| usps.teamtepei.com/static/images/loading-icon-transparent-background-12.jpg |  172.67.200.61 | 200 OK | 82 kB |
URL GET HTTP/3usps.teamtepei.com/static/images/loading-icon-transparent-background-12.jpg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeGIF image data, version 89a, 630 x 637 Hash9e0373c2b4410c49439dfd822c5fd16e 427f86c03751b7e107fd282bbe32be18fc2e0898 05eb745176d79ec27d52d544582483fc4d0f6378c7ed2060be24dfc4e8990668
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/images/loading-icon-transparent-background-12.jpg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:42 GMT
content-type: image/jpeg
content-length: 81572
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: "653f5e14-13ea4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1w8AoEzXMw7hFrk8xWyXT8gvtcQa%2Bn%2FcJIKW8%2FHFa4YQ4Ovln4zLQtMGDC2Zw3yPdCyL75f5XYU4ZLZvbEm4mmRlysAEnIqEvFLCwQWRxiWhhZ8C0c0%2FMNsi9SviTHRdnsEJ7as%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1be09f570b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/ResourceRedConfig.js | 172.67.200.61 | 200 OK | 4.8 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/ResourceRedConfig.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeUnicode text, UTF-8 text, with very long lines (6275), with CRLF line terminators Hashb4344e09201e9800f2c5010cd831c9e8 817a83527de5618eee7c773b20c23ff7a6f2e920 c320ffd0f517da69d45f68d801194392458ffaa4003e7ca170d33b5146239ad9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/ResourceRedConfig.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:41 GMT
content-type: application/javascript
last-modified: Mon, 06 Nov 2023 14:01:09 GMT
etag: W/"6548f1a5-2fae"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oSuhXS8QD8Q%2F8gAC4DuYtotHmEiYMbfiteoduZBNqudhvFq2p9BCyfP99W00ICO2Dn5nw6zdKzM2NDt%2F%2FSf6zgGdV0MXlg3uB1%2F8II8Cb43xTiC8CWO6RlIEtIn5IUooqeihm7c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1be0af5d0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/social-facebook_1.png | 172.67.200.61 | 200 OK | 1.9 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/social-facebook_1.png IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced Hash5d1fed200f7befa569074a293cf2abed 11bacbc9debe99986d9a6e974e9a819aaa74be29 9d0ef8aa34abec770b6a9fb4358842a29413d08c0d1e4b74f5c4c31ab477c14c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/social-facebook_1.png HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/png
content-length: 1873
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: "653f5e14-751"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C8wdbkuQKr0iuFkPJh8rxiNW1h9QjlZvFOQC1TH3cOjQBIo7%2FcHzmbnMsH1ZqYvq2X0b%2FJHKlt0M%2B3PC%2FZnLfyUwoX2vYb4epoG3iNTEByTbxpbgIl2KdTqVQARmxT28eENJ7ao%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bef095f0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/social-twitter_2.png | 172.67.200.61 | 200 OK | 1.8 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/social-twitter_2.png IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typePNG image data, 50 x 48, 8-bit/color RGBA, non-interlaced Hash4f6b06552f2054fecb5a3ab3956d7a79 c1257b76200738ad53147be110920f84efd479b3 248385895aacd78d7a7b045cd5109103c2f849bbaef9cff5980d59823a620c91
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/social-twitter_2.png HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/png
content-length: 1842
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: "653f5e14-732"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dm11H11gC%2B0ZGTYO9hr22pabYk9MJyULrr%2BBAle5c%2FrgTS4hnXWcbjCVVWYakyvtScNcADY2i%2F5WAUXhpD0nbCdyblS%2BxJgUwsiNHsbWK1U0A6fa%2Fut6%2BPOopdZ6OMVd0jTiSYg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bef09600b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/social-pinterest_6.png | 172.67.200.61 | 200 OK | 2.3 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/social-pinterest_6.png IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced Hash010bf7d7901ccaa3905cfe4b7c1cb50d 9c174f76a3ed50a173637d44793d6bc15a818112 67d664b844fdba0588665c6f1986b25fcb6d99e5122a455c36da8622f1eaab62
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/social-pinterest_6.png HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/png
content-length: 2325
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: "653f5e14-915"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wEyX0J1OCdGU4IBv0LLdJh7ANzzLg12G%2FP0zl5pYGDceGw0jqxXQCO751hq%2FWX14VT%2Fm4j8xy9axhG74OyV9Q4Tsd3qWmOE%2FPHJvEvp4x77VsLr19iIv2UT9mk1%2BkxSufL%2BSut0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bef09610b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/social-youtube_3.png | 172.67.200.61 | 200 OK | 2.5 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/social-youtube_3.png IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typePNG image data, 50 x 35, 8-bit/color RGBA, non-interlaced Hashe38ff6af4b8ff088fcb2dc92410b759b 529c88413dbc330fa05a0629b2084ca7931f453e c2b609bbc0ed5b17740df6ab378bfcbe068e3b08d85e85b2d9dfbe6dd3c6be95
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/social-youtube_3.png HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/png
content-length: 2461
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: "653f5e14-99d"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8FfiwHHfdHBN90Zg9fA8fKJZpxu9Rx%2F1eMMOwJnKos2UH%2FLf4IXPXxDFiB0pM8e6FenZZtKRpTRFRFSmzEV7oj9Ji7NpXDZEL02bYkZASxC1qI4fFe%2BjZH%2FMVPMkgzf2KoWmNFQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bef09620b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/go-now.png | 172.67.200.61 | 200 OK | 20 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/go-now.png IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typePNG image data, 210 x 170, 8-bit/color RGBA, non-interlaced Hash6311ef7a60f86d77aa48fcc48a675a31 96bc8b2fe87b126ffbf0d7b7ad8419661cb6bd9c 70d715475fb0a4756fc65c50cbb2cf0ca15f7311efc6c54b18e045e6ab202251
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/go-now.png HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/png
content-length: 19969
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: "653f5e14-4e01"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q7qeshthk7lrNIDOva9fE%2FGGAQkcGv3Plk%2FxGwIrs19bH2JKBZWrtp%2FNtlKem%2FKaAvZmdwVTAPSv8l1TiSGg1jV3XsIWtxy%2BF%2BlwNFcJC0JLatu5d6aPUiQtRQnbGTFjyt8Zodw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beee94d0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/ge-login.js | 172.67.200.61 | 200 OK | 2.6 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/ge-login.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeASCII text, with CRLF line terminators Hash98d32283850b9b1ca26a3236d2a79d9e fe249015f43e6daacb26574d59f66f21d7045bf5 19446f634dd4c6221d9a8997301486192578841ad90f58e131709853edef22a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/ge-login.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-2460"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JEkdQBSWzj3LlZfRZ5Qg4l%2FMI0OnjNUlkhT7P%2B3oI29hXbRrGWGXofGUnMNG%2BHh7l7DL6jiML9LnmE1SJZ%2FR%2FGMalOy4e%2Braq9KNQZkpqH9iRDHo%2Fmzd1g9WFd6Gbfrn%2FX1J%2FfM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beee9540b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fast.fonts.net/t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 |  104.16.249.67 | 200 OK | 0 B |
URL GET HTTP/2fast.fonts.net/t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 IP104.16.249.67:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintB9:2B:82:F1:50:51:EA:B4:39:81:75:2F:6E:8B:8B:94:55:81:C3:47 ValidityFri, 05 May 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1
Host: fast.fonts.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Cookie: __cf_bm=5L4b4Y9tazFru3CEhUmyhWF2orCoOj8qPWFGMaNJJ1c-1711686464-1.0.1.1-sTjfQFWLaPSIsr.6sFf3Uj_YiferU26klPz3ZuHQE.q0fz_Gu.BKnQsHNSK9x8gB1Q4ztNKXzeCJM__vQ.QjMg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 29 Mar 2024 04:27:45 GMT
content-type: text/css; charset=utf-8
content-length: 0
x-amz-id-2: 3MfqsHPaoDtzAO5M60cnj6YppXUBAUSyzeBMzUz6Lxda2ER3pN3Q8agq/kaNUhGTvfCNT/hayTo=
x-amz-request-id: RSCD8TA6YG17HWQG
last-modified: Tue, 23 Mar 2021 12:59:23 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
cache-control: public, max-age=0, s-maxage=604800
x-amz-meta-mtime: 1519217722
x-amz-version-id: null
cf-cache-status: HIT
age: 257033
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfb7db5b511-OSL
X-Firefox-Spdy: h2
|
|
| usps.teamtepei.com/static/js/megamenu-additions.js | 172.67.200.61 | 200 OK | 7.8 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/megamenu-additions.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash847cc8bd91110ff714275c5a29fbd404 cff690cc070f9539cc1c325ed150b819018e8df7 a33554bd04b3364c1e47b719799ae0df426bb17f9c8ec422bb346227534ebdbd
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/megamenu-additions.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-541"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cvJUFr%2F9jckfVQc6Hume0E0VLbZsM%2FHP%2BFyb18ym1%2F5dM%2FXSP24VGmCokAvG1CS3%2FMi77re2FcAls43d%2F1sbEV7B6stS3yd6hKVnCJwLLPC1NPVV0znAgSLWrqJp%2BWzWzxuu3eY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beef9580b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.teamtepei.com/click/addClick?behaviour=&workUrl=https://usps.teamtepei.com/ | 172.67.200.61 | 200 OK | 0 B |
URL GET HTTP/3api.teamtepei.com/click/addClick?behaviour=&workUrl=https://usps.teamtepei.com/ IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /click/addClick?behaviour=&workUrl=https://usps.teamtepei.com/ HTTP/1.1
Host: api.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: sink,sinks
Referer: https://usps.teamtepei.com/
Origin: https://usps.teamtepei.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:45 GMT
content-type: text/plain;charset=utf-8
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE
access-control-max-age: 3600
access-control-allow-headers: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A%2Fjf2Gog7q61Xcnz1hOULaQ8lOvvOr4B9d7%2FyczX7RJ3YlPzQy9mwEYZVWBAE8TU%2BJvg3hVn3ibl1zbU1snw9hp9z8Ai1mKIkqRUFAMpd1aR7b2S2a0zSkGdTkIFPLCPwzj3lA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd1bfadad00b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/jquery-3.5.1.js | 172.67.200.61 | 200 OK | 187 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/jquery-3.5.1.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeJavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators Size187 kB (186766 bytes) Hash9ac39dc31635a363e377eda0f6fbe03f 29fa5ad995e9ec866ece1d3d0b698fc556580eee 9a2723c21fb1b7dff0e2aa5dc6be24a9670220a17ae21f70fdbc602d1f8acd38
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/jquery-3.5.1.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-15d84"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f7lv9z62aalm0jf%2BiCmQZxPCzE2KBiEC%2BQKCAD7UtzA142WqxzijF9F8MTe7%2BrA00Ii%2FgtW2U1unAxH%2BGBlwNYo0KsS0nLnIx7lq%2BCzmefXlPm%2BRVJh3WOUcr4CB8R%2F%2BUrCKWYE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beee94e0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/landing.js | 172.67.200.61 | 200 OK | 4.9 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/landing.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeJavaScript source, ASCII text Hash4e11f6eb908c8883ec3c4756b798d7b7 8eaeefdf546befcb5d7868b0e4701efc995ad726 b3ab0b0d8709b1c74b5f3afa2b4cb63949741bad5d8753ab7a0284404c0aeda2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/landing.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-235a"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qngHNDtNEnLPf1f1F6B%2FxUC5w9X8vYZ9Q8bgVEi6e66btPG3CzV5KKRMNTCYmpNVpNZvFmqvF6AwPvXucKbhVlwxyHsXFBk7ehI8EnfEGeSjy2jBzFIKSZH3HqFNXkC6JDxJPiA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bef19680b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/holdmail.svg | 172.67.200.61 | 200 OK | 37 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/holdmail.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hash4c8f3d7064524311ef86ddd0ded768d1 53ca5f29f603435821d07019cf123e430626f54e 2d45f10e1a6925e9500a4fb6e0223ce4ddfb492a914472ca8229fa01e3f94afa
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/holdmail.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-5a8"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hGnK3sl%2BEDH8vs%2F%2BElgIOq2ARijmZklzfRgz1bMcqH4V%2B4QLmEwgUCIWNqQtHg25pLvTcVeTn3odig4BZBUqMZ8dsE%2FWZ7prVE9bCWBz5uFjNMQzJWducbwCbPrENgxEbRZfYYY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beed9460b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/logo-sb.svg | 172.67.200.61 | 200 OK | 41 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/logo-sb.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hash0418f7120dc6cdd1d7aa0f8219ec9af2 3bb6c6edee3cc1c072117795611e2f67383cdc44 4b5aaf0dc8f59e71849219fae0a225aeb3914bebcc363753f22b5713627b0094
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/logo-sb.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-de5"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MlIq9HBeZGmZh%2Fnhrt%2BLcHaQQSl85opj28tekozAUFpfDXtzBzBqmu7N%2FrDpy9UtsxQNtS%2FcYYoXw8TnLjQBfbcWr88sxr3fxwbfHJCdp7Kq5OCZi22nhBaEQndW18%2FEBQmeAK4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beeb9390b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/css/footer-sb.css | 172.67.200.61 | 200 OK | 41 kB |
URL GET HTTP/3usps.teamtepei.com/static/css/footer-sb.css IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeASCII text, with very long lines (3053), with CRLF line terminators Hashb57ca8ef21e6662cd44e1753364bf943 898aa74ba44766702ec4d15ed27589f313d5378f b7eeda9e9092c1bb2c28c88041c5569ec6a0dc6f1a3f54f7b07d56aa2230e4c6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/css/footer-sb.css HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: text/css
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-bef"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1qFalk0jxOHhkMaDaFmN1O6l5WwJCic6psXZL2h9Z5V3kqRLZyDaFKXuKsC7LgKmEekVbKUCqC0kdltYI4SU33NFjZx5qqRJLZI6ReIq6e8kmOjttxZVvPac8RaasWMTaXEO6yw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bef095e0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/validator.min.js | 172.67.200.61 | 200 OK | 34 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/validator.min.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeJavaScript source, ASCII text, with very long lines (7391) Hashbcb17bca17171883c8bc1dec99880fae c5c518b09743622f47bb6d75e8e9172258ce5d5e 731c763b42ba829a6e28ad983af6151f96709f91b3687f1993193a4f8fa501e7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/validator.min.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-1da0"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=853ZYm3pCNH5FHVGdZh7VaxGfZ1CLiwsylrir8ZtWxSfLnMYCG5Oogb0TxLLNlYZ%2FENeQzPaQSuhSScAvF40GW23bUs%2F9FEjLfW5soYdO%2Bcc2LPhgYCYqpMTmHZNMUdQTtZ4mRY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bef19660b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/jquery.keyboard-focus.js | 172.67.200.61 | 200 OK | 100 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/jquery.keyboard-focus.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeJavaScript source, ASCII text, with very long lines (1119), with no line terminators Hash10c052134350ebe7b387889e26d3fb37 1b199ab807a37f47b674bb8b2ae436410bca03c0 aead96d6d68e8785380f1b3595026968159fca03dba202cf59c3fa5664db5460
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/jquery.keyboard-focus.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-45f"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6maGExU8kb6Adp0khMJyHKMKcxJsPN5ONuhDxjnD%2B7zpQ7BAZAYsNysigvfAxZ1ht2%2Fq6a4qlztMVO%2B3nx2aipAQPYE%2Frk8FOPR6qIp5JYIWSByKz%2BVrEC%2FSA9vhrgh05qchKYo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bef19650b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.teamtepei.com/click/addClick?behaviour=&workUrl=https://usps.teamtepei.com/ | 172.67.200.61 | 200 OK | 29 B |
URL GET HTTP/3api.teamtepei.com/click/addClick?behaviour=&workUrl=https://usps.teamtepei.com/ IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeASCII text, with no line terminators Hash690741df170d801ab3946ac75fe39a30 f80ffc604a526368a06373573866889e27503bb4 3afe042d27eb7d76b091e3b32b8ee868943f74086f8988dbb9a860f0871a0011
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /click/addClick?behaviour=&workUrl=https://usps.teamtepei.com/ HTTP/1.1
Host: api.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
sink: USPS2
sinks: 2
Origin: https://usps.teamtepei.com
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: application/json
content-length: 29
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE
access-control-max-age: 3600
access-control-allow-headers: *
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=icU1EMyfmS9LIq2XDTeVb0qXlNxz7%2B4ZtSJwTR9Dkus8yLMoVWyrQFcqAZTQKiRp3sYxKv%2BOyvPQe1sTk6FPEukj2q5jMVijfiAoOJRoxu8otPAc540lnaabBwFYLfit3cnrFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd1bfc2b040b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/mailman.svg | 172.67.200.61 | 200 OK | 109 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/mailman.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeHTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1599), with CRLF, LF line terminators Size109 kB (108711 bytes) Hash9fde387a3cc3ad2b1744bd0c2139c008 8da30a6ce46c8c85574779d6767bd794368f37f7 665110618ec876acb77cd6bc05665aa1ffe4c90aa62f6063c0fa45b080b5926a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/mailman.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OBxB3i%2F%2FnMBkjtm4OOthxw9xVQaZURTCg6JNM9UYJUHcsbFYqKNTcybN%2Baz1VPzVgkJS9qZwUdc96hUGomG99ZHDGIp6Jlw%2FgWGeTGRMZu%2BqKH1nYXCm%2FCUYZ8x1bRQaJLVwORY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa2ab00b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/bootstrap.min.js | 172.67.200.61 | 200 OK | 58 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/bootstrap.min.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeJavaScript source, ASCII text, with very long lines (36812) Hash5a419da48d7b5f7ed34fda267cac899b 5b1552a7baf7a483457cfc229129405f7b6b94ce 6cd4e4ed31432db3cdfdf272f1066de426166a2013598db7cb71b77a47d02148
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/bootstrap.min.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-9049"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GE2cxPLp2DjCRx7rsrfgso5LauGR91exO2DH8MjcYh7WGG3nEe149uH0uXCkZZag158oRStBasdXSbbSmqp8PPmbgkwI6I3yZOBFMDIGYINKbQQRZaMVILpi89Yjw%2FzwwZFLDvQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bef19640b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/gifts.svg | 172.67.200.61 | 200 OK | 52 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/gifts.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hashdf6fcab6c4caf86e8a1401a4fc36f885 860352cea6899553cb4e7111097b35bd007c65e7 986ebc6c0f0c4b5bdb2513352dbbf3f501a36abd1dcd0c17a9c215efd95191a7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/gifts.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:45 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-3ee"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pWdtRxJvQklLZ9CQeclyxws67csDmdAJjKcXflW%2Bbrpa4jPZ9qxvnSLVIS8cbRDBDZFllZamh9qN9jDLsrjizumL0%2BWDpT%2FR3ciFNuFbOfTkV51%2FA0Q4YyEULOqLWVpfU8BX6t0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa3abd0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.usps.com/global-elements/lib/script/helpers.js | 192.229.221.165 | 200 OK | 358 B |
URL GET HTTP/2www.usps.com/global-elements/lib/script/helpers.js IP192.229.221.165:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (695), with no line terminators Hash5372347b4f98f60b33579180ef6a3567 02064f1641c40b35c14a0da9ee310de54ff76cd5 7fa317b049ed33139394313aba29f27b7f11a226270bf10ce1c26d674c0177e4
GET /global-elements/lib/script/helpers.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 72370
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Fri, 29 Mar 2024 04:27:46 GMT
etag: "2b7-505dad4fe5380+gzip"
last-modified: Mon, 20 Oct 2014 13:38:38 GMT
server: ECAcc (dce/26C8)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 358
X-Firefox-Spdy: h2
|
|
| usps.teamtepei.com/static/fonts/collectors.svg | 172.67.200.61 | 200 OK | 605 B |
URL GET HTTP/3usps.teamtepei.com/static/fonts/collectors.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hash9105cfa1479096038365d18beb23cb1f 648c5b01118cf059eede56d9dae1713ab26d965c b2728704f99e68b8edfa2b8efcb1f40e77d3abd5f6f04388c9a09232b1711043
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/collectors.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:45 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-461"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BGnDrasMPJnDDUA%2F13GN4LBiZhpaWaC9y3h9TYHTPqI4NtvJDhzLXGrqnkpWupdfmiQolqjEfZk%2B2HCPmpJwTT%2BymreSS53uCjQGrtyzK1%2FTWzWiE6EDRr2PkSNMWJ%2FZdK0PLVA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa3abc0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.usps.com/global-elements/header/script/search-fe.js | 192.229.221.165 | 200 OK | 930 B |
URL GET HTTP/2www.usps.com/global-elements/header/script/search-fe.js IP192.229.221.165:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (2264), with no line terminators Hashf7f70265f5cf47386622e433317412cb e1b28284e51c848685c7ea6d19ff551284c58e8a 766a3dfb7dab82af4fae555132f7fdbacb7d167f17015fbb23c9591daaaf698b
GET /global-elements/header/script/search-fe.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 72379
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Fri, 29 Mar 2024 04:27:46 GMT
etag: "8d8-5d77081c47c40+gzip"
last-modified: Mon, 07 Feb 2022 16:58:17 GMT
server: ECAcc (dce/26A2)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 930
X-Firefox-Spdy: h2
|
|
| usps.teamtepei.com/ResourceConfig/urlConfig.json | 172.67.200.61 | 200 OK | 59 kB |
URL GET HTTP/3usps.teamtepei.com/ResourceConfig/urlConfig.json IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeASCII text, with CRLF line terminators Hash110943bc2b4f7a3f1dda597554713c5e 6afcd916d67e9495aec1c57706317349d8418c7f d6dbba9cd982d1b3d9fe8b5075ac493d75ca98cdf12ca374caea81615e77de15
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /ResourceConfig/urlConfig.json HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:41 GMT
content-type: application/json
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-105"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F8b%2FvKIuw4H6n59QHxRxc%2BXO7C%2B0RpClUuHKZVPEhuKRmw%2FEvOjO2kOrYa7CCJMf5ByGn7%2BnHmE0oEbka%2BBAtH9wnMwMCBsC5itiOApEGyoY%2F7YMaFKDOpgSQbdF0aRsjJmc0yo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd1be09f590b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.usps.com/global-elements/footer/script/jquery-3.5.1.js | 192.229.221.165 | 200 OK | 31 kB |
URL GET HTTP/2www.usps.com/global-elements/footer/script/jquery-3.5.1.js IP192.229.221.165:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators Hash9ac39dc31635a363e377eda0f6fbe03f 29fa5ad995e9ec866ece1d3d0b698fc556580eee 9a2723c21fb1b7dff0e2aa5dc6be24a9670220a17ae21f70fdbc602d1f8acd38
GET /global-elements/footer/script/jquery-3.5.1.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 72424
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Fri, 29 Mar 2024 04:27:46 GMT
etag: "15d84-5affcd6633ac0+gzip"
last-modified: Wed, 23 Sep 2020 15:35:47 GMT
server: ECAcc (dce/2687)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 30950
X-Firefox-Spdy: h2
|
|
| resources.digital-cloud-gov.medallia.com/wdcgov/2/onsite/embed.js |  104.110.27.57 | 200 OK | 527 B |
URL GET HTTP/2resources.digital-cloud-gov.medallia.com/wdcgov/2/onsite/embed.js IP104.110.27.57:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerDigiCert Inc Subject*.digital-cloud-gov.medallia.com Fingerprint84:B5:7D:49:49:24:06:EB:EA:17:83:AB:54:4F:3D:08:4E:12:19:EF ValidityMon, 01 Jan 2024 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (587) Hash161f3ffdd8fbf5772f908037058ea438 97acebfeb3a13b781065cc8030921807597a74ed 7b2481293f443bce9d5faf5ff1376eeccc16275a8b2c76950f155a3868114ea8
GET /wdcgov/2/onsite/embed.js HTTP/1.1
Host: resources.digital-cloud-gov.medallia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: nJxz6qT1lx8iSSlELJSJUhn2oY3smTvOr+a34ZI9fzx/usmaPyOV6iWK00qoAOwDNUbcbh01xu0=
x-amz-request-id: 8BEZ3DM4SRCM39Z2
last-modified: Thu, 14 Mar 2024 19:21:05 GMT
etag: "161f3ffdd8fbf5772f908037058ea438"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
expires: Fri, 29 Mar 2024 04:27:47 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 29 Mar 2024 04:27:47 GMT
content-length: 527
access-control-max-age: 86400
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| www.usps.com/global-elements/lib/script/resize-manager.js | 192.229.221.165 | 200 OK | 468 B |
URL GET HTTP/2www.usps.com/global-elements/lib/script/resize-manager.js IP192.229.221.165:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1040), with no line terminators Hash90d8fb00194d91e9dd20281817c285d6 e7e37421b14a39e0d3787988a52a45d27ec3761f 479b585bb1f3ca011746467c115b58ca0cd6ac62aa68c9d953635b3344953887
GET /global-elements/lib/script/resize-manager.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 72397
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Fri, 29 Mar 2024 04:27:47 GMT
etag: "410-5057c23b98e40+gzip"
last-modified: Wed, 15 Oct 2014 20:40:17 GMT
server: ECAcc (dce/26B9)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 468
X-Firefox-Spdy: h2
|
|
| usps.teamtepei.com/static/picture/free_boxes.svg | 172.67.200.61 | 200 OK | 23 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/free_boxes.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hashdc788e0d1e8c7d9463a99882e622730c a079d9612a9c119a9419b620d9dcfc141dd7e011 a3f1dfab56de547e28606e3e2150167339be6a35c8385486066924874d14df47
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/free_boxes.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-42a"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PBMmdwekMRK9oYtpBv1QVWnNU5c4ozduzYXyNjmjWf93YBgyKJ0prgJ03xkzJbpGGiIksYeyXiaHIuQ1dyrJVG1nBoSNBZkHUESfj0mm%2BKa1DxzG7mC7AxJu20Zo%2BGPPib35HeU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beed94a0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/change_address.svg | 172.67.200.61 | 200 OK | 12 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/change_address.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hash3955e49630deb78cc1212ba20d83bafc 881ba502127d57c48784703683869abf4c8e28d8 b84842a014070d9363a46638e512476260162014c9bde4bcca7a9ade4177ea12
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/change_address.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-74d"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Umad8ShjI9Jr0vbVr0lTyrliK7R9ztGgYeGM7D0ZovIc42D9Yw5bRJT%2F75sUg%2F4%2B1IHzoqucvdrplOxoeDRllOLPbKCAyomDZIRQVAUqpLlf52qVPRNmb7wnMOkZD0dKfRvxaJQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beed9470b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/css/footer.css | 172.67.200.61 | 200 OK | 2.9 kB |
URL GET HTTP/3usps.teamtepei.com/static/css/footer.css IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeASCII text, with very long lines (2924), with no line terminators Hash8f712712b0de29097c944acffb88091c de7c34ad57e913b27cefb63c472ca27d02ae5df2 173e627d22f2d55b5d8e377edf12bc26f078028c91efd78365e5ae80f59da2d1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/css/footer.css HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: text/css
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-b60"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ebporK5aegcRcoe0abAl8AhFz%2BQBi%2FDCOigH1Qsx4yy1EjxxDjzDA%2BWHLUQZbOwxvYVWghDtSzlKkFa8B0O6UqNb67hiqJsJAB%2BiK%2F2MkZrdKr5ClzbLb1oz9gXWccB0AlUFJ2M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beea9290b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/hamburger.svg | 172.67.200.61 | 200 OK | 546 B |
URL GET HTTP/3usps.teamtepei.com/static/picture/hamburger.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hash877d4644f0a505bf30be77169524e441 d85faf0831fb39673ad3733ad6ecf1d8bac778cd 2336a119dddc7aa4b6d54a4ecd251f5a30cf0572816db55b92e9f0b43ee63ecf
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/hamburger.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-222"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=en%2FXtv%2F3YdNC%2FmChudXAzZIeBBXKlbi22dl5KF7982coa5mW1AUqlRT2y43Zw3z5GSBfp9dmqIWFjvFYN%2FY8Jvm6tvpVbNvzLoNf4VHU2bSKzyE7MCipknGW94pXcGtlGDkBo9o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beeb93a0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/stamps.svg | 172.67.200.61 | 200 OK | 52 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/stamps.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/stamps.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tuvQm7paPs5E%2FLX8g%2FUjHY%2F1zQk2KK%2B1cZFafjFm9qx4gqW9VR2JbkE1Qzld%2FLwaThnTM1Rhncg5SFUIy7e7DRDL180L7YrEv%2F%2FVNYqu6WUiDmr8%2BoO4B5z1pz1TvshOm1NJ7r4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa0aa70b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/mailman.svg | 172.67.200.61 | 200 OK | 1.8 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/mailman.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hash7e63b1510cfe1e7b2e2c00dbe7b48f49 7b13f782d0ea7d101e612cab914da1574180fa76 3bfb113a66658cfbfb3238b0210f43d4e564d7fce174ee72f3ab8d3b8b3cff41
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/mailman.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-723"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GkjnYINXHj4kU9ZymjpuS3xCWE9lww66AB18lWYStwsb3d2NQLHk2r%2BDilmj3NKO%2B676mDcxcfg%2FBLtnlS3sLZd%2BJ%2B%2BUpCb30xgAsEAMP68wArqcqMF3VacXlOPd45s3MFMdUuA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beec93e0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/css/main-sb.css | 172.67.200.61 | 200 OK | 7.9 kB |
URL GET HTTP/3usps.teamtepei.com/static/css/main-sb.css IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeASCII text, with very long lines (8068), with no line terminators Hash240d2c6020f53f231be98f099dfc00cf b855005ba3a6be537b754a324853a89f53f33150 ea58be7f60a5c2d65f14278ed684965d8c69be76db4562a9eaef78844d271ed6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/css/main-sb.css HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: text/css
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-1f01"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HjlfRMCfD4yVZI8tIvrFyt1q4F2OVQWDHFBHaowJXXof6%2FI5Np%2BOLc%2F17pTA6oqRGBWcDR7erDb6g4zdy9uvqS8xkoKQh6IQtyS81ofeBueiPp4WqMlPyPY9EMTlvO3BQePPWwQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bef095d0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/schedule-redelivery.svg | 172.67.200.61 | 404 Not Found | 153 B |
URL GET HTTP/3usps.teamtepei.com/static/fonts/schedule-redelivery.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeHTML document, ASCII text, with no line terminators Hash2311107fc4a0cc05c1bf56cf25df6b90 f60e44c137b1c78e8b732aaf85e8d9efa0043140 518be356167fcc8b31e415bd6054a1214b010541c1f2a21d6839cb9bc95987b0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/schedule-redelivery.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=opYfcxWDxihXuvh7%2Btm3t7RkjrvvN3XbQsXDbj0nw8C3ihhcUmceXkIityi0Ap8getgLkb6OLnPnCD3cPgsA108oP9AtR5AFuT9sDqK3c1MNtiU2kDf2DNewcCIhu3TULdMuZqE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa2ab20b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/3b303641-706e-4221-94c4-4fb491f4f8ef.woff2 | 172.67.200.61 | 200 OK | 32 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/3b303641-706e-4221-94c4-4fb491f4f8ef.woff2 IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 31696, version 2.655 Hash10290cd4148c956fa2287d2ab5c71631 0186c7c5f9e12701022362effcab5c7f08ef0a29 0419465d8b720ca4a1a4307e1aaf37c9c1fda715473e458a9e7d1a94854c68e3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/3b303641-706e-4221-94c4-4fb491f4f8ef.woff2 HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/main.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: font/woff2
content-length: 31696
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: "653f5e13-7bd0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B6cseggJA%2BRyV4ynlietszCoAVoexwVAWOHHrbK06M%2FfM76tkHjkeQYEkOaQaYrgtZJDTRC9AvHS6qliamcylrufFDebthwKMq1aBrVTqxmjfb82xcfIMTSlVoQqYzww7y2jCDQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfadad40b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/us.js | 172.67.200.61 | 200 OK | 1.1 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/us.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeHTML document, ASCII text, with very long lines (1239), with no line terminators Hash521545b0f7e96f3b10f337850665452b 16240deeb0f6f95fc7b1a5e9b34a33c72def413f 0fbc52576d1edee5f3bed2b51c4c97a00fad81b7e5382ab9fa39a5ba39c03fcb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/us.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:41 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-43f"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4GTwb8GsrQTDuyyBaW9G0xRNeiSX2jrZRb3XBQFr%2BMNuUCqFYRX6OwIul59hSsGD0CETSzNyxkEnvBZB%2F82FumbXXFUYkFD7QYlc%2FiUQY3PKj9lpRv5clnaIFFgv7uJxJUxb5bU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bde3f210b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/nav-red-chevron.svg | 172.67.200.61 | 404 Not Found | 153 B |
URL GET HTTP/3usps.teamtepei.com/static/fonts/nav-red-chevron.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeHTML document, ASCII text, with no line terminators Hash2311107fc4a0cc05c1bf56cf25df6b90 f60e44c137b1c78e8b732aaf85e8d9efa0043140 518be356167fcc8b31e415bd6054a1214b010541c1f2a21d6839cb9bc95987b0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/nav-red-chevron.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CAatIvm165FD3m6PHWW81FrTMv%2BTI2LYusrCYrmuW1htcGibKZqjnw5aDD8wJE5l53XQ2MFYOURc72B1%2BISNJehqLO%2Bb2wPMlYdNUgfN0uQRZUQQYS%2BtqHyacqbkVkzXY4FHNEk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfadad30b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.usps.com/global-elements/lib/script/require-jquery.js | 192.229.221.165 | 200 OK | 74 B |
URL GET HTTP/2www.usps.com/global-elements/lib/script/require-jquery.js IP192.229.221.165:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashf735d63751fc4b77e05b807f7dbb74ba e4e42cbfc17717a40f755213b67d84ce54d792b8 44b301dd27674e82ffc06d7635a718402c2de5c95081c398d26e19b387d7aac0
GET /global-elements/lib/script/require-jquery.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: https://www.usps.com
age: 72363
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Fri, 29 Mar 2024 04:27:46 GMT
etag: "4a-5057c23aa4c00"
last-modified: Wed, 15 Oct 2014 20:40:16 GMT
server: ECAcc (dce/268C)
strict-transport-security: max-age=31536000 ; includeSubDomains
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 74
X-Firefox-Spdy: h2
|
|
| usps.teamtepei.com/static/images/footer-logo.png | 172.67.200.61 | 200 OK | 5.4 kB |
URL GET HTTP/3usps.teamtepei.com/static/images/footer-logo.png IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typePNG image data, 221 x 27, 8-bit/color RGBA, non-interlaced Hashccd62119eaa0e3697f60599487c51ad5 8e44d3123b4ce2005c76a2b8dcf7870058d2a82d 1cc43a97be92fddf0fe4244858f5337c80a8d350cd0afcd0c4d2004d3fded0ab
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/images/footer-logo.png HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/footer-sb.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:45 GMT
content-type: image/png
content-length: 5390
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: "653f5e14-150e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8rJYePHS45x0cOUxPv5shDZNd4eHW5uV1mClzqh9Yspw5uU7BYh1nay2DOMIoxPIxJGZsnzWJ%2FMYk51oyOT%2F%2BcByTpQiUSNuuMT%2Fq90R9MosQplBVsjVpE0EoUl%2FTMDa7xjvzYc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfb5aea0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/images/mailman.svg | 172.67.200.61 | 200 OK | 1.8 kB |
URL GET HTTP/3usps.teamtepei.com/static/images/mailman.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hash7e63b1510cfe1e7b2e2c00dbe7b48f49 7b13f782d0ea7d101e612cab914da1574180fa76 3bfb113a66658cfbfb3238b0210f43d4e564d7fce174ee72f3ab8d3b8b3cff41
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/images/mailman.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:45 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-723"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kzQKrTYzkNSULiaK8icr%2FVZX89qyUEVFygmLAucEzNeLlzPzI7Ipf9qiyZylsW4rwhmU4xy5eAOKxJOZMsjxqh6EqUEm2hf71qcLgcX9XLLcNZTp5uOA0dEa58k4MoYXqT0jWp8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa0aa20b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/images/loyalty.svg | 172.67.200.61 | 200 OK | 2.4 kB |
URL GET HTTP/3usps.teamtepei.com/static/images/loyalty.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hashc6abeba68f9f1fa28702dab2f96bb6b8 64791c82998f05e0803d64bf688b594297b965d8 ac8121048bf3dc65e8e60b5e14014077ce4c2198b4b7e2d7195a25828201e4d0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/images/loyalty.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-97d"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nui1nSHZO4qoxeOarGb9dcb4NMNSpYFgRMjEMWD2jyx%2FTPwFSH3mjzPEC4iN3D1YGtELqR26aN09YpkJCE7e5xcGj1IJesKLG2uRrxs6YvSVbBBAcT7hto%2FV9i%2BujAZABhw9j1I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa3abf0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/462d508d-efc7-478f-b84e-288eeb69a160.woff2 | 172.67.200.61 | 200 OK | 39 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/462d508d-efc7-478f-b84e-288eeb69a160.woff2 IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 39112, version 2.655 Hashe37c1d87055e7062c217e73098ab36d9 61f4c682ce807183e59a52ded2c9af89a419fabe c98cd4bd3267c7d8484044bff1fbffaf0c2362edc04917457244809e1f24e404
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/462d508d-efc7-478f-b84e-288eeb69a160.woff2 HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/main.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: font/woff2
content-length: 39112
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: "653f5e13-98c8"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PBSQxwfqPoV%2B1s%2BB3suevVbAy39pATmwEoLD4kG10LNL1rlu8DBG3E%2F%2Bd3sP89AXvz4IcaRsrdcxu0RSHVHuWKg9xnWN%2FzB31idTFjEDSxylag7N%2BUN8Nzsi9UJ6WspxlyWEpkE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfaeada0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/optimize.js | 172.67.200.61 | 200 OK | 118 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/optimize.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeJavaScript source, ASCII text, with very long lines (1720) Size118 kB (118492 bytes) Hash649c3e8e8378fdc785ae5fbd51f843b4 5eb51f662d4652db4932aa3bd444a3399923a9f4 8ff752ffa3c7cc5de38982c9e9e02bcd12f7ec83d5401438af6cc8b983b6d32a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/optimize.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-1cedc"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q4jgwa4UtXx%2F6V%2FX9RLQGhMfXkaLLGqcar1DAdgEuoNrLInlGaYiWJQsKYg9aBwurb%2FUgCXPxGQFaLwDTzynxF77E8jTK331tR41fsi3YIdXFF8rZ6IJlkEHsc1FSOLg06tLs5Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bee99270b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/logo_mobile.svg | 172.67.200.61 | 200 OK | 2.1 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/logo_mobile.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hashe2168d4dc7567ef926b7623237981a82 e316de76563718e76dca3496358cd6364e283f94 bea15c662f2670c57110879e989f6312ce35fe454a22a7b46b2b63e908337784
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/logo_mobile.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-80c"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YA5aess4DbEqx9bYIOCuc8O9snff5871PagDPtq%2BBJavr%2BylofvCU3S3xvA%2BKMX%2FrAVWSb6qnHC97t4kSgt3q5Cqt5ZZ6213U04g8wbjzebfcko93hh4rBdRgCsE5qXdl2UiT%2Fw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beeb93b0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/ResourceConfig.js | 172.67.200.61 | 200 OK | 16 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/ResourceConfig.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | urlquery | suspicious | Suspicious - Suspicious Javascript code | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/ResourceConfig.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 06 Nov 2023 14:01:09 GMT
etag: W/"6548f1a5-3dd9"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I84xXc8uU1VUIJJeBj%2F4Aih4nj8SnPSXrw7xu%2FgkhgmHw6QH5uJfRp1oa1Dp593ktOcBoH64%2BQIzlBcrrkfdKy3p7GD5cnfEKdMkxrEyScTB13l7dUYwjdoFNxuIwNM3w%2FltSf0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bef095c0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff | 172.67.200.61 | 200 OK | 59 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeWeb Open Font Format, TrueType, length 58690, version 1.0 Hasha6e2d3921c9ea0fd81897d9ae7a33ba4 bc31969f2fb1926a15cd678b3e573c37a44e5421 f2e2ef638dd9aac863f0f6027ceb784cd4c5a14a676bed909c8f2ac4b088d510
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/main-sb.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: font/woff
content-length: 58690
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: "653f5e13-e542"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MrMH77qX64aTo7bobVsDuqH%2F9Yi%2FZyE9y0dVLJAOMEoPVxkWhJuJtb5a7bsDqWsVe3%2BN7psjIvBB2LT6iqDzqFhna5usU9J5T0j1uMszuCk2K9K9yOgeHwh7SgxqIXMxa6RQlmg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfb5aec0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/header-init-search.js | 172.67.200.61 | 200 OK | 904 B |
URL GET HTTP/3usps.teamtepei.com/static/js/header-init-search.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeASCII text, with very long lines (964), with no line terminators Hash7970c1b8c1d52efdac61d94339578276 e76bef0dd2ca49af09d70c1eb65243b91f21f11d 7030f4d79b1c80b071817d31c710667ca861245e453c877d9afce871e7e66cea
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/header-init-search.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-388"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nKHjDOGWGB%2BvSdCwd2%2BpCB83JyDX99FhhJL4a7I%2FwkrB4KMJy82p4CcSZBDt6kRVAG7117PdgW4ObieSvmZsNcTfCHGCOEgCjCA%2FzsrYsBfwqp%2BhPC3X%2Ftomt%2BKfLfzLGcquVdI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beef9560b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/featured_clicknship.svg | 172.67.200.61 | 200 OK | 1.1 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/featured_clicknship.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hash4eaba35653e775df78f96942d040dcc3 f5fd90e8f32041520795f0c82a1652124a02f93c 08f3c04fe589387977fca30dc02a87bf42ce3c066fc28c1071be412aaf9cf852
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/featured_clicknship.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-436"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SCGSsP3bcfZN3dgfzZfunfxn%2BYbvGl3rP3zFpYYyqaxzxmuQ0X3b5O%2BfEY%2B7UoO%2BRbtqZlm0uY6nkvSEHX58BQRaMjWSHsZwW5TALRjUBzIcp3HLa8PnhHWOE7cEVWqmlL0qFvo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beed94c0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/onelinkusps.js | 172.67.200.61 | 200 OK | 3.6 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/onelinkusps.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeASCII text, with very long lines (4144), with no line terminators Hash2575b25dbdbd1b914b3c983cb24bcf90 31a451e8403be6b3f4fffb0bad224b1e02464c0f 07b3aca05a0a6d91a57cd83bafc5366a099a5719cab8a5a672a4ab732ae3c2f5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/onelinkusps.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-e37"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YmfhSUsqmcr03fZL5gspjgKzoLOHqOU99RKuGYRw94jH9sQ%2Bvq5MSyCFce1bzslDTVz0UUvryF3ng7UH89Ut43RiBQXBX0FeSUN4wUOg14clVYqbD4K4mE3EJOCxqNnVhPi6ZMk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beee9530b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/css/megamenu-v4.css | 172.67.200.61 | 200 OK | 43 kB |
URL GET HTTP/3usps.teamtepei.com/static/css/megamenu-v4.css IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeASCII text, with very long lines (42778), with CRLF line terminators Hashffff53c10c3ee489b1b0100d34eaf6be 2b388dc2ee7341a6b183e2652f2a07953468164c 12608b8833ec103ad06f97ca844c653f22dd8e03b50632d8d6bd3dbccdc5c422
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/css/megamenu-v4.css HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: text/css
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-a71c"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wLHtND4Y3Opcvu6OiWCzyOtkOotR%2Bnpc5hAFYe%2Bq6VHvHlZZqyPvz9vto6YhehG6RGxNuJaghVwbVL3%2BjTJQrjvpZLtl%2BmSL3p3V7FE%2BOlbk5%2BjURiKziZMdR2HIPZD9vWajFMk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beeb9300b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/images/location.svg | 172.67.200.61 | 404 Not Found | 153 B |
URL GET HTTP/3usps.teamtepei.com/static/images/location.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeHTML document, ASCII text, with no line terminators Hash2311107fc4a0cc05c1bf56cf25df6b90 f60e44c137b1c78e8b732aaf85e8d9efa0043140 518be356167fcc8b31e415bd6054a1214b010541c1f2a21d6839cb9bc95987b0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/images/location.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 29 Mar 2024 04:27:45 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xWGY3P2Daw64UQ4lAHpjwiIaVcfWimhXL9gDc7N7v9qmfthadxoI7hogyJA7o0LA5kvlFunOJnwBcXeM08JiiXhKHozqma7peUrIY7tJI1k7UtsQ2lV8m5zHo8HsxIIGzCy8V%2BU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bf9fa9e0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/css/tracking-cross-sell.css | 172.67.200.61 | 200 OK | 3.1 kB |
URL GET HTTP/3usps.teamtepei.com/static/css/tracking-cross-sell.css IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeASCII text, with very long lines (3072), with no line terminators Hash1748fdddbf9576848c632cc84284cb18 9375f807310e395cfb36a1a0d04df4ae78cfb397 504797b896dd4ddf1f976e9b4719bfcec92f5a897a44760c6dcf42fcc40812d3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/css/tracking-cross-sell.css HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:43 GMT
content-type: text/css
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-bec"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f4auFMjyHV4r%2BQJ8KEZYQyezqMhGe0vnmEYyWHTQJF4BX8nEzQpA9%2F3%2FoZvm0m5W1tsFJsCNB0Lng%2F1ccqF%2FamLTQ77IP8VU%2BDOb%2FBhbG4kzTbZNHL0f4jU%2FHSrAwtVcSf53d%2BM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beea92f0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/find_zip.svg | 172.67.200.61 | 200 OK | 1.5 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/find_zip.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hash947f73db1be85b62c0a78fd947ea8f48 4b7cdd980fc356f9afc040ceaa1e4eff64eccdb6 65633c2f9e1f520fcb432d8f51929e8d0872964d876ff9d19e882af7eada0166
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/find_zip.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-5bf"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FRIyDV%2BW5fPfaf%2FIWgVH7%2FgkdNAkoJ%2FXyWsckkYys8SCMsWezG0cffsgLa3DsVIPILxbD%2Bm%2FmGXTVruZdTlTakhQgIMJPh73eDVwicvqG62CBE5X5kOpVflvv5M1kCkKjAEBfdQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beed9450b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.teamtepei.com/click/queryIp | 172.67.200.61 | 509 No Reason Phrase | 12 kB |
URL GET HTTP/3api.teamtepei.com/click/queryIp IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /click/queryIp HTTP/1.1
Host: api.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://usps.teamtepei.com
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 509 No Reason Phrase
date: Fri, 29 Mar 2024 04:27:45 GMT
content-type: text/html;charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: *
access-control-max-age: 18000L
access-control-allow-headers: x-requested-with, authorization, Content-Type, Authorization, credential, X-XSRF-TOKEN,token,username,client
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: *
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jiYE2agfbGE2Jryj6vBWoAp5OICDiDdYz3gGV50GbY7CtSen6DwBb%2B5faUJC538ibbnskq%2Fh6m%2BA%2FR7oVz9aGF3sDYU8XK0VuPrpeUVBvXw5vvCUX4q5Q99p7hf%2FcT1VLuEMjA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd1bf70a310b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/images/utility_languages.png | 172.67.200.61 | 200 OK | 1.5 kB |
URL GET HTTP/3usps.teamtepei.com/static/images/utility_languages.png IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typePNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced Hash410956805d5701e87299cff412827e1a 5de9a390649dfc12e3d6df431140d499ad8abd67 6e727dbf5b0f4a3ec76762e445ad2c5cb750f7de41afb8b0342f903124d09826
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/images/utility_languages.png HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:45 GMT
content-type: image/png
content-length: 1456
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: "653f5e14-5b0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AqQ7inwzfJP9qhRcFj7zjf8eNeMYX4swqd98z21eF%2FuNiFfv5jf31sZgJ1t2B9k0UD6%2FGG9Qr941O0eg%2BPr02l7FpiIsO5vKg4v88PW%2Fmyn9Avlz9d%2BmOBHFbzOVokeMZNT0i3g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bf9fa9c0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/jquery-ui.js | 172.67.200.61 | 200 OK | 1.4 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/jquery-ui.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeASCII text, with very long lines (1452), with no line terminators Hash41b0999494be450f941d147a1b4e8da4 f3c6bb5dca48bc65a85110db1dae651ac5c3d9b5 523325d1f02572c5e57dab27b722584e4796944e26f498c18db7cd1dfe425cad
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/jquery-ui.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:41 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-59f"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OHMajGJGM0YSO4tOFpA6UGTgwN2KnuwY0upn4sp95OnR3IJShHZ1ffoyrxhM0BTUNc5MYRhdqrx%2BejmvRPbC6hRW%2Fv2FvDgPM0GUtBsdDSE7%2FjoKP83PwgbfEgnQ8fGXF02SAt0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1be0af5c0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/find_zip.svg | 172.67.200.61 | 200 OK | 52 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/find_zip.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/find_zip.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L1niVqmXr3e%2BX6dObYYJHyqN9KpHLUQiyqW1xCk%2Bi6Wuomw%2B9JHgZjcZFF4YciURd%2Fq2mQaNrCn3AOVI3DR8T2Cm2zua94g9qsvQ7psS%2BWrQ1J4MuX7VMN4yhRY5rMZxqWB3T%2FM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa1aa80b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/po_box.svg | 172.67.200.61 | 200 OK | 52 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/po_box.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/po_box.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=diohosG0OCGvmXovJMCgtLNjSlmIeVrUH0dOCSDHjXh6xFxyM5t%2F2vaXPiXrL29q2X7yd1YpOXZ%2B4bh57AtSSYOZlfQfXwlV0A8NBGa6RX3TUgPLZH3HhPEWy72ajgEYE%2FFewxg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa2ab70b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.teamtepei.com/websocket/274c4bd7790f98846f33fa355b525127 | 104.21.60.191 | 101 | 0 B |
URL GET HTTP/1.1api.teamtepei.com/websocket/274c4bd7790f98846f33fa355b525127 IP104.21.60.191:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /websocket/274c4bd7790f98846f33fa355b525127 HTTP/1.1
Host: api.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://usps.teamtepei.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nQyIvpR4v2pLVspHVnUYPg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101
Date: Fri, 29 Mar 2024 04:27:42 GMT
Connection: upgrade
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Max-Age: 3600
Access-Control-Allow-Headers: *
Upgrade: websocket
Sec-WebSocket-Accept: n6oWLClHFinyhgFxCu8vS/iC+SA=
Sec-WebSocket-Extensions: permessage-deflate
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LMsgeYOVVXOXgoCdRJtzNsizuEebUA%2FMg0JOZ6fQrQmOtr6WurhriagEMVA6%2FPu%2BrekL5S0gwS0Ine33W5A6aArzbzXBoh4cgotDGE%2FB9io0r51YjwKM2OJ0LLyrf1mlNavtQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 86bd1be5d91db50c-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/icon-personalize-stamped-envelopes.svg | 172.67.200.61 | 404 Not Found | 153 B |
URL GET HTTP/3usps.teamtepei.com/static/fonts/icon-personalize-stamped-envelopes.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeHTML document, ASCII text, with no line terminators Hash2311107fc4a0cc05c1bf56cf25df6b90 f60e44c137b1c78e8b732aaf85e8d9efa0043140 518be356167fcc8b31e415bd6054a1214b010541c1f2a21d6839cb9bc95987b0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/icon-personalize-stamped-envelopes.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 29 Mar 2024 04:27:45 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gI1LgwbOlf58SGz9%2B2%2FJokP0%2Fh8NETF3xJjYxZmQYcgdwQIamFMTpIApXKJyRbHI5euPnFakPu9QBkrx4r02PDa61Byi0xi1EbPbwgIjXiaWWxcKZfk8IXNnppMmYcgNcDYgmZE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa3abb0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/images/printcustomsforms.svg | 172.67.200.61 | 200 OK | 2.5 kB |
URL GET HTTP/3usps.teamtepei.com/static/images/printcustomsforms.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hashc0b073578837924579ce25dc32d69c37 9b6cc85096bc4c634fe5625c7f399a273fd468d1 f6b5598453fece3bdf76222a246cc73e36d5df1896420a35a3c31c3b58cfa2ec
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/images/printcustomsforms.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-9e7"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O6IquelqtZNDwT7M8kE4I%2BR8WlQCoNnqteBR%2B4rJeKZMvTG%2FneAyn2BClANOqEEwe8pkQ8SGQ2qaA7XgKvHM9U%2Br8Ok1eANSVv%2BBlfJ%2BlauHhu8D1DHnxDREVNwooZ%2FCWjrItyo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa3ac00b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/css/main.css | 172.67.200.61 | 200 OK | 84 kB |
URL GET HTTP/3usps.teamtepei.com/static/css/main.css IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeASCII text, with very long lines (49484) Hash49c08d404b1b7f928d0620bf933dc391 c03353ab9593939f553cf5fe5ce11c28fcb482d9 7488fa2a2c396b5f1fd2992492f92757cf8b8c465367a91166fc59067ed0e9fb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/css/main.css HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: text/css
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-14778"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=omqg3vfNBusuCauMYBYj4A8dK8RN9SytwfoZ70WVBmYEYRw8p242W4Shs1LSYycwY7WQtfWDLPLLKoWfCby2O3qNJ0LPJp0FSy4e5pJue9J%2F6%2BLJA7XQLHXMhaOv%2BmRe8%2Ftq4Cg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beea92b0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/require.js | 172.67.200.61 | 200 OK | 17 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/require.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeJavaScript source, ASCII text, with very long lines (17192) Hash16e572a4f80526df4bc3cc7ff056a9a8 f23b5c2fd52e855245e3d2586cd911051561e64c 75237772a7bc8c6eaadbe642be69503335c5842af8981688250a8d4f0f61c377
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/require.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-440f"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rangN0IEP34ZBCPfqdnsd7BSVmDjnlgm8yi%2FfJG9qolwB2lDfB3K8mCwJ0gO%2B2LwnstLUbV45q9tn5lz4IlTMK7aIhSpd4Xs5TK%2BDxZLmi0wCB1KMq8ClYC8Gxarg94w5Jwn01Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beef9550b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/calculate_price.svg | 172.67.200.61 | 200 OK | 52 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/calculate_price.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/calculate_price.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5DU9CZlQJVcWtA5E%2BhAEdW9Na%2F0Pgjx2BlLDQA8q706qMBHF8xt514w6G24K62eeD6uyAHoa34tcWCV2lb%2FBPo8X7qiNvjOOYShLFiWDMA7zv%2Fe035LkIMD2acEEOISAlnpRl%2BM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa1aa90b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/search.svg | 172.67.200.61 | 200 OK | 52 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/search.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/search.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JooVBXaNKa4N6tE5obZzMGejMQ%2FyNyuBYHcAX93L6RqOwF4o6VVIPMMZwMlkqYCZigOPbNeeRDNLqOuzVIDcsYKZgG9EgKti8aRlkIWg4dDQ6gMpXR3gGhA5Vcurz70eiy3FZb8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa1aae0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/location.svg | 172.67.200.61 | 200 OK | 2.6 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/location.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hash2b06f7a382ea90d910403786f60f9d81 9f10825ebeb9516e451a6077b1d0049a352b48e3 a0e33a0b87e479cf85c9df62303b3952357a0645e6c7c36627a43fccaafad182
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/location.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-a1a"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QUVrtLdrZ%2BSGtLfWBLqCFB%2BUhKzrJS1ZA%2FwCDtEkeydIlj%2FYG1TAZxuNfakCe1U47g4lyn9EyRaZzdEYD5ALdKIDTwf6MFlPZoK17YrBudgscigsy4OHdGJVSUxHe7dZJK4PVAk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beec9410b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/stamps.svg | 172.67.200.61 | 200 OK | 1.1 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/stamps.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hashaa929e4b4109978bc993e27357aae805 90fa6376d480e4b223c10365a264147417064271 2734c778268298b5302a62fb13085c40eff83b394ccfcfbc0bc70918589f45f7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/stamps.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-44f"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SobQEdtb4q4WuLyPo2q0dd4Xko3qbSjcJ7hhvXBVc0vK5tL2z0KGKcQuGKApaUXnO4mk5yybgc0He6y89W6UUBOONRHDztr93nEN0VTL68%2F42JMWcuq7SnA24Zh4v9BcDbtnGE4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beec9420b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fast.fonts.net/t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0 | 104.16.249.67 | 200 OK | 0 B |
URL GET HTTP/2fast.fonts.net/t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0 IP104.16.249.67:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintB9:2B:82:F1:50:51:EA:B4:39:81:75:2F:6E:8B:8B:94:55:81:C3:47 ValidityFri, 05 May 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0 HTTP/1.1
Host: fast.fonts.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: text/css; charset=utf-8
content-length: 0
x-amz-id-2: ki65sQC1HlYAvAwzpIlg68BKJDoZiZ/BwbN/hDH5RUfm7vMSBZqfat1D29ePjiEs20YJy+049dY=
x-amz-request-id: 4MWDSXH8MPCQQMJM
last-modified: Tue, 23 Mar 2021 12:59:23 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
cache-control: public, max-age=0, s-maxage=604800
x-amz-meta-mtime: 1519217722
x-amz-version-id: null
cf-cache-status: HIT
age: 83646
accept-ranges: bytes
set-cookie: __cf_bm=5L4b4Y9tazFru3CEhUmyhWF2orCoOj8qPWFGMaNJJ1c-1711686464-1.0.1.1-sTjfQFWLaPSIsr.6sFf3Uj_YiferU26klPz3ZuHQE.q0fz_Gu.BKnQsHNSK9x8gB1Q4ztNKXzeCJM__vQ.QjMg; path=/; expires=Fri, 29-Mar-24 04:57:44 GMT; domain=.fonts.net; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bf33bcdb511-OSL
X-Firefox-Spdy: h2
|
|
| usps.teamtepei.com/static/js/axios.js | 172.67.200.61 | 200 OK | 43 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/axios.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeJavaScript source, ASCII text Hash1eb8e8e2284670dc214a3e70c25992b8 94ece417aa560aa8de906e8f54c0985da90364cc 96b65382c74cd6255d4628044c5394f2ef3f0662d7d72b10f1bceb50b6ee5455
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/axios.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:42 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-a6f0"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ti%2FblOOhKXZomcnNJtmp4L3%2BLjQBWIxTJ%2FXn6udx251yOLPIjUW4m0JuLDE3Pmsnco9qupoDAIComplTXFOng4WJQD34YrWTxXJzceQq3xVZabZf%2BtBmU9TUrHNlbth4N8tBNpk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1be0af5b0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/modernizr.js | 172.67.200.61 | 200 OK | 11 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/modernizr.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeJavaScript source, ASCII text, with very long lines (11084) Hash66e83c4165a234cdda478a9c55cb90db 22e9211030a1f612ef4acd010185181bde967307 779ab662607b48249e86f3c27e9eafff4bbc808b48899a439d5cd9b2c78f99e6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/modernizr.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-2bfd"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P%2FZqmpbBMPu1VHdYYzNV4fqatUJPpxerm1lWD5q%2FJkn%2BUyucj3fGyrw2Fy9LnX9zrfZQydgVHUIsxYv8RU83g%2BRfllaygSZijqabJoxccFjWpYkmNBPVRXSA7XXTcUD3QLjqSdI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beee9500b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/__imp_apg__/js/sed-usps-70fc8edc-qa.js | 172.67.200.61 | 404 Not Found | 153 B |
URL GET HTTP/3usps.teamtepei.com/__imp_apg__/js/sed-usps-70fc8edc-qa.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeHTML document, ASCII text, with no line terminators Hash2311107fc4a0cc05c1bf56cf25df6b90 f60e44c137b1c78e8b732aaf85e8d9efa0043140 518be356167fcc8b31e415bd6054a1214b010541c1f2a21d6839cb9bc95987b0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /__imp_apg__/js/sed-usps-70fc8edc-qa.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 29 Mar 2024 04:27:43 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MtyAcIiC0NVFt%2BAuEKZCI%2BqupUmTIVjAWkjy%2FRX8tyQT%2B53vPX5ONb6f6ls3ZqxysuNnqQclUuJ5an06s375dcSNjmDraQMsqlsRWkzllVYrp0SnVmt9l%2FAujJhB0SehodzZsfs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bec88de0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/tracking.svg | 172.67.200.61 | 200 OK | 52 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/tracking.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/tracking.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sW1MNbl3qP4PGVwyqxKgQbuOIRbCFQetz%2FIIG2cY%2B015GaV10Ss7Rxityz5AuLr0dnmIb%2BK11Wq0WAsg2j%2Fewv%2F8WZqYIziSDHMKUkZO3zNyPf2ndIo7tyRZqmX6zZOJBbjEock%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa1aad0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff | 172.67.200.61 | 200 OK | 52 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeWeb Open Font Format, TrueType, length 51685, version 1.0 Hasha93e96be336c174933e68ef61d56e0d3 48f7a75a367904ff4a9a79689a508e29edda462c cc469406025b7ce0913cdefc664007cd0fc46bc66a740dc7aff67cc041bccde0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/main-sb.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: font/woff
content-length: 51685
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: "653f5e13-c9e5"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=myVhJgXdDQTsrC134MAmUmzna24gM4PeR2gZfCi0bTcY9kQNKPZEeM8Hl2TYkjaQiZzqsoRXW18cZYkraddwyvZhFJmusr1NqwHA2DC%2FYd37%2FhhsRv4%2F1GseqOML2qLpbN%2F55Q4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfb6af00b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| | 172.67.200.61 | 200 OK | 78 B |
URL User Request GET HTTP/2IP172.67.200.61:443
CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeHTML document, ASCII text, with no line terminators Hash8fe8aa5fbcc7d8e0dfc79330d1122b42 98e3c469aab9942e48ebdaaf49414aedd746ea92 816a65540d77c54a875df22ec7ccdb845546699e4c4578663defbf3fb497641a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 29 Mar 2024 04:27:40 GMT
content-type: text/html
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FHO%2BZbDE%2Fuxe6jWUpxcUWqmNgXSs7EcGhLVhnOJjKpT1RA%2BTCF2XGlqjyodEIAEKhP2IgVjdv16QgP%2F4zPO%2Ffowvxmei0qkOKLeYCiCPt2s43VQAlc9JEM1NK4klLDP04kEP1AQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd1bda9e4b568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| usps.teamtepei.com/static/picture/schedule_pickup.svg | 172.67.200.61 | 200 OK | 1.8 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/schedule_pickup.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hashc523f85f9a06acc80cd618f10c18063a d385730a45e237ac82907718aa3c7d78f2dd74b2 7ea8f48894b1b43539d09fa9328a76470d7642525b20477bd5c43105f7baaf86
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/schedule_pickup.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-6ef"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DSOhq2FslZkAo%2FCBDuxyTGKD0VF0oFikR7R7ejXOxSShSsl6o4nwMvOk1XcVS9tCWtvwRT98MhrybdD79XDPwNcQqJAmgQzCoBchVJU27WhNno1uS95SQsDKM%2BxXM9rMZPTcpO0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beed9430b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/config/urlConfig.json | 172.67.200.61 | 404 Not Found | 153 B |
URL GET HTTP/3usps.teamtepei.com/config/urlConfig.json IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeHTML document, ASCII text, with no line terminators Hash2311107fc4a0cc05c1bf56cf25df6b90 f60e44c137b1c78e8b732aaf85e8d9efa0043140 518be356167fcc8b31e415bd6054a1214b010541c1f2a21d6839cb9bc95987b0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /config/urlConfig.json HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 29 Mar 2024 04:27:45 GMT
content-type: text/html
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bdgjRBPfcFgqyXC5HYiZb2EwmGDg0u0vJuinnaw7bwvmpSwCQuh%2F%2Fr5EPzKSUvWX0CFjxwX4z2ax1sKvuGO0ncSKY6NysBqBuBl8mID06nFNVlU89nzSIWqMxv%2Bz2E9KeDHi4Ag%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd1bf5ca110b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/holdmail.svg | 172.67.200.61 | 200 OK | 52 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/holdmail.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/holdmail.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N8OPRpcaxQkMmkTUagL%2FjqMQUucXMRRYKdO0k6iWn1W8XSG1j8i7bQwDY4rmqLyjAuxV6W26ue0pEX6zbq%2Boeal%2FZL%2B68Id5yEoY0I%2B8VWLPPYPTbS9%2F981eUSEFAXxffIL2F4Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa2ab30b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/search.svg | 172.67.200.61 | 200 OK | 1.5 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/search.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hash72686f982dfebbd9157958b01f2ce9e6 525eb380721cdc53b170b7ed00d9a87f6ab71167 92f4f127afbc23dba0b9a8edd2b7baf572c6f2abec350a4d992e372b000e674c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/search.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-5b9"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Iv1A68OrwoE2hl6YQUIlKIotvYujtvtqzkJSXas%2BrlPqcLEIMAiFSRdr2JDvaa%2F8UYct2sTZXWqe4%2FVDHcsIwSnjXouXWGoIiZiV7zYff563l2q65Hs1A1Wcd80K%2BtXwUf5wdPs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beec93c0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c | 142.250.74.40 | 200 OK | 291 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c IP142.250.74.40:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintDE:42:E4:CC:E5:66:70:09:F3:E6:6E:57:B7:5E:22:0A:A3:03:C2:7C ValidityMon, 26 Feb 2024 08:03:40 GMT - Mon, 20 May 2024 08:03:39 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size291 kB (290833 bytes) Hashcf7f045d2b9f17c3fde5640eebc049ef 61dda3d881823d37286bcc4798711f8334ad5629 fd9f4aaf9930cc0a79a94775d9da9f049e4eec4b82c1b6ee1097a9fe467bc34e
GET /gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 29 Mar 2024 04:27:46 GMT
expires: Fri, 29 Mar 2024 04:27:46 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 99005
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| usps.teamtepei.com/static/fonts/business.svg | 172.67.200.61 | 200 OK | 1.2 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/business.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hash6908931641755e0439879badd7d60325 bb620d016ac952020b5a234e5cc1448c11d0fce7 db9835eb4a5a2c0a97c5dc0982f7be2281e727322699d8a1df3b2a4155ea0f37
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/business.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-4d2"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WK50Buwf8B6OCO9ZbtJaBdT1LzzFQgkCPvjt1%2FbQUgifXJMntZwQ90e2sCyfw4r07SeUSeVrprb463%2BUle0m1NHpazJBAfKjGJoRgLQKTXOXuT1EUAmgtDUiZ8742B%2BqaazZ%2F%2BI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa3abe0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/axios.js | 172.67.200.61 | 200 OK | 43 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/axios.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeJavaScript source, ASCII text Hash1eb8e8e2284670dc214a3e70c25992b8 94ece417aa560aa8de906e8f54c0985da90364cc 96b65382c74cd6255d4628044c5394f2ef3f0662d7d72b10f1bceb50b6ee5455
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/axios.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:43 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-a6f0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DGye310yUk1yb2g5wBor%2BKkumdRo8Tia3iXa2YmPQozJ%2FeuRUaZIONCUIREkcFzWU%2Fglk3Bfgmc3Xa%2B5SkQJ7pRqCTsNhdv5gZSaeTtIRacowBUSd%2FtHlD%2BCCzRfcifT%2BQShZJs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beeb9320b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/vue.js | 172.67.200.61 | 200 OK | 342 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/vue.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeJavaScript source, ASCII text Size342 kB (342147 bytes) Hasha9b6fe71cb7cfcd689e1ef345aefba51 5c39dfc37fc42400e4b4557db956f3f218a90ca7 159f0ac0c8f517aaa736003b6e13ebc959b5f7129db87e4e56bf2eec8d6d02d7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/vue.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-53883"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dKzEesz7FEhBhPnr3S1Gq5evxYJZJxIEZsDKA3HZoUboLigNM3gHZtGB5u5EZxf%2Fc7RbIJwQgZ7%2FJA5cIB4tlUyqryyoo4i3ZjdI8WnJtRBENadQ%2B7Jvo6ECNqdCdnHYadWDECI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beeb9330b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/location.svg | 172.67.200.61 | 200 OK | 52 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/location.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/location.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eS3zFYMbFH88G2xaKQZcZktsDmCNCY2j%2FNmEwwVdWiqvSS7GCVHY3uMG1rvhV9glZCixiiSRytfaicaYwpbt3OhNd0JIfsy%2FP%2FMoj0%2B0h%2BUBhVLlHqsyiEmXxsjRt02q0taOBZg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa1aab0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/package-intercept.svg | 172.67.200.61 | 404 Not Found | 153 B |
URL GET HTTP/3usps.teamtepei.com/static/fonts/package-intercept.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeHTML document, ASCII text, with no line terminators Hash2311107fc4a0cc05c1bf56cf25df6b90 f60e44c137b1c78e8b732aaf85e8d9efa0043140 518be356167fcc8b31e415bd6054a1214b010541c1f2a21d6839cb9bc95987b0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/package-intercept.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eQvfkvxje%2F%2FideFo0pkzJ2iOIxeal7AP1w91qZlWC2hUtJ11EDj0KllStqPRrA9PQu%2Bib1iGBMVS3vSEq5ITpLd0JBcbGRLMbGdndEG%2Fh5WpINusIwjbG1bNi%2BtH2hyejdtzKj4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa2ab10b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/b0868b4c-234e-47d3-bc59-41ab9de3c0db.woff2 | 172.67.200.61 | 200 OK | 40 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/b0868b4c-234e-47d3-bc59-41ab9de3c0db.woff2 IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 40372, version 2.655 Hash9bb1ce2aa7fed31792aa1750d0306831 6a538f9d945eaa6f7e8f97b4530183347d20bee5 5e284133b1b11165e7354b29cfabb5f214c473f0ca18198a49c052d8df3f172f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/b0868b4c-234e-47d3-bc59-41ab9de3c0db.woff2 HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/main.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: font/woff2
content-length: 40372
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: "653f5e13-9db4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uIcRlTaM49uUbZDt24Whw2Gr1GQOnmXyyp2t7ne44Ex9FOHVroQHHO6oi%2BDAlxF56Eq%2Fz0S%2BYZzfpE0oXlNthKYTYcUF4KRTH%2Bl8SwELLRM52KtEHqq0SSwzqjDkcyU3G%2F59wPU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfaead60b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/metrics-all.js | 172.67.200.61 | 200 OK | 11 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/metrics-all.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeJavaScript source, ASCII text Hash34bbbc752c38a085d897eb4d08518e56 f47857ba660bef72853357ebf63c1645ed0e6420 58e2e2233ddbf49425919c629e63a97801067da6538b003f9ecaf0161f9bdd85
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/metrics-all.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-2ab1"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7L7%2F0gs6WjXPeflpNrVEf1zvUB2jy2zQ3cJfaRQOVTFz0bxLBT9Ux5OZ17gSRN66AqF8zg8hGY6PhALpnzcH%2B4RZxazVbS19Rcp1JbAsui%2BrP4KtnxTAkMCUbveF%2BitFVJC1IpY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bee99260b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/tracking.svg | 172.67.200.61 | 200 OK | 1.6 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/tracking.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hash51e3139d76e5dc032ee585cca0dc7fa3 25f66b3ef42009851954f22e6d6f4904f506c0b8 dfd96cdbd5e0b4bd7f31c68d620874a37ec2c3f4e5d2716d7227057d2e66d264
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/tracking.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-619"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rMZMpt6vRPwznZ16k5KXC7A2eAYdThnMxMIH8A2iwA4NX8awhZC2NTiJoDEvitRNd7fymoLxbOKA6z9%2Bp0AYt2oQkHNzaBJqyhTKO%2BGAcNNpU8SJQZVocjOPL9WgkJuxnxtPfQs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beec93d0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/shipping-supplies.svg | 172.67.200.61 | 200 OK | 2.6 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/shipping-supplies.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hashab67d7e569a64be0744cb3d179612d50 65e256ede2d7bc4297f7497f4430182c04b627e9 b3b380736b4280b27e829b17a7fb722f88c100d77bea94909c9b110e2a4a691e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/shipping-supplies.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:45 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-9f8"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lSaPk8mALlgzTYALDsnv1r20tfECQaA%2FOSEWrrSbWfgMIpZO8FfYGgjH1yTBTyTOVjKr78zIQzcQdZwUlll%2BTJ%2FHzOX%2BqKs7C4%2FWew8f9bLF7zX%2BISlZUBmjUj%2B1Rt%2FPVS6EK0o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa2ab80b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/favicon.ico | 172.67.200.61 | 404 Not Found | 153 B |
URL GET HTTP/3usps.teamtepei.com/favicon.ico IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeHTML document, ASCII text, with no line terminators Hash2311107fc4a0cc05c1bf56cf25df6b90 f60e44c137b1c78e8b732aaf85e8d9efa0043140 518be356167fcc8b31e415bd6054a1214b010541c1f2a21d6839cb9bc95987b0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 29 Mar 2024 04:27:42 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mI6fYvSSp7%2BhjVmFz63eBe%2BqZ49mBQxGDNHYIwc%2FZxvUxA6sP7RicjmcpauRgxtxTpCMmqF0ONYDqOQe2Z1rAioLdfChlvnmUA8D4IItI0OKloZvEf9OFpbOg6kVpXAE81JZGK8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1be56fd60b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/calculate_price.svg | 172.67.200.61 | 200 OK | 2.3 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/calculate_price.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hash431fb89252e46304ea7f6f956146f2b7 bd1018ec7dfa59258d8b81a2f914291ede34f27f be94cb1ae2d86c4a1e0b79e6dcea5decd7f5ab1e96e171946de72117094b13a1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/calculate_price.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-8fe"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=luhUEzSMuoqRnwIzN3SSwXz3INL7gRU8vmDdAAV9GK8J7%2B4hPnNUWNM0VefR7w0VXndrmidMSRnSdHxUzl8dj7uoQNHMNjUWyYRsaA64V9S9VNyrrFyzgtVBNWiDhq9ZJxDBboA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beed9440b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fast.fonts.net/t/trackingCode.js | 0.0.0.0 | | 0 B |
URL GET fast.fonts.net/t/trackingCode.js IP0.0.0.0:0
Requested byhttps://usps.teamtepei.com/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintB9:2B:82:F1:50:51:EA:B4:39:81:75:2F:6E:8B:8B:94:55:81:C3:47 ValidityFri, 05 May 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/trackingCode.js HTTP/1.1
Host: fast.fonts.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Cookie: __cf_bm=5L4b4Y9tazFru3CEhUmyhWF2orCoOj8qPWFGMaNJJ1c-1711686464-1.0.1.1-sTjfQFWLaPSIsr.6sFf3Uj_YiferU26klPz3ZuHQE.q0fz_Gu.BKnQsHNSK9x8gB1Q4ztNKXzeCJM__vQ.QjMg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 29 Mar 2024 04:27:45 GMT
content-type: text/plain; charset=utf-8
x-amz-id-2: zYhKraNibKo66IAlBtLIrsktkibAUzYdxDcd1UBHtMIR3rDILmrzgSBdW+oiKuILrXLJ3lo7Mn4=
x-amz-request-id: PG321HJQEBES9CSD
last-modified: Tue, 23 Mar 2021 09:15:19 GMT
etag: W/"32dd789522cc6923c80141fcf5d3a614"
cache-control: public, max-age=300
x-amz-meta-mtime: 1383840033
x-amz-version-id: null
cf-cache-status: HIT
age: 1490
expires: Fri, 29 Mar 2024 04:32:45 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfafd90b511-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| usps.teamtepei.com/static/fonts/cards-and-envelopes.svg | 172.67.200.61 | 200 OK | 2.2 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/cards-and-envelopes.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hash6088261f72b5ce3642b5cec0eb113793 d132c9f520c2a5b4a724c5ecb2e8fc4f4f45fa07 2a7560f8b14ba4d21e129f29758c750aca7787cff99c49c1c05c389d22a15457
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/cards-and-envelopes.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-8a9"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qoZlw%2FWZdHi1k1fhXgeHsg8ehLYOBS1wiLGhJ%2B8WUFi2G8g2SqYjrH%2BY%2FnKCjYGtx3rjKyKZGQyhoywFKKUW6OkTcELhx4H2qJnuc8do3U9y6aB0dLTjiMRL4rXX%2BZOfcv%2Fxwbg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa3aba0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/change_address.svg | 172.67.200.61 | 200 OK | 52 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/change_address.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/change_address.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3BOr4i7TYpVCq%2F1BrL%2Bco6DU7hkOOahI577PDoG4Z2oMK2Vs2f2tc3lBO6e1BPig1qqGKr%2BjZtkUxkVGyMyzUGklFn6T5ziT5SI%2FOO8P9jlOBVD9PZTDwU81c%2BCdKneZzZXyQBU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa2ab50b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff | 172.67.200.61 | 200 OK | 47 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeWeb Open Font Format, TrueType, length 46657, version 1.0 Hash3beb1cf49dc702cd4de8618eeb344dd4 080e1b4dc8b43ddb06961a3490857cdb936a8c2a ffd7af6177837790e2620c429dce0da6dc7d18bbdcf87a7ed2c033a03513e947
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/main-sb.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: font/woff
content-length: 46657
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: "653f5e13-b641"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TS9CntH5y60gn8xu2dWfZ4%2BVY8MaNDk7dgDSlGJMF0q4zbKqADFCOWnfRJma1NBlz6%2F3xYyHh6otFwndUa%2F7VnZ1t5N7rw436EmGXXuUG%2FvT50BXXRnhouIuHBK88dkeylJvnXk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfb5aeb0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/jquery.min.js | 172.67.200.61 | 200 OK | 85 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/jquery.min.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeJavaScript source, ASCII text, with very long lines (65453) Hash8234c1aca62c1e09cc00f7fb5908d309 831062e805247046abdbab52149b03604119fd11 e1ee1eb92c6acc3fbf821c99963ad92dd9954d576eababe7f6df6800f91bc062
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/jquery.min.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:45 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-14b60"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HAJ%2FvoIwXjyNlxSQGbKWpN1uZfCfxS8KycgzE1FSbr9BmksT%2B9RB%2FmfdZKuuTHzbljIRDoHcm4YmJclpvX2MUvmNdbvTsAeXcGkczxwqa%2FP0OMKgWzK6ws1dqrGLc6Ha1%2BIExG8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfb0ae20b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/css/bootstrap.min.css | 172.67.200.61 | 200 OK | 121 kB |
URL GET HTTP/3usps.teamtepei.com/static/css/bootstrap.min.css IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeASCII text, with very long lines (65371) Size121 kB (121084 bytes) Hash473c24f70d7d3d76cc9d6c67a852b100 4b017192f7e665f0b5cc5ed1b737f709fc7a6be4 a78c4915ce28caf156345123fa0a8a4424355edd10ea1f733ac93c87ebc9637c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/css/bootstrap.min.css HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: text/css
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-1d8fc"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LzNSQBnw6B%2BjY0bdT7wFjkLA2xMU%2FHBxfDVBv0m9SBERsutTtqJyrjkKYXzvbBv4fqaQeSxy1Z8FnPLpRRJ8IWs3Ga7Zl74qo6CtgYbJB4F%2Ba93jOtHVEPPhAgm7SOXaLCVVNMU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beea92a0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/idxs-icon.svg | 172.67.200.61 | 200 OK | 1.9 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/idxs-icon.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hash583ef52bd60e417556db5f135ccde412 95657d33aff9e4378ebe4d23588822e15decf037 5a5fd0aafb20d9cb95bf9e3e7110d8877c7bfe8a990e6b5d4ba59148da355bf2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/idxs-icon.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-754"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eHyoXGgB41BTQfZCxbyyVs%2FeWvbsO8GEvWEY9ytRfd%2FJ2EGVWn8eqC6zPIQ%2BRs54pNGJkEu65FSNdvMKrPbYGIypmccsXPXDFWFPWIExmzUSuH8zR6LUYEYAShX%2FK93vvyK3YYg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beef95a0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtm.js?id=GTM-MVCC8H | 142.250.74.40 | 200 OK | 692 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-MVCC8H IP142.250.74.40:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintDE:42:E4:CC:E5:66:70:09:F3:E6:6E:57:B7:5E:22:0A:A3:03:C2:7C ValidityMon, 26 Feb 2024 08:03:40 GMT - Mon, 20 May 2024 08:03:39 GMT
File typeJavaScript source, ASCII text, with very long lines (65316) Size692 kB (692426 bytes) Hashe22e0f62bdcf499e091ad37028cf3ed8 964290f85e989bafd68da64ac8bfab768efcda95 fc208dee7232df9f53228d44818170261ff5d8a29d2a03ef76a37ddb53cd8e83
GET /gtm.js?id=GTM-MVCC8H HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: gzip
vary: Accept-Encoding
date: Fri, 29 Mar 2024 04:27:45 GMT
expires: Fri, 29 Mar 2024 04:27:45 GMT
cache-control: private, max-age=900
last-modified: Fri, 29 Mar 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 154854
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| usps.teamtepei.com/static/js/jquery-ui.js | 172.67.200.61 | 200 OK | 1.4 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/jquery-ui.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeASCII text, with very long lines (1452), with no line terminators Hash41b0999494be450f941d147a1b4e8da4 f3c6bb5dca48bc65a85110db1dae651ac5c3d9b5 523325d1f02572c5e57dab27b722584e4796944e26f498c18db7cd1dfe425cad
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/jquery-ui.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:43 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-59f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P8uHEdikcogphrq3I4Y5lWdKlv4%2BMkSK3sKR1XESBisYx28E0cscDOlBVylWcUmKg9Jl4SQpk%2FH5DLrlfSsnF3esJ0KRzYGL4sqwBdkCtGcfl3G6W7Uq1hHhE7vGmX1a3PQVcr0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beeb9370b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/images/chinese_characters.gif | 172.67.200.61 | 200 OK | 2.2 kB |
URL GET HTTP/3usps.teamtepei.com/static/images/chinese_characters.gif IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeGIF image data, version 89a, 44 x 102 Hash6cfd66aca15e28ed9e77672fa22604b7 79f78e9167a5853d740486cdae627034cf2a7085 dc9835ec6574c8d748f4fe255d01035a7d289f4a8caae72a989a32d3973caecd
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/images/chinese_characters.gif HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:45 GMT
content-type: image/gif
content-length: 2173
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: "653f5e14-87d"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QSaax4L6PNaOU%2BbeVkFiR16MVPivBC7ofvoC4qFJm8sVn2SgCS9clFUz%2BSKwDh8Lj5rw%2FqttAlIPe%2BjUL%2Buz7tHlVttKnPLCm2dpBPldQJKMlmYrF3bERO0mDnxBXkYq2dTuUSE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bf9fa9d0b59-OSL
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/featured_clicknship.svg | 172.67.200.61 | 200 OK | 52 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/featured_clicknship.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/featured_clicknship.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6ysa8TC8srba2Wm%2FsZoX5MT4mJQ4R9JqbLSkpudBxNm%2FqB%2BX7VrppktXwjQMMAg3boxtR1%2Fmp0GmwYBADCqv%2BfxyWyFfLFLa9yiSP80ObekVQT2kiPSaT2xkr6hEifX9P0qva%2BM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa0aa60b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/fonts/schedule_pickup.svg | 172.67.200.61 | 200 OK | 52 kB |
URL GET HTTP/3usps.teamtepei.com/static/fonts/schedule_pickup.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/fonts/schedule_pickup.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:46 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7p86VYcMX4gQWhIeQRYGWtMzYqAF76qTKpk55U%2BuvlETyPAenPS7egQWnR%2B8Oj%2FN8Z1MZL%2FEEIHLs0Qwe3eahQlJV16bujqZy7RYaxy406lbfeMAmQf90Hm0zEJLXKh4T7tUwFs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bfa1aaa0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/css/conditionalchatlink.css | 172.67.200.61 | 200 OK | 52 kB |
URL GET HTTP/3usps.teamtepei.com/static/css/conditionalchatlink.css IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/css/conditionalchatlink.css HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: text/css
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-cb57"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dYqD3aeFtdg21EtI7XAAbRz%2F2dDWxonOw0yBCiwB68AUpaAHcd%2BHgBOhkCty5B5EJohF4RL3pqqVAokIpT%2B8tYtXtgtAA4L2xSyksBNaCHDMyeQKil2MjJgYOtSpvTaXlgLuGWQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beea92c0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/jquery.min.js | 172.67.200.61 | 200 OK | 85 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/jquery.min.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeJavaScript source, ASCII text, with very long lines (65453) Hash8234c1aca62c1e09cc00f7fb5908d309 831062e805247046abdbab52149b03604119fd11 e1ee1eb92c6acc3fbf821c99963ad92dd9954d576eababe7f6df6800f91bc062
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/jquery.min.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-14b60"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NRtYabC1t4%2BubNLVPnEpTRhv0aVFVooFUug6KPOdmT0rSXT%2FAeBu56kTHweH16Gclot7%2BH8YmngLCzVncxd4qLu%2FDIbepcdKdiF7ASwW%2FE7iEhShcipTp103PYp%2FQvbnMO3cZs0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bee79200b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/data.js | 172.67.200.61 | 200 OK | 2.3 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/data.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeASCII text, with very long lines (2588), with no line terminators Hash6692d5ea7a27e811825a9159bfaa0210 cc2a3758f56e64554561107df0fbc9765f9ae76a d1147d04efad54c59c37c66620f4aa33ac1f82665f011b8836ba96bb0ea479be
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/data.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-924"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h2HLD9ffbcSH4rVqUQcz%2FhTHNf4NXE%2BETgyBOXA33UOqRCT31V%2BVjERFkPwq9DQaNOTfyI%2BnWrSdq4OIPq1EDlu1UtOUtoBzLgSsomxexf7ulT7n8Y4Hpj5b8bQDFQoT27fyejA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bef19670b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/images/favicon.ico | 172.67.200.61 | 200 OK | 32 kB |
URL GET HTTP/3usps.teamtepei.com/static/images/favicon.ico IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeMS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hash3f0f72ed57a54b97cda500bcf0545efb 2f252619c18e729d98e16b96d37cd7cd567b38eb 67fbe8ef9020e5c776aadf6801a1fef8dc563e2e4dc9ddc740af8010c0c38943
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/images/favicon.ico HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:45 GMT
content-type: image/x-icon
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-7d26"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HA7oCDQESjLfB75edTy06zTLESmpjj3zZgKFr0xYFV7GTYff3qZi8FoJ%2FuH0poJI63OG%2FVAW4APGr95TiQ%2BsyrwlHzi2Hm3jYFr3HnuXJAS8o5eylcJpOvCRPTWDXmUhByF5yww%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bf57a050b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/config/urlConfig.json | 172.67.200.61 | 404 Not Found | 153 B |
URL GET HTTP/3usps.teamtepei.com/config/urlConfig.json IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeHTML document, ASCII text, with no line terminators Hash2311107fc4a0cc05c1bf56cf25df6b90 f60e44c137b1c78e8b732aaf85e8d9efa0043140 518be356167fcc8b31e415bd6054a1214b010541c1f2a21d6839cb9bc95987b0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /config/urlConfig.json HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: text/html
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eGlBK7rcmdo9V%2Bz4zQAzV%2B8adBpPkDqnn0NPx4zo68sCKykRs%2FzkKWsBN3xvO3pWutq1%2Fy%2FtAV6%2Fm2PE6dCXQgsr%2B66ZOzyqECLj5Sel66QFnvoeC5BZurevhqwxlqZK57DU57k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd1beeb9340b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/picture/po_box.svg | 172.67.200.61 | 200 OK | 1.6 kB |
URL GET HTTP/3usps.teamtepei.com/static/picture/po_box.svg IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeSVG Scalable Vector Graphics image Hash2cc2a9cd603e3badb3f767a4a4728f5c 40f414f0ff209023650ca7014ec2a57939229d1d e60ecbbbdfaf3944b4ec3ffdb090954b0ede6607da1cdbf9fb7d2963fdee61b6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/picture/po_box.svg HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-667"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MHmGg6IhwQEFY73R8BM7PSZCvzjuJWyJA2lZlwBMAmKUG4XmPPO1rvusrA%2FfOBr%2FjZCsDZhDf0C2wz%2Fr7sANPHj4PEzuP%2B%2FwukQAXTZ7pBIAbDmNGpscAe2TcgPURq9Y33gJGGM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beed9490b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/megamenu-v3.js | 172.67.200.61 | 200 OK | 13 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/megamenu-v3.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeJavaScript source, ASCII text, with very long lines (13400), with no line terminators Hashb62e27b15837b70e7dab99846ac90ab3 9a49415c5e47149a5324705eaf78b4b68ce10edf 50764694ee2da70f2d3ce0e8340eca39b9e2760d293b47e4355c690a4769e781
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/megamenu-v3.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-3458"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XIwPwUJZwEaMI1BUw7stn5gxLJPShBnbm5sl3zor7u%2FKs%2FOFq3hqIYM%2BemNKAriR4zbe%2BZ30DrxV8697xG4N3RVZf9peTIGMq%2BH7doAvWx%2FN28BDsq9CWY9dSWYe3zlqEAtGtGA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1beee9510b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| usps.teamtepei.com/static/js/jquery.ui.js | 172.67.200.61 | 200 OK | 284 kB |
URL GET HTTP/3usps.teamtepei.com/static/js/jquery.ui.js IP172.67.200.61:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subjectteamtepei.com Fingerprint53:E3:55:D5:28:5E:4F:1B:30:C0:4D:A9:9F:A2:87:B4:D7:92:37:76 ValidityWed, 13 Mar 2024 06:00:45 GMT - Tue, 11 Jun 2024 06:00:44 GMT
File typeJavaScript source, ASCII text, with very long lines (18730) Size284 kB (284465 bytes) Hash4e7e5ae2451d2efbc3d960b63fa78dbb 1479f717ce0594dde5d020d885a988fcf98b106e 5b55ece99168ef9ba6d8557a4e759ad76f53da94eba1d8f331395ea321441bda
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | OpenPhish | phishing | United States Postal Service | | Quad9 DNS | malicious | Sinkholed |
GET /static/js/jquery.ui.js HTTP/1.1
Host: usps.teamtepei.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 29 Mar 2024 04:27:44 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-45731"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gVDeDng9nouMTG9RV9mR7sjD8QulaYmNOfY7QLfD7ZF5OBLZWp9%2Fxs0zqBa5AcLJS46SqciFWLsC9VeUhubW%2B9YlfAJphoSMjpNB0IEDicZRWbKeypFI37eRpZVcEaX5cZO9cq8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86bd1bef09630b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c | 142.250.74.40 | 200 OK | 291 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c IP142.250.74.40:443
Requested byhttps://usps.teamtepei.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintDE:42:E4:CC:E5:66:70:09:F3:E6:6E:57:B7:5E:22:0A:A3:03:C2:7C ValidityMon, 26 Feb 2024 08:03:40 GMT - Mon, 20 May 2024 08:03:39 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Size291 kB (290833 bytes) Hash6286b05615cef1f1c4592c0a8d55472f 31868d40551ca109da1967439ea2064c3002f9eb 104d09b1abedf3809e954d6973cc0c0389bdb40a93a6e8e2c60520910d576938
GET /gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://usps.teamtepei.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 29 Mar 2024 04:27:46 GMT
expires: Fri, 29 Mar 2024 04:27:46 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 99006
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
0.0.0.0