Report - upsschweiz.com/card.php

Report Overview

Submitted URL
upsschweiz.com/card.php
IP
54.153.118.95
ASN
#16509 AMAZON-02
Submitted
2024-04-19 17:25:36
Access
public
Website Title
Global Shipping and Logistics Services | UPS
Final URL
upsschweiz.com/card.php
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
12

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
kit.fontawesome.com	1868	2012-10-18	2019-12-16	2024-04-18	437 B	12 kB	172.64.147.188
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-19	448 B	5.3 kB	142.250.74.106
upsschweiz.com	unknown	unknown	No data	No data	3.1 kB	20 kB	54.153.118.95
www.ups.com	8098	1992-04-07	2012-05-22	2024-04-17	8.2 kB	876 kB	2.18.173.147
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-18	1.0 kB	33 kB	142.250.74.99
ka-f.fontawesome.com	3598	2012-10-18	2019-12-17	2024-04-19	2.5 kB	296 kB	172.67.139.119

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	upsschweiz.com	Sinkholed
2024-04-19	medium	upsschweiz.com	Sinkholed
2024-04-19	medium	upsschweiz.com	Sinkholed
2024-04-19	medium	upsschweiz.com	Sinkholed
2024-04-19	medium	upsschweiz.com	Sinkholed
2024-04-19	medium	upsschweiz.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	kit.fontawesome.com/363d4a4d7b.js	12 kB	2024-04-19	2024-05-02
Pretty URL kit.fontawesome.com/363d4a4d7b.js IP 172.64.147.188 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-19 19:25:42 Last Seen2024-05-02 13:40:18 Times Seen5 Hash f4e15e60ee412880a1203ea60b04876e 584e95fd91f7ab67130da4912f23be697ffc3b8f 62d75a9de72fdc2f021d213b3e72f71332b6b4deb3a5a9028b0b6154fa85189c Loading...

	upsschweiz.com/card.php	988 B	2024-04-19	2024-05-02
Pretty URL upsschweiz.com/card.php IP 54.153.118.95 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-19 19:25:42 Last Seen2024-05-02 13:40:18 Times Seen3 Hash 2efe74ecc949d49f1b41d7ea099035ea 048a5898652ff598fd31f13c781226a45fdaba37 30eb4e98c5fe97524e0e52118eb95d15d4d4998f31c246f4b0f75e830ab7869a Loading...

	upsschweiz.com/card.php	716 B	2024-04-19	2024-05-02
Pretty URL upsschweiz.com/card.php IP 54.153.118.95 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-19 19:25:42 Last Seen2024-05-02 13:40:18 Times Seen3 Hash 46875aec07f6a4acb1793e3960271f10 62c5fde700934c5e2ea3ec3dbc03f617935ccc02 cd3b82dc5eff18cf422f9f194018cf0b09729711f4eb0ca93400081b0b319ec4 Loading...

HTTP Transactions (31)

URL IP Response Size

upsschweiz.com/card.php

54.153.118.95

200 OK

6.1 kB

URL User Request GET HTTP/2
upsschweiz.com/card.php
IP
54.153.118.95:443
ASN
#16509 AMAZON-02

Certificate
IssuerLet's Encrypt
Subjectupsschweiz.com
Fingerprint7C:45:0B:CB:72:A9:B9:1E:F3:42:82:6D:47:A2:68:30:05:4D:BE:65
ValidityThu, 18 Apr 2024 18:54:09 GMT - Wed, 17 Jul 2024 18:54:08 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (4155), with CRLF line terminators
Size
6.1 kB (6129 bytes)
Hash
1ec01ce9f410707d4346aa90bfa09ade
a4a3601c1da3b915b8d02f0af71ce638aa606ccb
c8fc1884ccf2df4c142399ab7d7d5b8d6b88f949335ba1b7fa77b2e61f862d6a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /card.php HTTP/1.1
Host: upsschweiz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 17:25:11 GMT
content-type: text/html; charset=UTF-8
content-length: 6129
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=vntf1ioo61gnp7gn0rg5rf8r9b; path=/
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PHP/7.4.33, PleskLin
X-Firefox-Spdy: h2

upsschweiz.com/img/packet.svg

54.153.118.95

200 OK

9.2 kB

URL GET HTTP/2
upsschweiz.com/img/packet.svg
IP
54.153.118.95:443
ASN
#16509 AMAZON-02

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerLet's Encrypt
Subjectupsschweiz.com
Fingerprint7C:45:0B:CB:72:A9:B9:1E:F3:42:82:6D:47:A2:68:30:05:4D:BE:65
ValidityThu, 18 Apr 2024 18:54:09 GMT - Wed, 17 Jul 2024 18:54:08 GMT

File type
SVG Scalable Vector Graphics image
Size
9.2 kB (9203 bytes)
Hash
ed73d1a1453cde9d2499dc9229967545
caa84aa3feb7175468f0699a873e5a23668d6e35
379a369d74e27b8da523e06e640ad9a70af65d4f56f5b974b2a03b26a8cc78e6

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/packet.svg HTTP/1.1
Host: upsschweiz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upsschweiz.com/card.php
Cookie: PHPSESSID=vntf1ioo61gnp7gn0rg5rf8r9b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 17:25:12 GMT
content-type: image/svg+xml
content-length: 9203
last-modified: Tue, 15 Aug 2023 09:25:40 GMT
etag: "64db4494-23f3"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

upsschweiz.com/assets/resources/webcontent/styles/fonts/Roboto-Light.ttf

54.153.118.95

404 Not Found

842 B

URL GET HTTP/2
upsschweiz.com/assets/resources/webcontent/styles/fonts/Roboto-Light.ttf
IP
54.153.118.95:443
ASN
#16509 AMAZON-02

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerLet's Encrypt
Subjectupsschweiz.com
Fingerprint7C:45:0B:CB:72:A9:B9:1E:F3:42:82:6D:47:A2:68:30:05:4D:BE:65
ValidityThu, 18 Apr 2024 18:54:09 GMT - Wed, 17 Jul 2024 18:54:08 GMT

File type
HTML document, ASCII text
Size
842 B (842 bytes)
Hash
a943672a32297727bab01c3e76977550
3a667c4b7a457ef6c586cc581d533c128737bf53
b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Light.ttf HTTP/1.1
Host: upsschweiz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upsschweiz.com/card.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=vntf1ioo61gnp7gn0rg5rf8r9b
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 17:25:12 GMT
content-type: text/html
last-modified: Thu, 18 Apr 2024 19:53:39 GMT
etag: W/"328-6166453d5e684"
content-encoding: br
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Medium.ttf

2.18.173.147

200 OK

172 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Medium.ttf
IP
2.18.173.147:443
ASN
#16625 AKAMAI-AS

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
TrueType Font data, 18 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med
Size
172 kB (171656 bytes)
Hash
58aef543c97bbaf6a9896e8484456d98
f6783010d5def128c4a1539333324f75701d9bab
e35252aa3dc2e84e9d7211586fee9aede2a426d3230c8b131881d985f16ff836

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Medium.ttf HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upsschweiz.com/
Origin: https://upsschweiz.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
last-modified: Thu, 19 Aug 2021 19:26:41 GMT
accept-ranges: bytes
content-length: 171656
content-type: font/ttf
cache-control: no-cache
expires: Fri, 19 Apr 2024 17:25:12 GMT
date: Fri, 19 Apr 2024 17:25:12 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713547512493_1600457407_435230623_51_13352_3_58_31";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Bold.woff

2.18.173.147

200 OK

27 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Bold.woff
IP
2.18.173.147:443
ASN
#16625 AKAMAI-AS

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 26564, version 1.0
Size
27 kB (26564 bytes)
Hash
849fd0ec4277f2e8ee9ebe2753a30edd
ebcff6b5216b7cfdacc058ab35023c6f9bd6f286
5fce1e38ce56a7e63a78d5811e54679dba8cd15d6455cf312f4d2bd886e42d36

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Bold.woff HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upsschweiz.com/
Origin: https://upsschweiz.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
last-modified: Thu, 19 Aug 2021 19:26:34 GMT
accept-ranges: bytes
content-length: 26564
content-type: font/woff
cache-control: no-cache
expires: Fri, 19 Apr 2024 17:25:12 GMT
date: Fri, 19 Apr 2024 17:25:12 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713547512560_1600457407_435230624_631_16131_0_0_31";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Bold.woff2

2.18.173.147

200 OK

20 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Bold.woff2
IP
2.18.173.147:443
ASN
#16625 AKAMAI-AS

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 19660, version 1.0
Size
20 kB (19660 bytes)
Hash
54ecb5ea0ec7edfcec9c5b2a15508cad
3b6c8aaceb8c1751b1aeda7c63c690fc36cdd945
b54b79ee86c7b666f57df9ff19d0f3483ae330b18d0aebc3dcc053d0ee8e0e02

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Bold.woff2 HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upsschweiz.com/
Origin: https://upsschweiz.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
last-modified: Thu, 19 Aug 2021 19:26:35 GMT
accept-ranges: bytes
content-length: 19660
content-type: font/woff2
cache-control: no-cache
expires: Fri, 19 Apr 2024 17:25:12 GMT
date: Fri, 19 Apr 2024 17:25:12 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713547512556_1600457407_435230626_137_11928_3_0_31";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Bold.ttf

2.18.173.147

200 OK

170 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Bold.ttf
IP
2.18.173.147:443
ASN
#16625 AKAMAI-AS

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo
Size
170 kB (170348 bytes)
Hash
e07df86cef2e721115583d61d1fb68a6
3dd713113ff2d79b94d2df343e2e28fa8e7279cf
c9cc991deb5d27f267830a19f2301eb164d9e61ec08669c1a1a291c5620ff40a

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Bold.ttf HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upsschweiz.com/
Origin: https://upsschweiz.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
last-modified: Thu, 19 Aug 2021 19:26:36 GMT
accept-ranges: bytes
content-length: 170348
content-type: font/ttf
cache-control: no-cache
expires: Fri, 19 Apr 2024 17:25:12 GMT
date: Fri, 19 Apr 2024 17:25:12 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713547512555_1600457407_435230629_48_12181_3_0_31";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/ups.vendor.161a0d161a0d.css

2.18.173.147

200 OK

13 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/ups.vendor.161a0d161a0d.css
IP
2.18.173.147:443
ASN
#16625 AKAMAI-AS

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (65466)
Size
13 kB (12551 bytes)
Hash
3549987cec3bf08c7480db6111b7f96e
006b2c1152eadc2696382eef5a258015368eae1b
a549adbd193f091a69c8995eb7b34c5ec73ef15f098af300cb297f78254e1013

HTTP Headers

GET /assets/resources/webcontent/styles/ups.vendor.161a0d161a0d.css HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upsschweiz.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: default-src 'unsafe-inline' 'unsafe-eval' 'self' blob: data: ups.com *.ups.com *.doubleclick.net doubleclick.net googleads.g.doubleclick.net *.jquery.com jquery.com nuance.com *.nuance.com inq.com *.inq.com *.salesforce-sites.com salesforce-sites.com *.salesforceliveagent.com salesforceliveagent.com *.salesforce.com salesforce.com *.bootstrapcdn.com bootstrapcdn.com tiqcdn.com *.tiqcdn.com tealiumiq.com *.tealiumiq.com youtube.com *.youtube.com adsrvr.org *.adsrvr.org demandbase.com *.demandbase.com facebook.net *.facebook.net facebook.com *.facebook.com bing.com *.bing.com googletagmanager.com *.googletagmanager.com www.google.com google.com *.google.com fullstory.com *.fullstory.com qualtrics.com *.qualtrics.com ups.demdex.net demdex.net *.demdex.net omtrdc.net *.omtrdc.net  google-analytics.com *.google-analytics.com googleadservices.com *.googleadservices.com company-target.com *.company-target.com marketo.com *.marketo.com  marketo.net *.marketo.net licdn.com *.licdn.com linkedin.com *.linkedin.com blueconic.net *.blueconic.net mpsnare.iesnare.com iesnare.com *.iesnare.com virtualearth.net *.virtualearth.net iovation.com *.iovation.com cdn-apple.com *.cdn-apple.com gstatic.com *.gstatic.com googleapis.com *.googleapis.com parcelpath.com:7141 *.parcelpath.com:7141 *.ytimg.com ytimg.com everesttech.net *.everesttech.net rlcdn.com *.rlcdn.com fonts.googleapis.com fonts.gstatic.com online-metrix.net *.online-metrix.net customerfeedback.ups.com login.microsoftonline.com mktoresp.com *.mktoresp.com; frame-ancestors 'self' parcelpath.com:7141 *.parcelpath.com:7141 ups.com *.ups.com;
last-modified: Fri, 19 Apr 2024 03:16:22 GMT
referrer-policy: same-origin
server: Akamai Resource Optimizer
x-frame-options: SAMEORIGIN
content-length: 12551
expires: Fri, 19 Apr 2024 17:25:12 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 19 Apr 2024 17:25:12 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713547512576_1600457407_435230661_55_12311_9_0_21";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Regular.woff

2.18.173.147

200 OK

26 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Regular.woff
IP
2.18.173.147:443
ASN
#16625 AKAMAI-AS

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 26152, version 1.0
Size
26 kB (26152 bytes)
Hash
c1de44acf1411a188b1efb3e415e66b8
2a9601e8dd8dd62422139ab415101d13542c31bf
444b94c2f00b433b4297bc32a247be7d30db791abb13d9d77bbec032c141eb46

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Regular.woff HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upsschweiz.com/
Origin: https://upsschweiz.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
last-modified: Thu, 19 Aug 2021 19:26:39 GMT
accept-ranges: bytes
content-length: 26152
content-type: font/woff
cache-control: no-cache
expires: Fri, 19 Apr 2024 17:25:12 GMT
date: Fri, 19 Apr 2024 17:25:12 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713547512559_1600457407_435230636_40_11530_3_0_31";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/images/ups-logo.svg

2.18.173.147

200 OK

997 B

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/images/ups-logo.svg
IP
2.18.173.147:443
ASN
#16625 AKAMAI-AS

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
997 B (997 bytes)
Hash
d0844ff2e7a14df3ea3ab44e655954df
1fc8335cbae890c2cbac90dd6ab87014583bb9cd
9f5ae3f644595dc6c5aa69ae618a108102bb62e1a38a50b89fd7af1b8ffe5eae

HTTP Headers

GET /assets/resources/webcontent/images/ups-logo.svg HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upsschweiz.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/svg+xml
accept-ranges: bytes
content-encoding: gzip
last-modified: Wed, 20 Mar 2024 21:16:09 GMT
referrer-policy: same-origin
server: Akamai Resource Optimizer
x-frame-options: SAMEORIGIN
content-length: 997
expires: Fri, 19 Apr 2024 17:25:12 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 19 Apr 2024 17:25:12 GMT
vary: Accept-Encoding
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713547512576_1600457407_435230657_56_12343_9_67_13";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Regular.woff2

2.18.173.147

200 OK

19 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Regular.woff2
IP
2.18.173.147:443
ASN
#16625 AKAMAI-AS

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 19392, version 1.0
Size
19 kB (19392 bytes)
Hash
0129881c0437c48433591878596ba145
c7311ad3ebaccbb9b33e6703df09c265b7d10ff5
c54a730394f47a040134beab422547426e7c7cd516a4d8865d2abc4871f6cbca

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Regular.woff2 HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upsschweiz.com/
Origin: https://upsschweiz.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
last-modified: Thu, 19 Aug 2021 19:26:41 GMT
accept-ranges: bytes
content-length: 19392
content-type: font/woff2
cache-control: no-cache
expires: Fri, 19 Apr 2024 17:25:12 GMT
date: Fri, 19 Apr 2024 17:25:12 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713547512560_1600457407_435230637_39_12331_3_0_31";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/img/icp.gif

2.18.173.147

200 OK

43 B

URL GET HTTP/2
www.ups.com/img/icp.gif
IP
2.18.173.147:443
ASN
#16625 AKAMAI-AS

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
GIF image data, version 89a, 2 x 2
Size
43 B (43 bytes)
Hash
ad480fd0732d0f6f1a8b06359e3a42bb
a544538683a2dfe574eeb2e358ac8fcc78289d50
a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506

HTTP Headers

GET /img/icp.gif HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upsschweiz.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Apache
x-frame-options: SAMEORIGIN
pragma: no-cache
last-modified: Wed, 29 Apr 2015 19:29:01 GMT
accept-ranges: bytes
content-length: 43
content-type: image/gif
debug-ak-tls: No bypass
cache-control: no-cache
expires: Fri, 19 Apr 2024 17:25:12 GMT
date: Fri, 19 Apr 2024 17:25:12 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713547512577_1600457407_435230659_72_12083_9_0_11";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Regular.ttf

2.18.173.147

200 OK

171 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Regular.ttf
IP
2.18.173.147:443
ASN
#16625 AKAMAI-AS

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob
Size
171 kB (171272 bytes)
Hash
11eabca2251325cfc5589c9c6fb57b46
096c9245b6a192d1403a82848e104a65f578a8ec
017c0be9aaa6d0359737e1fa762ad304c0e0107927faff5a6c1f415c7f5244ed

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Regular.ttf HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upsschweiz.com/
Origin: https://upsschweiz.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
last-modified: Thu, 19 Aug 2021 19:26:41 GMT
accept-ranges: bytes
content-length: 171272
content-type: font/ttf
cache-control: no-cache
expires: Fri, 19 Apr 2024 17:25:12 GMT
date: Fri, 19 Apr 2024 17:25:12 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713547512579_1600457407_435230664_373_14159_1_0_31";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Medium.woff

2.18.173.147

200 OK

94 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Medium.woff
IP
2.18.173.147:443
ASN
#16625 AKAMAI-AS

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Web Open Font Format, TrueType, length 94364, version 2.137
Size
94 kB (94364 bytes)
Hash
7350337b673e86f2d62ee0eb5761e1e2
eb11f6c75c34069217cc1692d00e8ac3945c8a3d
4f543ad26c42709ef00a1921f7dd1aa27a1930a354ecb353196665e43dac3706

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Medium.woff HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upsschweiz.com/
Origin: https://upsschweiz.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
last-modified: Tue, 21 Jun 2022 17:17:41 GMT
accept-ranges: bytes
content-length: 94364
content-type: font/woff
cache-control: no-cache
expires: Fri, 19 Apr 2024 17:25:12 GMT
date: Fri, 19 Apr 2024 17:25:12 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713547512580_1600457407_435230665_459_13302_1_0_31";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Medium.woff2

2.18.173.147

200 OK

20 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Medium.woff2
IP
2.18.173.147:443
ASN
#16625 AKAMAI-AS

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 19488, version 1.0
Size
20 kB (19488 bytes)
Hash
0144478d6b5350e77084c9b5673719be
a7f0512c295c2dd279914b6f8a0de3085b84a91c
a9be050cd531fa9a5f06f2e209829ea95edae28a8425908462ef55fd82979a89

HTTP Headers

GET /assets/resources/webcontent/styles/fonts/Roboto-Medium.woff2 HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upsschweiz.com/
Origin: https://upsschweiz.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
last-modified: Thu, 19 Aug 2021 19:26:37 GMT
accept-ranges: bytes
content-length: 19488
content-type: font/woff2
cache-control: no-cache
expires: Fri, 19 Apr 2024 17:25:12 GMT
date: Fri, 19 Apr 2024 17:25:12 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1713547512584_1600457407_435230666_920_18564_0_0_31";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/ae0fc40a90ceb2cb6785ea730fd896f2d0453d5260d

2.18.173.147

200 OK

65 kB

URL GET HTTP/2
www.ups.com/assets/ae0fc40a90ceb2cb6785ea730fd896f2d0453d5260d
IP
2.18.173.147:443
ASN
#16625 AKAMAI-AS

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (1096)
Size
65 kB (64824 bytes)
Hash
104fc36ab95932b73da28f1f266eba66
959c7ad00ebbffefd6e0774587c74087ca4e4244
93896fb0f7c2480c755ca3a267c14b7b55b5fbf5126dcef91091424c33089ae9

HTTP Headers

GET /assets/ae0fc40a90ceb2cb6785ea730fd896f2d0453d5260d HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upsschweiz.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
content-md5: EE/DarlZMrc9oo8fJm66Zg==
last-modified: Fri, 19 Apr 2024 13:31:57 GMT
etag: 0x8DC607515D49D56
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-encoding: gzip
content-length: 64824
timing-allow-origin: *
access-control-allow-methods: GET, POST, HEAD
access-control-allow-origin: *
cache-control: max-age=600
expires: Fri, 19 Apr 2024 17:35:12 GMT
date: Fri, 19 Apr 2024 17:25:12 GMT
vary: Accept-Encoding
server-timing: edge; dur=1, origin; dur=12, cdn-cache; desc=MISS, ak_p; desc="1713547512509_1600457407_435230655_1313_6205_9_0_41";dur=1
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/smallbusiness/images/hero/express-delivery.jpg

2.18.173.147

200 OK

26 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/smallbusiness/images/hero/express-delivery.jpg
IP
2.18.173.147:443
ASN
#16625 AKAMAI-AS

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ISO Media, AVIF Image
Size
26 kB (25882 bytes)
Hash
b74a7bfdf3baea8f51e01d5c641f9443
a453e51391f60a6de6f45a9950f37c1a68ea0864
aa836c90e325c61e938890090bb862241d82bcd1075470ef51cb1c49ab0f69c7

HTTP Headers

GET /assets/resources/webcontent/smallbusiness/images/hero/express-delivery.jpg HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upsschweiz.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-frame-options: SAMEORIGIN
last-modified: Wed, 06 Sep 2023 03:03:05 GMT
server: Akamai Image Manager
x-serial: 1639
x-check-cacheable: YES
content-length: 25882
content-type: image/avif
cache-control: private, no-transform, max-age=43200
expires: Sat, 20 Apr 2024 05:25:12 GMT
date: Fri, 19 Apr 2024 17:25:12 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=38, ak_p; desc="1713547512593_1600457407_435230658_5510_15458_12_0_11";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

www.ups.com/assets/resources/webcontent/styles/ups.styles.b112d13750ec.css

2.18.173.147

200 OK

35 kB

URL GET HTTP/2
www.ups.com/assets/resources/webcontent/styles/ups.styles.b112d13750ec.css
IP
2.18.173.147:443
ASN
#16625 AKAMAI-AS

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (65439)
Size
35 kB (35424 bytes)
Hash
66d3f3f68f1bcc941b34778b0ebaafce
de0b824d74993392bf9464cce2de74a67a535b75
f451530350ec58738762de87c5b9e0b9b7c99f72f8d9baa4715dd386a8e94373

HTTP Headers

GET /assets/resources/webcontent/styles/ups.styles.b112d13750ec.css HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upsschweiz.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
accept-ranges: bytes
content-encoding: br
last-modified: Fri, 19 Apr 2024 05:05:54 GMT
referrer-policy: same-origin
server: Akamai Resource Optimizer
x-frame-options: SAMEORIGIN
content-length: 35424
expires: Fri, 19 Apr 2024 17:25:12 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Fri, 19 Apr 2024 17:25:12 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=230, origin; dur=0, ak_p; desc="1713547512576_1600457407_435230660_23020_12321_17_0_21";dur=1
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

142.250.74.99

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://upsschweiz.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 10:46:32 GMT
expires: Wed, 16 Apr 2025 10:46:32 GMT
cache-control: public, max-age=31536000
age: 283120
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

142.250.74.99

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
142.250.74.99:443
ASN
#15169 GOOGLE

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://upsschweiz.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:37:01 GMT
expires: Fri, 18 Apr 2025 02:37:01 GMT
cache-control: public, max-age=31536000
age: 139691
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/webfonts/free-fa-solid-900.woff2

172.67.139.119

200 OK

156 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/webfonts/free-fa-solid-900.woff2
IP
172.67.139.119:443
ASN
#13335 CLOUDFLARENET

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98
ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT

File type
Web Open Font Format (Version 2), TrueType, length 156388, version 773.1280
Size
156 kB (156388 bytes)
Hash
ae015e3286ef56a0daf8e83838a32a88
7c18577fd6c4e7d9036b244215ace3945372eefe
41dca0965bdfd255f85e7fc8e9a3dc1fe3eb810996c553d4ef2b8872737ee825

HTTP Headers

GET /releases/v6.5.2/webfonts/free-fa-solid-900.woff2 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://upsschweiz.com
DNT: 1
Connection: keep-alive
Referer: https://upsschweiz.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:25:13 GMT
content-type: font/woff2
content-length: 156388
last-modified: Tue, 02 Apr 2024 15:51:14 GMT
etag: "ae015e3286ef56a0daf8e83838a32a88"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: fa-kit-token
access-control-max-age: 3000
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bhFASj26JBtWy2wgFjtW1wThXzsYK-hrjpuKO3wTd5VkfIEjPu_OsA==
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g8dllAYVk0NnFzEeg83AhWycsdI0Blma444KCyO3%2BNhLAKm%2FVT2wAmQTjWGfFxaa%2BiLrv%2FoxJ0TKCnymp0GPj%2FXkzrOIQQIq0RVmlTQO9QGk09k3wRcQEg1wmpyczUR8OzzADFt60g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e97b5490156c7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.ups.com/nuance/nuance-chat.html?IFRAME&nuance-frame-ac=0

2.18.173.147

200 OK

1.7 kB

URL GET HTTP/2
www.ups.com/nuance/nuance-chat.html?IFRAME&nuance-frame-ac=0
IP
2.18.173.147:443
ASN
#16625 AKAMAI-AS

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerCOMODO CA Limited
Subjectwww.ups.com
Fingerprint54:6F:0D:F1:26:1A:63:17:55:3A:C4:CD:B8:F5:B3:02:4D:58:FF:9F
ValidityThu, 14 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (4156), with CRLF, LF line terminators
Size
1.7 kB (1708 bytes)
Hash
9349c227ddf7ea3d236c2a533f66828e
ed9a23de67c917b37ae6c17cb3629b0d4d2a3bc7
65aea381bf6707d6eda3754a502c6990f2e17537f17c2d0d9a6951e432616c6e

HTTP Headers

GET /nuance/nuance-chat.html?IFRAME&nuance-frame-ac=0 HTTP/1.1
Host: www.ups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upsschweiz.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Apache
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cache-control: no-store, no-cache
pragma: no-cache
content-security-policy-report-only: default-src 'unsafe-inline' 'unsafe-eval' 'self' blob: data: ups.com *.ups.com *.doubleclick.net doubleclick.net googleads.g.doubleclick.net *.jquery.com jquery.com nuance.com *.nuance.com inq.com *.inq.com *.salesforce-sites.com salesforce-sites.com *.salesforceliveagent.com salesforceliveagent.com *.salesforce.com salesforce.com *.bootstrapcdn.com bootstrapcdn.com tiqcdn.com *.tiqcdn.com tealiumiq.com *.tealiumiq.com youtube.com *.youtube.com adsrvr.org *.adsrvr.org demandbase.com *.demandbase.com facebook.net *.facebook.net facebook.com *.facebook.com bing.com *.bing.com googletagmanager.com *.googletagmanager.com www.google.com google.com *.google.com fullstory.com *.fullstory.com qualtrics.com *.qualtrics.com ups.demdex.net demdex.net *.demdex.net omtrdc.net *.omtrdc.net  google-analytics.com *.google-analytics.com googleadservices.com *.googleadservices.com company-target.com *.company-target.com marketo.com *.marketo.com  marketo.net *.marketo.net licdn.com *.licdn.com linkedin.com *.linkedin.com blueconic.net *.blueconic.net mpsnare.iesnare.com iesnare.com *.iesnare.com virtualearth.net *.virtualearth.net iovation.com *.iovation.com cdn-apple.com *.cdn-apple.com gstatic.com *.gstatic.com googleapis.com *.googleapis.com parcelpath.com:7141 *.parcelpath.com:7141 *.ytimg.com ytimg.com everesttech.net *.everesttech.net rlcdn.com *.rlcdn.com fonts.googleapis.com fonts.gstatic.com online-metrix.net *.online-metrix.net customerfeedback.ups.com login.microsoftonline.com mktoresp.com *.mktoresp.com; frame-ancestors 'self' parcelpath.com:7141 *.parcelpath.com:7141 ups.com *.ups.com;
accept-ranges: bytes
content-type: text/html
x-akamai-transformed: 9 236 0 pmb=mNONE,1mTOE,1
content-encoding: gzip
date: Fri, 19 Apr 2024 17:25:13 GMT
content-length: 1708
vary: Accept-Encoding
x-akam-sw-version: 0.5.0
link: <https://www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Medium.woff>;rel="preload";as="font";type="font/woff";crossorigin,<https://www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Bold.woff>;rel="preload";as="font";type="font/woff";crossorigin,<https://www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Regular.ttf>;rel="preload";as="font";type="font/ttf";crossorigin,<https://www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Bold.ttf>;rel="preload";as="font";type="font/ttf";crossorigin,<https://www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Medium.ttf>;rel="preload";as="font";type="font/ttf";crossorigin,<https://www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Medium.woff2>;rel="preload";as="font";type="font/woff2";crossorigin,<https://www.ups.com/assets/resources/webcontent/styles/fonts/Roboto-Regular.woff2>;rel="preload";as="font";type="font/woff2";crossorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=63072000; includeSubDomains; preload
set-cookie: AKA_A2=A; expires=Fri, 19-Apr-2024 18:25:13 GMT; path=/; domain=ups.com; secure; HttpOnly
_abck=FEDBB894BF192586043198D6BF0BCD00~-1~YAAQvwplXxBqVuWOAQAAXQ1k9wtb1xcJNZzei6Pe/Eq/wapBn7gbBu0X/atPdDmbX/3WHkSadRgB+z2CzWoizTHDZdRULZ/lU+78FNd0r/p9qga80ZcB6GVafrlwmRyVo9e4xGDYTF35zMyyw62/z0UKs6zsqLRhnLHK/pgTiGMsvAh67hN/T+oZnFHErhiBgXAN48+tvhsbrOl6g/mRo4thru7LtGnsqvwFi43nDeMIE9o9RaMFyTqCVei63+RG3ynj8EnZuk/N89qXxC22Kao8Z2Q3IPIfogMOWnsZxKxG51QykG6e+H7DleLWcaGkg3YCtfBekSVvwMcARHrvR+FIxH9EMaQjxJnwuZl6V8uhUXdxaIHXmICJcgn1mGXo9jX48A==~-1~-1~-1; Domain=.ups.com; Path=/; Expires=Sat, 19 Apr 2025 17:25:13 GMT; Max-Age=31536000; Secure
ak_bmsc=A8C53756BCB2C7E026CF1AB8B2DE0C55~000000000000000000000000000000~YAAQvwplXxFqVuWOAQAAXQ1k9xftdg+5HQ+W0EawfUbICKrJmWlqJuZm3yLUQ7q4TgT/iZVeuN73grBjmFHrolFc7u+vAfPtpRAJGdTmgWLGSXqal/0GJ/U4ApzCeLG2Bfug3EtnINMkA+AlQhiGws5p6o/0kWK7LK6AJ1YkBPWug/UCVxRwF92JOMWFPxxO9oGloquXJ07yguMD/giQ0lveqTnnlOZH5tCdzO/HQVhhgixs+2rfuZlMwx2qvNDBKiRyY2yT3ediPMTATD+1xGEB6QV7mZQJfZOvC4CzfQ3DKAGK1AYhbjGYGqCWedz0yg606YUTmBZm7FEaLkeNY72BZoCV+9PSnevFHYtVMb2opIqtxwD2xpbxxhN4wQV7h4P79U0B; Domain=.ups.com; Path=/; Expires=Fri, 19 Apr 2024 19:25:13 GMT; Max-Age=7200
bm_sz=C8E9A2A4B0BBBDA2E4E00240E9D6E074~YAAQvwplXxJqVuWOAQAAXQ1k9xeCTDUYa0m1oXLAsv77U777Ym/wn7VKBdgEquBfRGBQjqCMXEAYzQHcJ2CugiytRj7vpKXWvDEqA9lX5E9wJk3CsLCM64ylUhFmgMtrzp39xdABDZdEM1j2ejTOwOMjirhotRxdr6Grw1+poiYJ+KfzdGj9ddvIiYN6r8y3/FR7GTpDQbZl0Hu0ssnluP3edG5dOd/lauZZMULj8v8wXU8VQDm4ywW7CRBUImK26swIl3ntvrVC/N0Ri5B4O6wpObyykIEWF+oEPmM1G56gf//0HXkzmuU4NyHo/7CHySwXEwxqyLWYQlH8xjkcwAEuNxWFevCnKkfQ2KQS4PXGR0Y=~4276546~3228212; Domain=.ups.com; Path=/; Expires=Fri, 19 Apr 2024 21:25:13 GMT; Max-Age=14400
server-timing: ak_p; desc="1713547513039_1600457407_435231160_15971_18259_3_0_21";dur=1
X-Firefox-Spdy: h2

upsschweiz.com/_onelink_/ups/sites/www.ups.com/onelink.css?ts=20211109

54.153.118.95

404 Not Found

808 B

URL GET HTTP/2
upsschweiz.com/_onelink_/ups/sites/www.ups.com/onelink.css?ts=20211109
IP
54.153.118.95:443
ASN
#16509 AMAZON-02

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerLet's Encrypt
Subjectupsschweiz.com
Fingerprint7C:45:0B:CB:72:A9:B9:1E:F3:42:82:6D:47:A2:68:30:05:4D:BE:65
ValidityThu, 18 Apr 2024 18:54:09 GMT - Wed, 17 Jul 2024 18:54:08 GMT

File type
HTML document, ASCII text, with very long lines (866), with no line terminators
Size
808 B (808 bytes)
Hash
b45bdabc5c2538b0c4e5f352bcdfb585
5a97ce87ce8d3d86a043c1a5e68e968e20a1e146
c96189c857253fcdbe13dfcbc7f919050fae21ccb7116c3078ee3c8d8d0f12c7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_onelink_/ups/sites/www.ups.com/onelink.css?ts=20211109 HTTP/1.1
Host: upsschweiz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upsschweiz.com/card.php
Cookie: PHPSESSID=vntf1ioo61gnp7gn0rg5rf8r9b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 17:25:12 GMT
content-type: text/html
last-modified: Thu, 18 Apr 2024 19:53:39 GMT
etag: W/"328-6166453d5e684"
content-encoding: br
X-Firefox-Spdy: h2

kit.fontawesome.com/363d4a4d7b.js

172.64.147.188

200 OK

12 kB

URL GET HTTP/2
kit.fontawesome.com/363d4a4d7b.js
IP
172.64.147.188:443
ASN
#13335 CLOUDFLARENET

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D
ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (11461)
Size
12 kB (11889 bytes)
Hash
f4e15e60ee412880a1203ea60b04876e
584e95fd91f7ab67130da4912f23be697ffc3b8f
62d75a9de72fdc2f021d213b3e72f71332b6b4deb3a5a9028b0b6154fa85189c

HTTP Headers

GET /363d4a4d7b.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://upsschweiz.com
DNT: 1
Connection: keep-alive
Referer: https://upsschweiz.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:25:12 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, stale-while-revalidate=30
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F8e-Yjp7OrfKuQ7Ad28h
cf-cache-status: MISS
server: cloudflare
cf-ray: 876e97afaf160b65-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Roboto:400,700&display=swap

142.250.74.106

200 OK

4.7 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:400,700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
ASCII text, with very long lines (4786), with no line terminators
Size
4.7 kB (4660 bytes)
Hash
c8ea484de9f8d29d52b3297bf12ebcd4
d80d042dffa0aa28c84d983490de88307a3f6b94
d22823463f2014e907a4ac0cd6f42f369fab071947f3becb21873dabd8671d6e

HTTP Headers

GET /css?family=Roboto:400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upsschweiz.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 19 Apr 2024 17:25:12 GMT
date: Fri, 19 Apr 2024 17:25:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-shims.min.css?token=363d4a4d7b

172.67.139.119

200 OK

28 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-shims.min.css?token=363d4a4d7b
IP
172.67.139.119:443
ASN
#13335 CLOUDFLARENET

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98
ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT

File type
ASCII text, with very long lines (27377)
Size
28 kB (27592 bytes)
Hash
940b066040a876fa1dc7b2ee2d222a58
64b2aea0b4d60d879d4ff7540192a906ffc0fd92
f4e953827930889e844103c3a6771bd2e9de17d091b36378c40362271858e075

HTTP Headers

GET /releases/v6.5.2/css/free-v4-shims.min.css?token=363d4a4d7b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upsschweiz.com/
Origin: https://upsschweiz.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:25:13 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"940b066040a876fa1dc7b2ee2d222a58"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: su9h75hPGqkh9_DiWIKaJ0q8zTSb2Kfo1f-8AU-H8cAgcGBQI_bf0Q==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RqjrJS9sirOn9KG6nIvjUqgRG8Oa0KX2wT6E7lRcQ0haX4GrHj%2BtBVYkIadhwvkD03t0IjXDdqhE8eSH6513jwkeWeinlMsavn4MbW7Ovj71%2BQb02Cw9q39CmRsMd2psHeiwICEAZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e97b44ffe56c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/css/free.min.css?token=363d4a4d7b

172.67.139.119

200 OK

104 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/css/free.min.css?token=363d4a4d7b
IP
172.67.139.119:443
ASN
#13335 CLOUDFLARENET

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98
ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT

File type
ASCII text, with very long lines (65321)
Size
104 kB (103541 bytes)
Hash
7f29cd8c97789aa298af8c61623ca28b
af8109e0e5c8bb2c1c3ab44ba7b5d25900ca454a
3e9c73fa687cd4110688668977a7caa87f5a1dee0d11f03687bd4871deedf1c1

HTTP Headers

GET /releases/v6.5.2/css/free.min.css?token=363d4a4d7b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upsschweiz.com/
Origin: https://upsschweiz.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:25:13 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"7f29cd8c97789aa298af8c61623ca28b"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QOQZUY2QUSwduMHgBMIyIgw6p6pgqowx0KEvU3RkKoXdxo9HeOT6ww==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BUf6ZYXLo2LTIpFHDcOR7G2rhdJFwitMqeFdhd7CFbM%2BMm7yKUwe0N0f8i4y9%2FqeZ9UPARPDw4jPxDLR9Wua7mlupSpA5li7%2F5MWeMnEfiaDXen%2FBPlBlUHaKw3vN%2Bm8L%2BkjTDritg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e97b44ffd56c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/css/free-v5-font-face.min.css?token=363d4a4d7b

172.67.139.119

200 OK

823 B

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/css/free-v5-font-face.min.css?token=363d4a4d7b
IP
172.67.139.119:443
ASN
#13335 CLOUDFLARENET

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98
ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT

File type
ASCII text, with very long lines (845), with no line terminators
Size
823 B (823 bytes)
Hash
d8a0274a5097af25642c9310d6d4bb3e
61512d739400e60d9360863446eaf008395859fb
84f5ae05668bcfe4bd7447d5035e909686423e998d8dfc2c96789875ef78cdd3

HTTP Headers

GET /releases/v6.5.2/css/free-v5-font-face.min.css?token=363d4a4d7b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upsschweiz.com/
Origin: https://upsschweiz.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:25:13 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"a3d53e21a02e37af6cbc00ac63b3cc1e"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WwEUsWqbBvMAfjq_xZiMWvDhbMxFmxOohYRPqBdJBK0ksjPTf_Bxbw==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fhjmTHeFuphudxtE3VSQQHlgWHGaZLJ0b2VU9OMGCpPpazuqjPiYGBzGmHu%2BJQsajb2jn7twl5n9Q9BroYJ4vPcnUIQcmq3IQ7kVJVxeOhYe1XWGXFPbnIjyZlP%2FuZL8SY1NV5tIXw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e97b44fff56c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-font-face.min.css?token=363d4a4d7b

172.67.139.119

200 OK

1.8 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-font-face.min.css?token=363d4a4d7b
IP
172.67.139.119:443
ASN
#13335 CLOUDFLARENET

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98
ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT

File type
ASCII text, with very long lines (1803), with no line terminators
Size
1.8 kB (1775 bytes)
Hash
36f549800bc029aaadd0d7ac3d1d0f54
45bfcbb57c0155a2f22a47117deae6dc87706d4a
4048a832df1b9ac88058b1964ab9c45300daf6c10b0a02d697a29d729a81ea30

HTTP Headers

GET /releases/v6.5.2/css/free-v4-font-face.min.css?token=363d4a4d7b HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://upsschweiz.com/
Origin: https://upsschweiz.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:25:13 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"9c9f596493867f0e7ef5f9fe99103fce"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qFUkNZHpJVhWz0dM22E9gAeLDqAJ0gx8gfwjXTwvPrQNtvkd-7bAjw==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D5pl3ot3gbVBnsPrqNOAK6c3eU%2FuYmfkiA60M3rUaJgH%2BeHR4ufAmB7V%2BcBh5cVsoX%2BtRzwpC9ZXGb96clYj51B8su7wzzhh35mZKJAoPeQyJiJYJLLD6uP3s45CN9kQjzEXWtYCIw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e97b4480056c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

upsschweiz.com/_onelink_/ups/sites/www.ups.com/en2engb/onelink.css?ts=20210305

54.153.118.95

404 Not Found

808 B

URL GET HTTP/2
upsschweiz.com/_onelink_/ups/sites/www.ups.com/en2engb/onelink.css?ts=20210305
IP
54.153.118.95:443
ASN
#16509 AMAZON-02

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerLet's Encrypt
Subjectupsschweiz.com
Fingerprint7C:45:0B:CB:72:A9:B9:1E:F3:42:82:6D:47:A2:68:30:05:4D:BE:65
ValidityThu, 18 Apr 2024 18:54:09 GMT - Wed, 17 Jul 2024 18:54:08 GMT

File type
HTML document, ASCII text, with very long lines (866), with no line terminators
Size
808 B (808 bytes)
Hash
b45bdabc5c2538b0c4e5f352bcdfb585
5a97ce87ce8d3d86a043c1a5e68e968e20a1e146
c96189c857253fcdbe13dfcbc7f919050fae21ccb7116c3078ee3c8d8d0f12c7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /_onelink_/ups/sites/www.ups.com/en2engb/onelink.css?ts=20210305 HTTP/1.1
Host: upsschweiz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upsschweiz.com/card.php
Cookie: PHPSESSID=vntf1ioo61gnp7gn0rg5rf8r9b
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 17:25:12 GMT
content-type: text/html
last-modified: Thu, 18 Apr 2024 19:53:39 GMT
etag: W/"328-6166453d5e684"
content-encoding: br
X-Firefox-Spdy: h2

upsschweiz.com/favicon.ico

54.153.118.95

404 Not Found

808 B

URL GET HTTP/2
upsschweiz.com/favicon.ico
IP
54.153.118.95:443
ASN
#16509 AMAZON-02

Requested by
https://upsschweiz.com/card.php
Certificate
IssuerLet's Encrypt
Subjectupsschweiz.com
Fingerprint7C:45:0B:CB:72:A9:B9:1E:F3:42:82:6D:47:A2:68:30:05:4D:BE:65
ValidityThu, 18 Apr 2024 18:54:09 GMT - Wed, 17 Jul 2024 18:54:08 GMT

File type
HTML document, ASCII text, with very long lines (866), with no line terminators
Size
808 B (808 bytes)
Hash
b45bdabc5c2538b0c4e5f352bcdfb585
5a97ce87ce8d3d86a043c1a5e68e968e20a1e146
c96189c857253fcdbe13dfcbc7f919050fae21ccb7116c3078ee3c8d8d0f12c7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: upsschweiz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upsschweiz.com/card.php
Cookie: PHPSESSID=vntf1ioo61gnp7gn0rg5rf8r9b
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Fri, 19 Apr 2024 17:25:13 GMT
content-type: text/html
last-modified: Thu, 18 Apr 2024 19:53:39 GMT
etag: W/"328-6166453d5e684"
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (31)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN