.61.128.41:443
ASN
#8987 Amazon Data Services Ireland Ltd

Certificate
IssuerDigiCert Inc
Subjectna219.salesforce.com
FingerprintB3:C9:A6:B5:FB:F0:E1:CD:19:5B:CC:15:FD:15:53:E4:8A:FA:0E:2E
ValidityTue, 19 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (6315), with CRLF, LF line terminators
Size
4.1 kB (4057 bytes)
Hash
f64acfffba9d5aaa23b3dbbe35d0ab2c
7a1a8af1ba9590e60f6177102d11501652d79be2
bcc4d964aa908a690b5647334d74c89c42346df28a929bd8eff6d2dcbddcddca

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC HTTP/1.1
Host: usps.my.salesforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce.com/idp/login?app=0spBY0000000006&RelayState=%2F&binding=HttpPost&inresponseto=id-YP9AwugyE0fMvLmlC
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=yIn_P-0fEe6pl5EvhnfALw; BrowserId_sec=yIn_P-0fEe6pl5EvhnfALw
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:27 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private
Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Content-Type: text/html; charset=UTF-8
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Security-Policy: upgrade-insecure-requests, frame-ancestors 'none'
X-FRAME-OPTIONS: DENY
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

usps.ambition.com/account-management/login/?next=/

54.86.123.84

0 B

URL
usps.ambition.com/account-management/login/?next=/
IP
54.86.123.84:0
ASN
#14618 AMAZON-AES

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /account-management/login/?next=/ HTTP/1.1
Host: usps.ambition.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 302 Found
date: Thu, 28 Mar 2024 16:25:27 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: https://usps.my.salesforce.com/idp/endpoint/HttpRedirect?SAMLRequest=nZJJb8IwEIX%2FSuR7VrrJIkhpUAUqtAhoVfVmnAlY8hI8Tin99TXppnKgUo8evTfzvSf3NSa0aN1Gz2HbArrgVUmN1I9z0lpNDUPhn0wBUsfpophOaBYltLHGGW4k%2BTakpw0MEawTRpNgPMyJqMLp7s2k5vapV5Z1ud7WigSPYNFLcuIdXofYwlijY9r5UZKdhUkvzK6W6QXNzml2%2BUyCoWcWmrnOtXGuQRrHLTYYqX2ETALWxnKIuFGxqJoYdNUYoV088to5VMICdySYfca5FroSen06yupDhHS0XM7C2f1iSYLiK15pNLYK7ALsi%2BDwMJ8ccTG1Egdhh8Q4N612oWKarUGBB5NmLXRMBn1fKe0qsMGNsYq501SHiW%2B17qTUbxJuTwb%2FON2Pfy4fKBJ651ePhzMjBd%2F%2FyZJG6TGLYkIWVWUB0TclpdmVFpiDnNRMIpAgHhyO%2Fv6Jg3c%3D&RelayState=%2F
server: nginx
x-frame-options: SAMEORIGIN
vary: Cookie
set-cookie: sessionid=3geiimpae87xj0qc8fipzdvggxe23rwu; HttpOnly; Path=/; SameSite=None; Secure
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2

usps.my.salesforce.com/css/sfdc_210.css

52.61.128.41

200 OK

3.8 kB

URL GET HTTP/1.1
usps.my.salesforce.com/css/sfdc_210.css
IP
52.61.128.41:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
Certificate
IssuerDigiCert Inc
Subjectna219.salesforce.com
FingerprintB3:C9:A6:B5:FB:F0:E1:CD:19:5B:CC:15:FD:15:53:E4:8A:FA:0E:2E
ValidityTue, 19 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT

File type
ASCII text
Size
3.8 kB (3818 bytes)
Hash
efc7947cfbf748c96acd9e0b7a7a0530
7d37e179aa819abb6bd09a1a0806c05d18ef3263
183b78d415189617e95ef5102c198ababe0e0af78be79197d4b6f6b216c26796

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /css/sfdc_210.css HTTP/1.1
Host: usps.my.salesforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=yIn_P-0fEe6pl5EvhnfALw; BrowserId_sec=yIn_P-0fEe6pl5EvhnfALw
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:27 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=10368000
Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Expires: Fri, 26 Jul 2024 16:25:27 GMT
Last-Modified: Wed, 28 Feb 2024 21:26:08 GMT
Content-Type: text/css
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

usps.my.salesforce.com/marketing/survey/survey4/1386

52.61.128.41

200 OK

7.0 kB

URL GET HTTP/1.1
usps.my.salesforce.com/marketing/survey/survey4/1386
IP
52.61.128.41:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
Certificate
IssuerDigiCert Inc
Subjectna219.salesforce.com
FingerprintB3:C9:A6:B5:FB:F0:E1:CD:19:5B:CC:15:FD:15:53:E4:8A:FA:0E:2E
ValidityTue, 19 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (6170)
Size
7.0 kB (6976 bytes)
Hash
86ea7330491091c384598149b414f1de
e2c56cf951d20f12e58209aed48a07359294563b
6e254c656a029b64c10f320cb325858bc578c94d7a6ec1e5703ba03abb6738c0

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /marketing/survey/survey4/1386 HTTP/1.1
Host: usps.my.salesforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=yIn_P-0fEe6pl5EvhnfALw; BrowserId_sec=yIn_P-0fEe6pl5EvhnfALw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:27 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=2592000
Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Content-Type: application/javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6976

usps.my.salesforce.com/jslibrary/SfdcSessionBase208.js

52.61.128.41

200 OK

5.9 kB

URL GET HTTP/1.1
usps.my.salesforce.com/jslibrary/SfdcSessionBase208.js
IP
52.61.128.41:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
Certificate
IssuerDigiCert Inc
Subjectna219.salesforce.com
FingerprintB3:C9:A6:B5:FB:F0:E1:CD:19:5B:CC:15:FD:15:53:E4:8A:FA:0E:2E
ValidityTue, 19 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (575)
Size
5.9 kB (5920 bytes)
Hash
eede1b37a00f77c1143e618cf980b866
95388a2520cd89b8c9a837a336688520dee7ef45
680ee03715036c635c33fdd03f1ba69538ed2af3f569e2cc901c937653f90f06

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /jslibrary/SfdcSessionBase208.js HTTP/1.1
Host: usps.my.salesforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=yIn_P-0fEe6pl5EvhnfALw; BrowserId_sec=yIn_P-0fEe6pl5EvhnfALw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:27 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=10368000
Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Expires: Fri, 26 Jul 2024 16:25:27 GMT
Last-Modified: Tue, 15 Aug 2023 06:08:08 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

usps.my.salesforce.com/jslibrary/LoginHint208.js

52.61.128.41

200 OK

6.3 kB

URL GET HTTP/1.1
usps.my.salesforce.com/jslibrary/LoginHint208.js
IP
52.61.128.41:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
Certificate
IssuerDigiCert Inc
Subjectna219.salesforce.com
FingerprintB3:C9:A6:B5:FB:F0:E1:CD:19:5B:CC:15:FD:15:53:E4:8A:FA:0E:2E
ValidityTue, 19 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT

File type
ASCII text, with very long lines (563)
Size
6.3 kB (6294 bytes)
Hash
f1b06a808e5910093e3a8ecd1c70d695
d6ea29b885998bd24811333f6ceaffce42400f7d
b4e09e04175d3fc81542f40d4d227db48c6199f93ca2737a1ce91e9e57865dff

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /jslibrary/LoginHint208.js HTTP/1.1
Host: usps.my.salesforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=yIn_P-0fEe6pl5EvhnfALw; BrowserId_sec=yIn_P-0fEe6pl5EvhnfALw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:27 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=10368000
Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Expires: Fri, 26 Jul 2024 16:25:27 GMT
Last-Modified: Thu, 01 Feb 2024 18:09:50 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

usps.my.salesforce.com/marketing/survey/survey1/1386

52.61.128.41

200 OK

2.0 kB

URL GET HTTP/1.1
usps.my.salesforce.com/marketing/survey/survey1/1386
IP
52.61.128.41:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
Certificate
IssuerDigiCert Inc
Subjectna219.salesforce.com
FingerprintB3:C9:A6:B5:FB:F0:E1:CD:19:5B:CC:15:FD:15:53:E4:8A:FA:0E:2E
ValidityTue, 19 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (784)
Size
2.0 kB (1979 bytes)
Hash
1e4e0e22a46635f71fc0e4ee5fb09186
50afcd33af5cfd2cca13abf882c7e2c63f95506c
42a531dce996297d2a03cb33044b36408821072ad24b9477a237bd8a3ed6ebf7

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /marketing/survey/survey1/1386 HTTP/1.1
Host: usps.my.salesforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=yIn_P-0fEe6pl5EvhnfALw; BrowserId_sec=yIn_P-0fEe6pl5EvhnfALw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:27 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=2592000
Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Content-Type: application/javascript
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1979

usps.my.salesforce.com/jslibrary/baselogin.js

52.61.128.41

200 OK

445 B

URL GET HTTP/1.1
usps.my.salesforce.com/jslibrary/baselogin.js
IP
52.61.128.41:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
Certificate
IssuerDigiCert Inc
Subjectna219.salesforce.com
FingerprintB3:C9:A6:B5:FB:F0:E1:CD:19:5B:CC:15:FD:15:53:E4:8A:FA:0E:2E
ValidityTue, 19 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT

File type
ASCII text, with very long lines (406)
Size
445 B (445 bytes)
Hash
878e061042d5aaf284f315335c7124ce
b30b4d44222bba76d949972a5bd2c52c811fd361
cd422ba76dcfff4790157b32c98a02fb98f1220b4a7befa870ef52fb4754a564

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /jslibrary/baselogin.js HTTP/1.1
Host: usps.my.salesforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=yIn_P-0fEe6pl5EvhnfALw; BrowserId_sec=yIn_P-0fEe6pl5EvhnfALw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:27 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=10368000
Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Expires: Fri, 26 Jul 2024 16:25:27 GMT
Last-Modified: Tue, 15 Aug 2023 06:08:12 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

85.222.154.67

200 OK

98 B

URL GET HTTP/1.1
login.salesforce.com/login/sessionserver212.html
IP
85.222.154.67:443
ASN
#14340 SALESFORCE

Requested by
https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
Certificate
IssuerDigiCert Inc
Subjectlogin.salesforce.com
Fingerprint92:C6:0F:53:06:F1:B4:33:72:38:D1:DA:3F:34:47:7D:13:E2:07:D3
ValidityThu, 20 Apr 2023 00:00:00 GMT - Thu, 18 Apr 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
98 B (98 bytes)
Hash
f1375ef84643a5974d735836e66d3829
a8ea06a865b284d2965aeb5108c445ff53e5a285
db743dbd91a699d36f6a755ad2c8eec5ce0d1b3715df50a651b7c24de11c1811

HTTP Headers

GET /login/sessionserver212.html HTTP/1.1
Host: login.salesforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce.com/
DNT: 1
Connection: keep-alive
Cookie: BrowserId=yIn_P-0fEe6pl5EvhnfALw; BrowserId_sec=yIn_P-0fEe6pl5EvhnfALw
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:27 GMT
Set-Cookie: CookieConsentPolicy=0:0; path=/; expires=Fri, 28-Mar-2025 16:25:27 GMT; Max-Age=31536000; secure; SameSite=None
LSKey-c$CookieConsentPolicy=0:0; path=/; expires=Fri, 28-Mar-2025 16:25:27 GMT; Max-Age=31536000; secure; SameSite=None
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
Content-Security-Policy: upgrade-insecure-requests
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=86400
Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Expires: Fri, 29 Mar 2024 16:25:27 GMT
Last-Modified: Wed, 23 Aug 2017 20:39:30 GMT
Content-Type: text/html;charset=UTF-8
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

usps.my.salesforce.com/img/clear.png

52.61.128.41

200 OK

477 B

URL GET HTTP/1.1
usps.my.salesforce.com/img/clear.png
IP
52.61.128.41:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
Certificate
IssuerDigiCert Inc
Subjectna219.salesforce.com
FingerprintB3:C9:A6:B5:FB:F0:E1:CD:19:5B:CC:15:FD:15:53:E4:8A:FA:0E:2E
ValidityTue, 19 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT

File type
PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Size
477 B (477 bytes)
Hash
1cc6ffea5ac6b5c6e7d7b6b9b1a01e9f
a4fd54cc5e6cac7e5fee6f9832c817d5e58c7c10
dd464055be78eadee2d5d3ecc5380600b788883e462d9e77372877dc04110e6d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /img/clear.png HTTP/1.1
Host: usps.my.salesforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=yIn_P-0fEe6pl5EvhnfALw; BrowserId_sec=yIn_P-0fEe6pl5EvhnfALw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:27 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=10368000
Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Expires: Fri, 26 Jul 2024 16:25:27 GMT
Last-Modified: Thu, 21 May 2015 20:40:36 GMT
Content-Type: image/png
Accept-Ranges: bytes
Transfer-Encoding: chunked

usps.my.salesforce.com/s.gif

52.61.128.41

200 OK

43 B

URL GET HTTP/1.1
usps.my.salesforce.com/s.gif
IP
52.61.128.41:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
Certificate
IssuerDigiCert Inc
Subjectna219.salesforce.com
FingerprintB3:C9:A6:B5:FB:F0:E1:CD:19:5B:CC:15:FD:15:53:E4:8A:FA:0E:2E
ValidityTue, 19 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /s.gif HTTP/1.1
Host: usps.my.salesforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=yIn_P-0fEe6pl5EvhnfALw; BrowserId_sec=yIn_P-0fEe6pl5EvhnfALw
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:27 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=10368000
Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Expires: Fri, 26 Jul 2024 16:25:27 GMT
Last-Modified: Tue, 27 May 2003 18:28:08 GMT
Content-Type: image/gif
Accept-Ranges: bytes
Transfer-Encoding: chunked

85.222.154.67

200 OK

8.8 kB

URL GET HTTP/1.1
login.salesforce.com/jslibrary/SessionServer212.js
IP
85.222.154.67:443
ASN
#14340 SALESFORCE

Requested by
https://login.salesforce.com/login/sessionserver212.html
Certificate
IssuerDigiCert Inc
Subjectlogin.salesforce.com
Fingerprint92:C6:0F:53:06:F1:B4:33:72:38:D1:DA:3F:34:47:7D:13:E2:07:D3
ValidityThu, 20 Apr 2023 00:00:00 GMT - Thu, 18 Apr 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (575)
Size
8.8 kB (8844 bytes)
Hash
1eeb5a37c4cb173c3ba3d4728fed7a6b
4bf326b4baddf45d2b0309e662fe9b8e847502b8
3e800dbd0f5637eb67e1f56cbfdd4fbaff8ca757d03cc54a542e83423ff17d4f

HTTP Headers

GET /jslibrary/SessionServer212.js HTTP/1.1
Host: login.salesforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://login.salesforce.com/login/sessionserver212.html
DNT: 1
Connection: keep-alive
Cookie: BrowserId=yIn_P-0fEe6pl5EvhnfALw; BrowserId_sec=yIn_P-0fEe6pl5EvhnfALw; CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:27 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=10368000
Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Expires: Fri, 26 Jul 2024 16:25:27 GMT
Last-Modified: Mon, 21 Aug 2023 17:38:36 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

usps.my.salesforce.com/login/assets/fonts/SalesforceSans/SalesforceSans-Regular.woff2

52.61.128.41

200 OK

28 kB

URL GET HTTP/1.1
usps.my.salesforce.com/login/assets/fonts/SalesforceSans/SalesforceSans-Regular.woff2
IP
52.61.128.41:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
Certificate
IssuerDigiCert Inc
Subjectna219.salesforce.com
FingerprintB3:C9:A6:B5:FB:F0:E1:CD:19:5B:CC:15:FD:15:53:E4:8A:FA:0E:2E
ValidityTue, 19 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 27580, version 1.0
Size
28 kB (27580 bytes)
Hash
3ccb7b03c77bb2a3e91f6a2fb4c211f8
ac4c4df3c4bcc636190e4f94c7a80b81158d0517
1f1752651aca663f40e45c60e182172fc426a40df042098f6e68a56db2c459f3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /login/assets/fonts/SalesforceSans/SalesforceSans-Regular.woff2 HTTP/1.1
Host: usps.my.salesforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://usps.my.salesforce.com/css/sfdc_210.css
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=yIn_P-0fEe6pl5EvhnfALw; BrowserId_sec=yIn_P-0fEe6pl5EvhnfALw
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:27 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=10368000
Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Expires: Fri, 26 Jul 2024 16:25:27 GMT
Last-Modified: Fri, 24 Jul 2015 20:32:56 GMT
Content-Type: font/woff2
Accept-Ranges: bytes
Transfer-Encoding: chunked

usps.my.salesforce.com/login/assets/fonts/SalesforceSans/SalesforceSans-Light.woff2

52.61.128.41

200 OK

28 kB

URL GET HTTP/1.1
usps.my.salesforce.com/login/assets/fonts/SalesforceSans/SalesforceSans-Light.woff2
IP
52.61.128.41:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
Certificate
IssuerDigiCert Inc
Subjectna219.salesforce.com
FingerprintB3:C9:A6:B5:FB:F0:E1:CD:19:5B:CC:15:FD:15:53:E4:8A:FA:0E:2E
ValidityTue, 19 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 27736, version 1.0
Size
28 kB (27736 bytes)
Hash
f4c092cda9a56b8e26cc307f208949b4
dac76c1196988545bc7c7609d609fdc58cf079e5
b7df2d6cb9d0ecda707a1de1302b3c9d9bda16247dc382e696579a8308d49771

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /login/assets/fonts/SalesforceSans/SalesforceSans-Light.woff2 HTTP/1.1
Host: usps.my.salesforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://usps.my.salesforce.com/css/sfdc_210.css
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=yIn_P-0fEe6pl5EvhnfALw; BrowserId_sec=yIn_P-0fEe6pl5EvhnfALw
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:27 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=10368000
Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Expires: Fri, 26 Jul 2024 16:25:27 GMT
Last-Modified: Fri, 24 Jul 2015 20:32:54 GMT
Content-Type: font/woff2
Accept-Ranges: bytes
Transfer-Encoding: chunked

usps.my.salesforce.com/favicon.ico

52.61.128.41

200 OK

5.4 kB

URL GET HTTP/1.1
usps.my.salesforce.com/favicon.ico
IP
52.61.128.41:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
Certificate
IssuerDigiCert Inc
Subjectna219.salesforce.com
FingerprintB3:C9:A6:B5:FB:F0:E1:CD:19:5B:CC:15:FD:15:53:E4:8A:FA:0E:2E
ValidityTue, 19 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT

File type
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
5.4 kB (5430 bytes)
Hash
ccda8df05e9a37b3131afd4d451b44ec
ed9d0f9c4224fbd4c768be237b4b59f27f1b718c
92842fc6c2f66b46f69458c14621fc2eca5d6c02d7937f9124fe8a3a9a55bc91

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: usps.my.salesforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=yIn_P-0fEe6pl5EvhnfALw; BrowserId_sec=yIn_P-0fEe6pl5EvhnfALw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:28 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=3888000
Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Expires: Sun, 12 May 2024 16:25:28 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked

na219.salesforce.com/brand-asset/CAAAAY6HlNMSAAAAAAAAAAAAAAAAAAAAAAAA-KIjBI3idD8KrmI7M5Vznk1a75IKXyhsisfAZBGQLCcIAIG6uDAXUM4t6DE9cG_pksnq08f3MYoz4muadVCoI6EDmZfC_mM2jCuYfioG35rn

52.61.130.66

200 OK

14 kB

URL GET HTTP/1.1
na219.salesforce.com/brand-asset/CAAAAY6HlNMSAAAAAAAAAAAAAAAAAAAAAAAA-KIjBI3idD8KrmI7M5Vznk1a75IKXyhsisfAZBGQLCcIAIG6uDAXUM4t6DE9cG_pksnq08f3MYoz4muadVCoI6EDmZfC_mM2jCuYfioG35rn
IP
52.61.130.66:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
Certificate
IssuerDigiCert Inc
Subjectna219.salesforce.com
FingerprintB3:C9:A6:B5:FB:F0:E1:CD:19:5B:CC:15:FD:15:53:E4:8A:FA:0E:2E
ValidityTue, 19 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 250x54, components 3
Size
14 kB (13678 bytes)
Hash
11beea02596208ec95b9b8e9eb32ea49
2ad7417ddb17ce2ab5459b388e7b4e7ef2b3d0dc
bcebc327ad58b939240a7a5f0749b25f8000ee0eabb263ac2727ca83e115587c

HTTP Headers

GET /brand-asset/CAAAAY6HlNMSAAAAAAAAAAAAAAAAAAAAAAAA-KIjBI3idD8KrmI7M5Vznk1a75IKXyhsisfAZBGQLCcIAIG6uDAXUM4t6DE9cG_pksnq08f3MYoz4muadVCoI6EDmZfC_mM2jCuYfioG35rn HTTP/1.1
Host: na219.salesforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce.com/
DNT: 1
Connection: keep-alive
Cookie: BrowserId=yIn_P-0fEe6pl5EvhnfALw; BrowserId_sec=yIn_P-0fEe6pl5EvhnfALw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:28 GMT
Set-Cookie: CookieConsentPolicy=0:0; path=/; expires=Fri, 28-Mar-2025 16:25:28 GMT; Max-Age=31536000; secure; SameSite=None
LSKey-c$CookieConsentPolicy=0:0; path=/; expires=Fri, 28-Mar-2025 16:25:28 GMT; Max-Age=31536000; secure; SameSite=None
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=3888000
Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Content-Type: image/jpeg
P3P: CP="CUR OTR STA"
Expires: Sun, 12 May 2024 16:25:28 GMT
Last-Modified: Fri, 14 Nov 2014 12:49:52 GMT
Content-Length: 13678

usps.my.salesforce.com/img/icon/capslock_blue.png

52.61.128.41

200 OK

549 B

URL GET HTTP/1.1
usps.my.salesforce.com/img/icon/capslock_blue.png
IP
52.61.128.41:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
Certificate
IssuerDigiCert Inc
Subjectna219.salesforce.com
FingerprintB3:C9:A6:B5:FB:F0:E1:CD:19:5B:CC:15:FD:15:53:E4:8A:FA:0E:2E
ValidityTue, 19 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT

File type
PNG image data, 33 x 43, 8-bit/color RGBA, non-interlaced
Size
549 B (549 bytes)
Hash
0b76cfe389e0720a22e73e9a1f63351f
c3f0a7e6547e3997f8c9574a011005de748181ee
1f21e5aca5794286008ff7bd98038e525e047e36490747681a6ea396a52fd24b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Salesforce

HTTP Headers

GET /img/icon/capslock_blue.png HTTP/1.1
Host: usps.my.salesforce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=yIn_P-0fEe6pl5EvhnfALw; BrowserId_sec=yIn_P-0fEe6pl5EvhnfALw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:28 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Content-Type-Options: nosniff
X-Robots-Tag: none
Referrer-Policy: origin-when-cross-origin
Cache-Control: public,max-age=10368000
Origin-Trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
Expires: Fri, 26 Jul 2024 16:25:28 GMT
Last-Modified: Tue, 04 Apr 2023 21:01:52 GMT
Content-Type: image/png
Accept-Ranges: bytes
Transfer-Encoding: chunked

usps-sites.secure.force.com/publicgenericpages/apex/usGovWarningBanner

52.61.129.233

301 Moved Permanently

0 B

URL GET HTTP/1.1
usps-sites.secure.force.com/publicgenericpages/apex/usGovWarningBanner
IP
52.61.129.233:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
Certificate
IssuerDigiCert Inc
Subject*.na219.force.com
Fingerprint62:46:C5:2B:91:EA:C2:53:C7:BE:54:30:24:08:CE:90:7A:FE:93:6E
ValidityTue, 19 Sep 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /publicgenericpages/apex/usGovWarningBanner HTTP/1.1
Host: usps-sites.secure.force.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.my.salesforce.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Thu, 28 Mar 2024 16:25:30 GMT
Set-Cookie: CookieConsentPolicy=0:1; path=/; expires=Fri, 28-Mar-2025 16:25:30 GMT; Max-Age=31536000; secure; SameSite=None
LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Fri, 28-Mar-2025 16:25:30 GMT; Max-Age=31536000; secure; SameSite=None
Strict-Transport-Security: max-age=63072000; includeSubDomains
Content-Security-Policy: upgrade-insecure-requests
Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private
Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Content-Length: 0

usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner

52.61.128.128

200 OK

5.1 kB

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce.com/?ec=302&startURL=%2Fidp%2Flogin%3Fapp%3D0spBY0000000006%26binding%3DHttpPost%26RelayState%3D%252F%26inresponseto%3Did-YP9AwugyE0fMvLmlC
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (5867), with CRLF, LF line terminators
Size
5.1 kB (5103 bytes)
Hash
63aebd8b8896b5a7082fb24c74cdb2f5
174542d82b58b843d40c0a3dad2ff6bdf0e623d6
8539f96810fbdb98d2bc2cf3b07a5a7ad30a6cecb6b6df9779b3f43d06813472

HTTP Headers

GET /publicgenericpages/apex/usGovWarningBanner HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:31 GMT
Set-Cookie: CookieConsentPolicy=0:1; path=/; expires=Fri, 28-Mar-2025 16:25:31 GMT; Max-Age=31536000; secure; SameSite=None
LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Fri, 28-Mar-2025 16:25:31 GMT; Max-Age=31536000; secure; SameSite=None
BrowserId=y5nXPO0fEe6Uev9v5DDZpA; path=/; expires=Fri, 28-Mar-2025 16:25:31 GMT; Max-Age=31536000
BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA; path=/; expires=Fri, 28-Mar-2025 16:25:31 GMT; Max-Age=31536000; secure; SameSite=None
Strict-Transport-Security: max-age=63072000; includeSubDomains
Content-Security-Policy: upgrade-insecure-requests
Cache-Control: public,max-age=600
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
X-Powered-By: Salesforce.com ApexPages
P3P: CP="CUR OTR STA"
Expires: Thu, 28 Mar 2024 16:35:31 GMT
Last-Modified: Thu, 28 Mar 2024 16:25:31 GMT
Content-Type: text/html;charset=UTF-8
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

usps.my.salesforce-sites.com/publicgenericpages/static/111213/js/perf/stub.js

52.61.128.128

200 OK

618 B

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/static/111213/js/perf/stub.js
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (941)
Size
618 B (618 bytes)
Hash
ccd2f285b62cb74170797be357b5669f
68e668f6b43b9a87b87017a5a8db45671d550490
5830f6b53e1ea91abd5de97ef219269702f413575cfe0dd6149712d68d7d61eb

HTTP Headers

GET /publicgenericpages/static/111213/js/perf/stub.js HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:31 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: public,max-age=10368000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Expires: Fri, 26 Jul 2024 16:25:31 GMT
Last-Modified: Thu, 18 Dec 2014 19:28:42 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

usps.my.salesforce-sites.com/publicgenericpages/static/111213/desktop/desktopAjax.js

52.61.128.128

200 OK

2.3 kB

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/static/111213/desktop/desktopAjax.js
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
2.3 kB (2269 bytes)
Hash
6ec15500519eab790aab648fa1938fa9
9b8dc0e4811b078ac5a2877c4f86aaa6598ac0c8
2ae9edda35d97cbd39d1b0b16c784f37a09d4da155969b0b6087d41c57579869

HTTP Headers

GET /publicgenericpages/static/111213/desktop/desktopAjax.js HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:31 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: public,max-age=10368000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Expires: Fri, 26 Jul 2024 16:25:31 GMT
Last-Modified: Wed, 25 Jan 2012 20:29:10 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

usps.my.salesforce-sites.com/publicgenericpages/static/111213/js/functions.js

52.61.128.128

200 OK

10 kB

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/static/111213/js/functions.js
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (552)
Size
10 kB (10369 bytes)
Hash
0453d9ce77f9a9b275087e0287439062
eebfa0b021d4cd143caa8b3487fedcdb5a37663a
10a45d9c8050a745d63519ba2782511020978010f7f980c14c4db261ae17a506

HTTP Headers

GET /publicgenericpages/static/111213/js/functions.js HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:31 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: public,max-age=10368000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Expires: Fri, 26 Jul 2024 16:25:31 GMT
Last-Modified: Thu, 07 Sep 2023 13:00:36 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1705602480000/Theme3/default/base/zen-componentsCompatible.css

52.61.128.128

200 OK

8.6 kB

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1705602480000/Theme3/default/base/zen-componentsCompatible.css
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type
ASCII text, with very long lines (47736)
Size
8.6 kB (8645 bytes)
Hash
f2f46e7274cd08b7cf4e771ddd23a33c
ec127a7ff7f983342ef7e6f4dde42f5ee2fe31e8
4ba0fce9ca023d0d677f6c52d9361dcbe113f5d72eeb1629a8bccb6a44e8679e

HTTP Headers

GET /publicgenericpages/sCSS/60.0/sprites/1705602480000/Theme3/default/base/zen-componentsCompatible.css HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:31 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: private,max-age=3888000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Content-Type: text/css
P3P: CP="CUR OTR STA"
Expires: Sun, 12 May 2024 16:25:31 GMT
Last-Modified: Thu, 18 Jan 2024 18:28:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8645

usps.my.salesforce-sites.com/publicgenericpages/jslibrary/1698336664248/sfdc/VFState.js

52.61.128.128

200 OK

1.8 kB

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/jslibrary/1698336664248/sfdc/VFState.js
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (590)
Size
1.8 kB (1848 bytes)
Hash
1e3b202d2d902da68c636531d4e2e7d9
28ad943e92bf59e8b792ad4115b87256accb0a88
15ffd48d6c661f7ce1b24241017b230dc1b75ff69e2144657981df2f62a331bc

HTTP Headers

GET /publicgenericpages/jslibrary/1698336664248/sfdc/VFState.js HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:31 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: public,max-age=10368000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Expires: Fri, 26 Jul 2024 16:25:31 GMT
Last-Modified: Tue, 15 Aug 2023 06:08:12 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

usps.my.salesforce-sites.com/publicgenericpages/static/111213/js/picklist4.js

52.61.128.128

200 OK

3.2 kB

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/static/111213/js/picklist4.js
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type
ASCII text, with very long lines (516)
Size
3.2 kB (3221 bytes)
Hash
590976eadadecc7d91693e3b45a1ed94
fcef2e5c621673e8ba015c2bbd861781f259a8b2
7da058a4e1bd6368be16eb513d108c61e9016968c859b28bc24ac2629e401773

HTTP Headers

GET /publicgenericpages/static/111213/js/picklist4.js HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:31 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: public,max-age=10368000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Expires: Fri, 26 Jul 2024 16:25:31 GMT
Last-Modified: Tue, 11 Jul 2023 18:38:44 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1705602480000/Theme3/default/base/elements.css

52.61.128.128

200 OK

7.2 kB

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1705602480000/Theme3/default/base/elements.css
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type
ASCII text, with very long lines (33637)
Size
7.2 kB (7161 bytes)
Hash
9760b32b37f14ae44cc174757b49a594
2ab1466bd79706282939558011306f31e0109662
237f17d8d858a75c56a136b1efa67fa50e832296eda831a2bd5a0e89062ce688

HTTP Headers

GET /publicgenericpages/sCSS/60.0/sprites/1705602480000/Theme3/default/base/elements.css HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:31 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: private,max-age=3888000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Content-Type: text/css
P3P: CP="CUR OTR STA"
Expires: Sun, 12 May 2024 16:25:31 GMT
Last-Modified: Thu, 18 Jan 2024 18:28:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7161

usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1710411414000/Theme3/00Dj0000000GyYH/005t0000001Myyj/base/dCustom0.css

52.61.128.128

200 OK

6.5 kB

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1710411414000/Theme3/00Dj0000000GyYH/005t0000001Myyj/base/dCustom0.css
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65380)
Size
6.5 kB (6516 bytes)
Hash
f28130933b9360d316d0b75c8d9f6392
5ed905786bfe35d421fae0d79d4b79275c2803d5
c50986ac70bf4cfb65a434a1de8f42e5d657b39e934335defc615f2bfe6f00fc

HTTP Headers

GET /publicgenericpages/sCSS/60.0/sprites/1710411414000/Theme3/00Dj0000000GyYH/005t0000001Myyj/base/dCustom0.css HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:32 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: private,max-age=3888000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Content-Type: text/css
P3P: CP="CUR OTR STA"
Expires: Sun, 12 May 2024 16:25:32 GMT
Last-Modified: Thu, 14 Mar 2024 10:16:54 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6516

usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1710411414000/Theme3/00Dj0000000GyYH/005t0000001Myyj/base/dCustom1.css

52.61.128.128

200 OK

5.8 kB

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1710411414000/Theme3/00Dj0000000GyYH/005t0000001Myyj/base/dCustom1.css
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65380)
Size
5.8 kB (5836 bytes)
Hash
5e31606621e07b91470b65025cde1efd
b3cb68e98ff2a47b7fb99586a1efceb289a78f9e
9a01aa9eaf6f02508ef1cfbfe88d78acb72e62ad84f86c5ccb38e470126ce13a

HTTP Headers

GET /publicgenericpages/sCSS/60.0/sprites/1710411414000/Theme3/00Dj0000000GyYH/005t0000001Myyj/base/dCustom1.css HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:32 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: private,max-age=3888000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Content-Type: text/css
P3P: CP="CUR OTR STA"
Expires: Sun, 12 May 2024 16:25:32 GMT
Last-Modified: Thu, 14 Mar 2024 10:16:54 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5836

usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1705602480000/Theme3/default/base/common.css

52.61.128.128

200 OK

39 kB

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1705602480000/Theme3/default/base/common.css
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65380)
Size
39 kB (38641 bytes)
Hash
ce48ab58a05d8029d7a53a11ef70b4cd
d85312770adbc187483ac78b989d411ff3a31ebe
598e9bd9963e3e5f8a9f4a83bcb4917f5419582e12a8db7a322a1b3ea1a5632a

HTTP Headers

GET /publicgenericpages/sCSS/60.0/sprites/1705602480000/Theme3/default/base/common.css HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:32 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: private,max-age=3888000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Content-Type: text/css
P3P: CP="CUR OTR STA"
Expires: Sun, 12 May 2024 16:25:32 GMT
Last-Modified: Thu, 18 Jan 2024 18:28:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

usps.my.salesforce-sites.com/publicgenericpages/jslibrary/jslabels/1711052978000/en_US.js

52.61.128.128

200 OK

71 kB

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/jslibrary/jslabels/1711052978000/en_US.js
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Size
71 kB (70701 bytes)
Hash
0dfbd609d16ed1c0a3336c03595f4dcc
0e843db69654e590b6caa9bea028ceb26714f2af
c7b923b079af33698f14930c0f65621c5f737ec7ab724356913a8bd2022c3345

HTTP Headers

GET /publicgenericpages/jslibrary/jslabels/1711052978000/en_US.js HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:31 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: public,max-age=3888000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Content-Type: text/javascript;charset=UTF-8
P3P: CP="CUR OTR STA"
Expires: Sun, 12 May 2024 16:25:31 GMT
Last-Modified: Thu, 21 Mar 2024 20:29:38 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1710411414000/Theme3/00Dj0000000GyYH/005t0000001Myyj/base/dCustom2.css

52.61.128.128

200 OK

0 B

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1710411414000/Theme3/00Dj0000000GyYH/005t0000001Myyj/base/dCustom2.css
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /publicgenericpages/sCSS/60.0/sprites/1710411414000/Theme3/00Dj0000000GyYH/005t0000001Myyj/base/dCustom2.css HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:32 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: private,max-age=3888000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Content-Type: text/css
P3P: CP="CUR OTR STA"
Expires: Sun, 12 May 2024 16:25:32 GMT
Last-Modified: Thu, 14 Mar 2024 10:16:54 GMT
Vary: Accept-Encoding
Content-Length: 0

usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1710411414000/Theme3/00Dj0000000GyYH/005t0000001Myyj/base/dCustom3.css

52.61.128.128

200 OK

0 B

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1710411414000/Theme3/00Dj0000000GyYH/005t0000001Myyj/base/dCustom3.css
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /publicgenericpages/sCSS/60.0/sprites/1710411414000/Theme3/00Dj0000000GyYH/005t0000001Myyj/base/dCustom3.css HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:32 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: private,max-age=3888000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Content-Type: text/css
P3P: CP="CUR OTR STA"
Expires: Sun, 12 May 2024 16:25:32 GMT
Last-Modified: Thu, 14 Mar 2024 10:16:54 GMT
Vary: Accept-Encoding
Content-Length: 0

usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1710411414000/Theme3/00Dj0000000GyYH/005t0000001Myyj/base/dCustom4.css

52.61.128.128

200 OK

0 B

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1710411414000/Theme3/00Dj0000000GyYH/005t0000001Myyj/base/dCustom4.css
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /publicgenericpages/sCSS/60.0/sprites/1710411414000/Theme3/00Dj0000000GyYH/005t0000001Myyj/base/dCustom4.css HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:32 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: private,max-age=3888000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Content-Type: text/css
P3P: CP="CUR OTR STA"
Expires: Sun, 12 May 2024 16:25:32 GMT
Last-Modified: Thu, 14 Mar 2024 10:16:54 GMT
Vary: Accept-Encoding
Content-Length: 0

usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1705602480000/Theme3/default/base/extended.css

52.61.128.128

200 OK

17 kB

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1705602480000/Theme3/default/base/extended.css
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65380)
Size
17 kB (17056 bytes)
Hash
9c6947e0d80639b1a18e7ce16d1a75d6
f2d103b7383a88f5a92e75fa8ab6822767a2ae65
4330959bf50b60872728ed03ab094fda1343ab3a55c5f53020b3c326b87f0871

HTTP Headers

GET /publicgenericpages/sCSS/60.0/sprites/1705602480000/Theme3/default/base/extended.css HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:32 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: private,max-age=3888000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Content-Type: text/css
P3P: CP="CUR OTR STA"
Expires: Sun, 12 May 2024 16:25:32 GMT
Last-Modified: Thu, 18 Jan 2024 18:28:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 17056

usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1705602480000/Theme3/default/base/setup.css

52.61.128.128

200 OK

6.4 kB

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1705602480000/Theme3/default/base/setup.css
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type
ASCII text, with very long lines (26302)
Size
6.4 kB (6402 bytes)
Hash
0b00edaf9fe2ed586b529791bb5d3264
ee4c5394ab1f8cd154ba28a034d5af1e9dc2d7e5
03d0d4246166517ab3bd6ba42e10d0bc07b2f7e57cc75290d3413e703506c58b

HTTP Headers

GET /publicgenericpages/sCSS/60.0/sprites/1705602480000/Theme3/default/base/setup.css HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:32 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: private,max-age=3888000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Content-Type: text/css
P3P: CP="CUR OTR STA"
Expires: Sun, 12 May 2024 16:25:32 GMT
Last-Modified: Thu, 18 Jan 2024 18:28:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6402

usps.my.salesforce-sites.com/publicgenericpages/jslibrary/1698336664248/sfdc/NetworkTracking.js

52.61.128.128

200 OK

1.3 kB

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/jslibrary/1698336664248/sfdc/NetworkTracking.js
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (533)
Size
1.3 kB (1341 bytes)
Hash
04f1de15d6dc5e13aece1445b1162d58
c316c22e7b6117baaf23065570a17005f7d2a118
162a48a89746944d3ba05bf21bda05a16a227f552015b39af6ad25bcc371a46f

HTTP Headers

GET /publicgenericpages/jslibrary/1698336664248/sfdc/NetworkTracking.js HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:32 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: public,max-age=10368000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Expires: Fri, 26 Jul 2024 16:25:32 GMT
Last-Modified: Tue, 15 Aug 2023 06:08:04 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1710411414000/Theme3/base/dStandard.css

52.61.128.128

200 OK

111 kB

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/sCSS/60.0/sprites/1710411414000/Theme3/base/dStandard.css
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65380)
Size
111 kB (111231 bytes)
Hash
783f1553cbb5c32b953d062bef3ac030
fd0c925efd12d5e37a402ce8049824d01fcaebbc
6a447451993df13a4d5718474a5f67eba3d2f462eca67238cce76c749f922c43

HTTP Headers

GET /publicgenericpages/sCSS/60.0/sprites/1710411414000/Theme3/base/dStandard.css HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:32 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: private,max-age=3888000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Content-Type: text/css
P3P: CP="CUR OTR STA"
Expires: Sun, 12 May 2024 16:25:32 GMT
Last-Modified: Thu, 14 Mar 2024 10:16:54 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

usps.my.salesforce-sites.com/publicgenericpages/jslibrary/1699262264248/sfdc/main.js

52.61.128.128

200 OK

233 kB

URL GET HTTP/1.1
usps.my.salesforce-sites.com/publicgenericpages/jslibrary/1699262264248/sfdc/main.js
IP
52.61.128.128:443
ASN
#8987 Amazon Data Services Ireland Ltd

Requested by
https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
Certificate
IssuerDigiCert Inc
Subjectttd.my.salesforce-sites.com
Fingerprint78:42:9C:D8:80:BA:61:1C:03:56:42:87:AE:41:74:FA:6F:2E:9F:43
ValidityThu, 29 Jun 2023 00:00:00 GMT - Fri, 28 Jun 2024 23:59:59 GMT

File type
ASCII text, with very long lines (21475)
Size
233 kB (233355 bytes)
Hash
d88654a84c00fbd35fd1e507d20ae5f1
5d927f69ed7e43f9a967878b4aa5406460c52e57
c38ea70269da2e778689e1e1ec7b5e51bb46b3502842723859e93cf7366d6b03

HTTP Headers

GET /publicgenericpages/jslibrary/1699262264248/sfdc/main.js HTTP/1.1
Host: usps.my.salesforce-sites.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://usps.my.salesforce-sites.com/publicgenericpages/apex/usGovWarningBanner
DNT: 1
Connection: keep-alive
Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId_sec=y5nXPO0fEe6Uev9v5DDZpA
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 16:25:31 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains
Cache-Control: public,max-age=10368000
Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referrer-Policy: origin-when-cross-origin
Expires: Fri, 26 Jul 2024 16:25:31 GMT
Last-Modified: Thu, 12 Oct 2023 15:07:36 GMT
Content-Type: application/x-javascript
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Transfer-Encoding: chunked

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (24)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML