postupdate.top/
155.94.134.4 78 B IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type HTML document, ASCII text, with no line terminators
Hash bef46d3bb712d23036be3aa8ebfba884
41c025e409ff2150939375dca4a336a997c9f778
1f40abcbcb4dedbc58e0bf815935a87e2d10ef2c2ec65cd347a64ae96402a4b9
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET / HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:01:57 GMT
content-type: text/html
content-length: 78
last-modified: Wed, 01 Mar 2023 19:00:52 GMT
etag: "63ffa0e4-4e"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/images/loading-icon-transparent-background-12.jpg
155.94.134.4 82 kB URL postupdate.top/static/images/loading-icon-transparent-background-12.jpg
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type GIF image data, version 89a, 630 x 637\012- data
Hash 9e0373c2b4410c49439dfd822c5fd16e
427f86c03751b7e107fd282bbe32be18fc2e0898
05eb745176d79ec27d52d544582483fc4d0f6378c7ed2060be24dfc4e8990668
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/images/loading-icon-transparent-background-12.jpg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:01:58 GMT
content-type: image/jpeg
content-length: 81572
last-modified: Wed, 21 Sep 2022 07:47:06 GMT
etag: "632ac17a-13ea4"
expires: Sat, 06 Jan 2024 03:01:58 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/ResourceConfig/urlConfig.json
155.94.134.4 959 B URL postupdate.top/ResourceConfig/urlConfig.json
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 17e0cdd96d5877dbeb18be488ca306a1
301ae30874c299c0f4b10559fec844a58c95b191
93b2a14bbdb713ba9f2c79c052f26907799ea347a4b694083d52614a95023b6e
Analyzer Verdict Alert OpenPhish phishing United States Postal Service
GET /ResourceConfig/urlConfig.json HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:01:58 GMT
content-type: application/json
content-length: 959
last-modified: Wed, 06 Dec 2023 15:40:11 GMT
etag: "657095db-3bf"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/favicon.ico
155.94.134.4 146 B URL postupdate.top/favicon.ico
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /favicon.ico HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 07 Dec 2023 03:02:01 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
ushoutai2.top/websocket/fe75f236cae6ade380d172f9ab7483ba
155.94.156.115 0 B URL ushoutai2.top/websocket/fe75f236cae6ade380d172f9ab7483ba
IP 155.94.156.115:0
ASN #8100 ASN-QUADRANET-GLOBAL
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /websocket/fe75f236cae6ade380d172f9ab7483ba HTTP/1.1
Host: ushoutai2.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://postupdate.top
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vgfrZTMPn+ZRjvXi/GfwBA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101
Server: nginx
Date: Thu, 07 Dec 2023 03:02:04 GMT
Connection: upgrade
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Max-Age: 3600
Access-Control-Allow-Headers: *
Upgrade: websocket
Sec-WebSocket-Accept: XIOIB1NbnO8QX1qSdXqayhivhLo=
Sec-WebSocket-Extensions: permessage-deflate
postupdate.top/static/js/us.js
155.94.134.4 521 B URL postupdate.top/static/js/us.js
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type gzip compressed data, from Unix\012- data
Hash 28a51884873e400bf2a40eaf798d3256
a82c9a6e4da2357d5bb984acefc5eba4a6dfa340
5e25cfa3b52a81245129b0cbd560c4a7c2c8fb241abec68ef3982df9ca854ab0
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/us.js HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:01:58 GMT
content-type: application/javascript
last-modified: Fri, 03 Mar 2023 17:34:29 GMT
vary: Accept-Encoding
etag: W/"64022fa5-43f"
expires: Thu, 07 Dec 2023 15:01:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
fast.fonts.net/t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0
104.16.249.67200 OK 0 B URL GET HTTP/2 fast.fonts.net/t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0
IP 104.16.249.67:443
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB9:2B:82:F1:50:51:EA:B4:39:81:75:2F:6E:8B:8B:94:55:81:C3:47
ValidityFri, 05 May 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0 HTTP/1.1
Host: fast.fonts.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 03:02:07 GMT
content-type: text/css; charset=utf-8
content-length: 0
x-amz-id-2: ki65sQC1HlYAvAwzpIlg68BKJDoZiZ/BwbN/hDH5RUfm7vMSBZqfat1D29ePjiEs20YJy+049dY=
x-amz-request-id: 4MWDSXH8MPCQQMJM
last-modified: Tue, 23 Mar 2021 12:59:23 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
cache-control: public, max-age=0, s-maxage=604800
x-amz-meta-mtime: 1519217722
x-amz-version-id: null
cf-cache-status: HIT
age: 160190
accept-ranges: bytes
set-cookie: __cf_bm=eu25v4k3cGI6O.OA13Nc6vlCFM2gVNniSx9ZCjMkq7Q-1701918127-0-AXz+xmv+fu2zVhsJNGGJZ6137cQ83pi0balYgst0XDG3dGAoXN9o/UDUYk8OD8+3TVBfKBCDAe4h5V7fgLl8uU0=; path=/; expires=Thu, 07-Dec-23 03:32:07 GMT; domain=.fonts.net; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 83198727af9d15f0-ARN
X-Firefox-Spdy: h2
postupdate.top/config/urlConfig.json
155.94.134.4 146 B URL postupdate.top/config/urlConfig.json
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /config/urlConfig.json HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
postupdate.top/static/js/header-init-search.js
155.94.134.4 904 B URL postupdate.top/static/js/header-init-search.js
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type ASCII text, with CRLF line terminators
Hash d8cb563907e68e9649948c6f521efe60
f5b7cf8123929db8162a2af51d07dd11c21fbac3
fd1e9eadb5698c1bc534ef8a75303b3b67f5e1ab7d1b217b27b09da42aa5036a
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/header-init-search.js HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: application/javascript
content-length: 904
last-modified: Tue, 20 Sep 2022 20:41:22 GMT
etag: "632a2572-388"
expires: Thu, 07 Dec 2023 15:02:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/js/ResourceRedConfig.js
155.94.134.4200 OK 8.3 kB URL GET HTTP/2 postupdate.top/static/js/ResourceRedConfig.js
IP 155.94.134.4:443
ASN #8100 ASN-QUADRANET-GLOBAL
Certificate IssuerLet's Encrypt
Subjectpostupdate.top
Fingerprint7C:99:7B:52:95:E2:DD:2C:F5:73:5E:D6:83:3E:27:8A:9E:EC:5E:2B
ValidityWed, 06 Dec 2023 14:42:44 GMT - Tue, 05 Mar 2024 14:42:43 GMT
File type gzip compressed data, from Unix\012- data
Hash 866409c640a8151a0fa6e12f228da749
2675eebeb3f81e8715b8a4d186fc4854a6276d39
3003ffe7f75c918cf7954bb184de05f7ef972a427156fac8160f618af0c73390
Analyzer Verdict Alert OpenPhish phishing United States Postal Service
GET /static/js/ResourceRedConfig.js HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:01:58 GMT
content-type: application/javascript
last-modified: Thu, 04 May 2023 18:07:38 GMT
vary: Accept-Encoding
etag: W/"6453f46a-2d35"
expires: Thu, 07 Dec 2023 15:01:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
postupdate.top/static/picture/hamburger.svg
155.94.134.4 546 B URL postupdate.top/static/picture/hamburger.svg
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash 37c94e8de8729be2b0b9833bafa28f3b
c675396f6d65666dd6047b6e92cbd5429556dbac
b95f434286744e3dbaf5bc56f41d4ce2640da3038461502f7ac243a5931e9435
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/hamburger.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/svg+xml
content-length: 546
last-modified: Tue, 20 Sep 2022 20:41:14 GMT
etag: "632a256a-222"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/logo_mobile.svg
155.94.134.4200 OK 2.1 kB URL GET HTTP/2 postupdate.top/static/picture/logo_mobile.svg
IP 155.94.134.4:443
ASN #8100 ASN-QUADRANET-GLOBAL
Certificate IssuerLet's Encrypt
Subjectpostupdate.top
Fingerprint7C:99:7B:52:95:E2:DD:2C:F5:73:5E:D6:83:3E:27:8A:9E:EC:5E:2B
ValidityWed, 06 Dec 2023 14:42:44 GMT - Tue, 05 Mar 2024 14:42:43 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash f8ad388b3e39b860c97de0029ae98a21
9b032ef4ef4100dda1ba44be4836e6956b11387c
9685d6241f41ac71741d0ee9b242779f640cd3b1e64bb9bbcfb8798c5be503b2
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/logo_mobile.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/svg+xml
content-length: 2060
last-modified: Tue, 20 Sep 2022 20:41:24 GMT
etag: "632a2574-80c"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/search.svg
155.94.134.4200 OK 1.5 kB URL GET HTTP/2 postupdate.top/static/picture/search.svg
IP 155.94.134.4:443
ASN #8100 ASN-QUADRANET-GLOBAL
Certificate IssuerLet's Encrypt
Subjectpostupdate.top
Fingerprint7C:99:7B:52:95:E2:DD:2C:F5:73:5E:D6:83:3E:27:8A:9E:EC:5E:2B
ValidityWed, 06 Dec 2023 14:42:44 GMT - Tue, 05 Mar 2024 14:42:43 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash ace472e478185d5f5ecd18c7d821eff7
c4c97892e41d3dd838912c42fd7a7b212f671d1b
c8b13b10e28b6b420151db578831a416b7c1805d7672eeb57e69dc697fda1e27
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/search.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/svg+xml
content-length: 1465
last-modified: Tue, 20 Sep 2022 20:41:14 GMT
etag: "632a256a-5b9"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/tracking.svg
155.94.134.4 1.6 kB URL postupdate.top/static/picture/tracking.svg
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 2fb7b372aea93502ca192e5a633d1aa1
ce358703cce32b2176cf6ec94e17341cb6f93f03
58ad849f3ea489d0b2ee4f0dd1e4fd0b613a5248fd6b127a4479646ce4735593
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/tracking.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/svg+xml
content-length: 1561
last-modified: Tue, 20 Sep 2022 20:41:22 GMT
etag: "632a2572-619"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/mailman.svg
155.94.134.4 1.8 kB URL postupdate.top/static/picture/mailman.svg
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1426a5796b4337302ee498d4a9265b38
c3b2b8042eb536d43101c5281d5aae8244d1e0e1
87f26b59587d5549f99b77e77519bf17b625c6a693931f54f62accac834e6ff1
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/mailman.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/svg+xml
content-length: 1827
last-modified: Tue, 20 Sep 2022 20:41:30 GMT
etag: "632a257a-723"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/location.svg
155.94.134.4 2.6 kB URL postupdate.top/static/picture/location.svg
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 9b913bc84d41ec1c78da5889d36e1431
21b0075c9ec43a7ec769dde1d1ec8149b0686c0f
87d11356a8f76ef3af3c6d46bc4958cf3746e9a5b69e81d1df952b274319f539
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/location.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/svg+xml
content-length: 2586
last-modified: Tue, 20 Sep 2022 20:41:20 GMT
etag: "632a2570-a1a"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/stamps.svg
155.94.134.4 1.1 kB URL postupdate.top/static/picture/stamps.svg
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 2e722b55bb31b83042310fbf5b45128d
cb6cd5c99c06ba8c04c7795dea4d13241eaaa045
0b68e5b64999ab2e6d137a1886410cc9e8bed0b3863aacd838a3eb008f2bb516
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/stamps.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/svg+xml
content-length: 1103
last-modified: Tue, 20 Sep 2022 20:41:14 GMT
etag: "632a256a-44f"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/schedule_pickup.svg
155.94.134.4 1.8 kB URL postupdate.top/static/picture/schedule_pickup.svg
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash d627861a77e755da093cae9b4db00b7b
fc5ac7d6bc6bf06f53b399848be232b35aa2c5b1
2a5e1fdc8e264327be71c3063cc6bf1dd8a618576310a5d26dc31ba8d6f83616
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/schedule_pickup.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/svg+xml
content-length: 1775
last-modified: Tue, 20 Sep 2022 20:41:24 GMT
etag: "632a2574-6ef"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/calculate_price.svg
155.94.134.4200 OK 2.3 kB URL GET HTTP/2 postupdate.top/static/picture/calculate_price.svg
IP 155.94.134.4:443
ASN #8100 ASN-QUADRANET-GLOBAL
Certificate IssuerLet's Encrypt
Subjectpostupdate.top
Fingerprint7C:99:7B:52:95:E2:DD:2C:F5:73:5E:D6:83:3E:27:8A:9E:EC:5E:2B
ValidityWed, 06 Dec 2023 14:42:44 GMT - Tue, 05 Mar 2024 14:42:43 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 6204f7fb48ef86964b4b1cce343ebdde
d60b7e47e22615fdea2a24e102200090b466b862
edbb6a59137018b9a8229184aac04a2661787564cdf4484229bee96d7c11e771
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/calculate_price.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/svg+xml
content-length: 2302
last-modified: Tue, 20 Sep 2022 20:41:14 GMT
etag: "632a256a-8fe"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/find_zip.svg
155.94.134.4 1.5 kB URL postupdate.top/static/picture/find_zip.svg
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash e30aab66bad715f4fef4b6c42f8490d2
40be7a560b0687cf57c7ef0c0600ca08203a680c
aa6ff55c203834f667cbb01cedb0d409ff3b8f1b5a4de8c89a79b2e7034a8001
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/find_zip.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/svg+xml
content-length: 1471
last-modified: Tue, 20 Sep 2022 20:41:30 GMT
etag: "632a257a-5bf"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/holdmail.svg
155.94.134.4 1.4 kB URL postupdate.top/static/picture/holdmail.svg
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 4c8f3d7064524311ef86ddd0ded768d1
53ca5f29f603435821d07019cf123e430626f54e
2d45f10e1a6925e9500a4fb6e0223ce4ddfb492a914472ca8229fa01e3f94afa
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/holdmail.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/svg+xml
content-length: 1448
last-modified: Tue, 20 Sep 2022 20:41:20 GMT
etag: "632a2570-5a8"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/change_address.svg
155.94.134.4 1.9 kB URL postupdate.top/static/picture/change_address.svg
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 3955e49630deb78cc1212ba20d83bafc
881ba502127d57c48784703683869abf4c8e28d8
b84842a014070d9363a46638e512476260162014c9bde4bcca7a9ade4177ea12
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/change_address.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/svg+xml
content-length: 1869
last-modified: Tue, 20 Sep 2022 20:41:22 GMT
etag: "632a2572-74d"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/po_box.svg
155.94.134.4 1.6 kB URL postupdate.top/static/picture/po_box.svg
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash d3793852de4f419211843c1f4c05ddb4
8c7eccab4e3865a04553d720c150e4506d8990a0
7487a4b55d8cb9a837520dcb7ea5e50c915b5797c165f9bf7a7a3f8fe468a0a0
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/po_box.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/svg+xml
content-length: 1639
last-modified: Tue, 20 Sep 2022 20:41:28 GMT
etag: "632a2578-667"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/free_boxes.svg
155.94.134.4 1.1 kB URL postupdate.top/static/picture/free_boxes.svg
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash dc788e0d1e8c7d9463a99882e622730c
a079d9612a9c119a9419b620d9dcfc141dd7e011
a3f1dfab56de547e28606e3e2150167339be6a35c8385486066924874d14df47
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/free_boxes.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/svg+xml
content-length: 1066
last-modified: Tue, 20 Sep 2022 20:41:14 GMT
etag: "632a256a-42a"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/featured_clicknship.svg
155.94.134.4 1.1 kB URL postupdate.top/static/picture/featured_clicknship.svg
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1078), with no line terminators
Hash 375ed61778c1a49c8d1ea21f31748719
476785aa7126fbd9dcaa3bce84b57c3c120bd5a4
23edd9ac5dba678e1e5f97f2397a69d295e257c4a56e462c686557246081ffa2
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/featured_clicknship.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/svg+xml
content-length: 1078
last-modified: Tue, 20 Sep 2022 20:41:30 GMT
etag: "632a257a-436"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/go-now.png
155.94.134.4 20 kB URL postupdate.top/static/picture/go-now.png
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type PNG image data, 210 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash 6311ef7a60f86d77aa48fcc48a675a31
96bc8b2fe87b126ffbf0d7b7ad8419661cb6bd9c
70d715475fb0a4756fc65c50cbb2cf0ca15f7311efc6c54b18e045e6ab202251
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/go-now.png HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/png
content-length: 19969
last-modified: Tue, 20 Sep 2022 20:41:30 GMT
etag: "632a257a-4e01"
expires: Sat, 06 Jan 2024 03:02:06 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/idxs-icon.svg
155.94.134.4 1.9 kB URL postupdate.top/static/picture/idxs-icon.svg
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ff0c118bc3a45d92e2d45e57416abee5
9b5b3759e5e7e2148269063f1575d22cb2126b41
ab9283d446c093b7acf18a7e95a21a9b834b12f19f26e8776ff3407fc83e5b6c
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/idxs-icon.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/svg+xml
content-length: 1876
last-modified: Tue, 20 Sep 2022 20:41:32 GMT
etag: "632a257c-754"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/social-facebook_1.png
155.94.134.4200 OK 1.9 kB URL GET HTTP/2 postupdate.top/static/picture/social-facebook_1.png
IP 155.94.134.4:443
ASN #8100 ASN-QUADRANET-GLOBAL
Certificate IssuerLet's Encrypt
Subjectpostupdate.top
Fingerprint7C:99:7B:52:95:E2:DD:2C:F5:73:5E:D6:83:3E:27:8A:9E:EC:5E:2B
ValidityWed, 06 Dec 2023 14:42:44 GMT - Tue, 05 Mar 2024 14:42:43 GMT
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 5d1fed200f7befa569074a293cf2abed
11bacbc9debe99986d9a6e974e9a819aaa74be29
9d0ef8aa34abec770b6a9fb4358842a29413d08c0d1e4b74f5c4c31ab477c14c
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/social-facebook_1.png HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/png
content-length: 1873
last-modified: Tue, 20 Sep 2022 20:41:22 GMT
etag: "632a2572-751"
expires: Sat, 06 Jan 2024 03:02:06 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/social-twitter_2.png
155.94.134.4200 OK 1.8 kB URL GET HTTP/2 postupdate.top/static/picture/social-twitter_2.png
IP 155.94.134.4:443
ASN #8100 ASN-QUADRANET-GLOBAL
Certificate IssuerLet's Encrypt
Subjectpostupdate.top
Fingerprint7C:99:7B:52:95:E2:DD:2C:F5:73:5E:D6:83:3E:27:8A:9E:EC:5E:2B
ValidityWed, 06 Dec 2023 14:42:44 GMT - Tue, 05 Mar 2024 14:42:43 GMT
File type PNG image data, 50 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 4f6b06552f2054fecb5a3ab3956d7a79
c1257b76200738ad53147be110920f84efd479b3
248385895aacd78d7a7b045cd5109103c2f849bbaef9cff5980d59823a620c91
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/social-twitter_2.png HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/png
content-length: 1842
last-modified: Tue, 20 Sep 2022 20:41:22 GMT
etag: "632a2572-732"
expires: Sat, 06 Jan 2024 03:02:06 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/social-pinterest_6.png
155.94.134.4 2.3 kB URL postupdate.top/static/picture/social-pinterest_6.png
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 010bf7d7901ccaa3905cfe4b7c1cb50d
9c174f76a3ed50a173637d44793d6bc15a818112
67d664b844fdba0588665c6f1986b25fcb6d99e5122a455c36da8622f1eaab62
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/social-pinterest_6.png HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/png
content-length: 2325
last-modified: Tue, 20 Sep 2022 20:41:14 GMT
etag: "632a256a-915"
expires: Sat, 06 Jan 2024 03:02:06 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/picture/social-youtube_3.png
155.94.134.4 2.5 kB URL postupdate.top/static/picture/social-youtube_3.png
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type PNG image data, 50 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash e38ff6af4b8ff088fcb2dc92410b759b
529c88413dbc330fa05a0629b2084ca7931f453e
c2b609bbc0ed5b17740df6ab378bfcbe068e3b08d85e85b2d9dfbe6dd3c6be95
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/social-youtube_3.png HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/png
content-length: 2461
last-modified: Tue, 20 Sep 2022 20:41:18 GMT
etag: "632a256e-99d"
expires: Sat, 06 Jan 2024 03:02:06 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/config/urlConfig.json
155.94.134.4 146 B URL postupdate.top/config/urlConfig.json
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /config/urlConfig.json HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 07 Dec 2023 03:02:09 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
postupdate.top/static/js/ResourceConfig.js
155.94.134.4 2.8 kB URL postupdate.top/static/js/ResourceConfig.js
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type gzip compressed data, from Unix\012- data
Hash 6e52d0e1007f79ae4d660bc57b373bac
26b279cd73f9bd691aa524920890a7a9f9412f03
84ebd59a4dc01056020236504a9a54aca2d4adb689636bb9a8ecef150bc5f9c7
Analyzer Verdict Alert OpenPhish phishing United States Postal Service
GET /static/js/ResourceConfig.js HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: application/javascript
last-modified: Fri, 21 Apr 2023 14:22:32 GMT
vary: Accept-Encoding
etag: W/"64429c28-27ae"
expires: Thu, 07 Dec 2023 15:02:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
postupdate.top/static/images/favicon.ico
155.94.134.4 32 kB URL GET postupdate.top/static/images/favicon.ico
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
Certificate IssuerLet's Encrypt
Subjectpostupdate.top
Fingerprint7C:99:7B:52:95:E2:DD:2C:F5:73:5E:D6:83:3E:27:8A:9E:EC:5E:2B
ValidityWed, 06 Dec 2023 14:42:44 GMT - Tue, 05 Mar 2024 14:42:43 GMT
File type MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 3f0f72ed57a54b97cda500bcf0545efb
2f252619c18e729d98e16b96d37cd7cd567b38eb
67fbe8ef9020e5c776aadf6801a1fef8dc563e2e4dc9ddc740af8010c0c38943
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/images/favicon.ico HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:10 GMT
content-type: image/x-icon
content-length: 32038
last-modified: Wed, 19 Oct 2022 10:16:19 GMT
etag: "634fce73-7d26"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/images/utility_languages.png
155.94.134.4 1.5 kB URL postupdate.top/static/images/utility_languages.png
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced\012- data
Hash 410956805d5701e87299cff412827e1a
5de9a390649dfc12e3d6df431140d499ad8abd67
6e727dbf5b0f4a3ec76762e445ad2c5cb750f7de41afb8b0342f903124d09826
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/images/utility_languages.png HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:11 GMT
content-type: image/png
content-length: 1456
last-modified: Tue, 20 Sep 2022 20:41:14 GMT
etag: "632a256a-5b0"
expires: Sat, 06 Jan 2024 03:02:11 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/js/jquery.ui.js
155.94.134.4 90 kB URL postupdate.top/static/js/jquery.ui.js
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type gzip compressed data, from Unix\012- data
Hash adcdeeab23b5f0144b94f27523e6041c
f29933fcd32d8c302b121ba16830a61f61726a98
2cdfe925723b43e80d60b81703935aaac7a6fa3f6937d7ce3855a7e48ba87681
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/jquery.ui.js HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: application/javascript
last-modified: Tue, 20 Sep 2022 20:41:14 GMT
vary: Accept-Encoding
etag: W/"632a256a-45731"
expires: Thu, 07 Dec 2023 15:02:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
postupdate.top/static/js/megamenu-additions.js
155.94.134.4 687 B URL postupdate.top/static/js/megamenu-additions.js
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type gzip compressed data, from Unix\012- data
Hash 985cc4046bb661fa5c082c4773f3565a
53d4d847c426b88499e9a930a6d7e564bf028d9e
bdf4bb0f537a663921ece83cd73183db59e91163aa6ba65c690fc452d939d70a
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/megamenu-additions.js HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: application/javascript
last-modified: Tue, 20 Sep 2022 20:41:24 GMT
vary: Accept-Encoding
etag: W/"632a2574-541"
expires: Thu, 07 Dec 2023 15:02:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
postupdate.top/static/images/mailman.svg
155.94.134.4 1.8 kB URL postupdate.top/static/images/mailman.svg
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1426a5796b4337302ee498d4a9265b38
c3b2b8042eb536d43101c5281d5aae8244d1e0e1
87f26b59587d5549f99b77e77519bf17b625c6a693931f54f62accac834e6ff1
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/images/mailman.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:11 GMT
content-type: image/svg+xml
content-length: 1827
last-modified: Tue, 20 Sep 2022 20:41:36 GMT
etag: "632a2580-723"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
fast.fonts.net/t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612
104.16.249.67 0 B URL fast.fonts.net/t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612
IP 104.16.249.67:0
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB9:2B:82:F1:50:51:EA:B4:39:81:75:2F:6E:8B:8B:94:55:81:C3:47
ValidityFri, 05 May 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1
Host: fast.fonts.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Cookie: __cf_bm=eu25v4k3cGI6O.OA13Nc6vlCFM2gVNniSx9ZCjMkq7Q-1701918127-0-AXz+xmv+fu2zVhsJNGGJZ6137cQ83pi0balYgst0XDG3dGAoXN9o/UDUYk8OD8+3TVBfKBCDAe4h5V7fgLl8uU0=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 03:02:11 GMT
content-type: text/css; charset=utf-8
content-length: 0
x-amz-id-2: 3MfqsHPaoDtzAO5M60cnj6YppXUBAUSyzeBMzUz6Lxda2ER3pN3Q8agq/kaNUhGTvfCNT/hayTo=
x-amz-request-id: RSCD8TA6YG17HWQG
last-modified: Tue, 23 Mar 2021 12:59:23 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
cache-control: public, max-age=0, s-maxage=604800
x-amz-meta-mtime: 1519217722
x-amz-version-id: null
cf-cache-status: HIT
age: 341392
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 831987424f8e15f0-ARN
X-Firefox-Spdy: h2
postupdate.top/static/js/optimize.js
155.94.134.4200 OK 50 kB URL GET HTTP/2 postupdate.top/static/js/optimize.js
IP 155.94.134.4:443
ASN #8100 ASN-QUADRANET-GLOBAL
Certificate IssuerLet's Encrypt
Subjectpostupdate.top
Fingerprint7C:99:7B:52:95:E2:DD:2C:F5:73:5E:D6:83:3E:27:8A:9E:EC:5E:2B
ValidityWed, 06 Dec 2023 14:42:44 GMT - Tue, 05 Mar 2024 14:42:43 GMT
File type gzip compressed data, from Unix\012- data
Hash 61847e8a2a3d92f48af970a1128c7d40
3be3654739371b8a5815d77e0942fdafe8fe9008
8d5845dd94aead441c9f82a7c9446abf98ae281c6938f9a092e13f87d5293bee
Analyzer Verdict Alert OpenPhish phishing United States Postal Service
GET /static/js/optimize.js HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:05 GMT
content-type: application/javascript
last-modified: Tue, 20 Sep 2022 20:41:14 GMT
vary: Accept-Encoding
etag: W/"632a256a-1cedc"
expires: Thu, 07 Dec 2023 15:02:05 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
fast.fonts.net/t/trackingCode.js
104.16.249.67 146 kB URL fast.fonts.net/t/trackingCode.js
IP 104.16.249.67:0
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB9:2B:82:F1:50:51:EA:B4:39:81:75:2F:6E:8B:8B:94:55:81:C3:47
ValidityFri, 05 May 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (64666)
Size 146 kB (146328 bytes)
Hash f946b72445b58b10479312ffb34e86e9
1a516df14530f1b39770d41c17e44e552ecc4f0a
65ad2b1375943cf6ca7063b1e6e41179451260b10865d764c49aa7d020a8093c
GET /t/trackingCode.js HTTP/1.1
Host: fast.fonts.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Cookie: __cf_bm=eu25v4k3cGI6O.OA13Nc6vlCFM2gVNniSx9ZCjMkq7Q-1701918127-0-AXz+xmv+fu2zVhsJNGGJZ6137cQ83pi0balYgst0XDG3dGAoXN9o/UDUYk8OD8+3TVBfKBCDAe4h5V7fgLl8uU0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 07 Dec 2023 03:02:11 GMT
content-type: text/plain; charset=utf-8
x-amz-id-2: zYhKraNibKo66IAlBtLIrsktkibAUzYdxDcd1UBHtMIR3rDILmrzgSBdW+oiKuILrXLJ3lo7Mn4=
x-amz-request-id: PG321HJQEBES9CSD
last-modified: Tue, 23 Mar 2021 09:15:19 GMT
etag: W/"32dd789522cc6923c80141fcf5d3a614"
cache-control: public, max-age=300
x-amz-meta-mtime: 1383840033
x-amz-version-id: null
cf-cache-status: HIT
age: 691
expires: Thu, 07 Dec 2023 03:07:11 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 83198741bf6415f0-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
postupdate.top/static/fonts/featured_clicknship.svg
155.94.134.4 52 kB URL postupdate.top/static/fonts/featured_clicknship.svg
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1599), with CRLF, LF line terminators
Hash 9fde387a3cc3ad2b1744bd0c2139c008
8da30a6ce46c8c85574779d6767bd794368f37f7
665110618ec876acb77cd6bc05665aa1ffe4c90aa62f6063c0fa45b080b5926a
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/featured_clicknship.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:11 GMT
content-type: image/svg+xml
content-length: 52148
last-modified: Tue, 20 Sep 2022 20:41:22 GMT
etag: "632a2572-cbb4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/js/metrics-all.js
155.94.134.4 56 kB URL postupdate.top/static/js/metrics-all.js
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type gzip compressed data, from Unix\012- data
Hash ae008af59ca491e8debc8e5dfb7efd67
225ab7b86a3db28d2ea474382d13b764631e15e0
bc127cea8033df9a9ea27f1896600cfcb48f0e540ce4c204aa0ed907d1e71c4a
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/metrics-all.js HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:05 GMT
content-type: application/javascript
last-modified: Tue, 20 Sep 2022 20:41:20 GMT
vary: Accept-Encoding
etag: W/"632a2570-2ab1"
expires: Thu, 07 Dec 2023 15:02:05 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c
142.250.74.40 89 kB URL www.googletagmanager.com/gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c
IP 142.250.74.40:0
File type ASCII text, with very long lines (4179)
Hash 72665971d4e9af9242f744d1de3832d5
7ad296b926759a784e12dfb332965a35c1d6ee1f
e1655908d5d53a0a47d574a29d73b2dd9c182956e36b703063ea067ec1f4c66f
GET /gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 03:02:11 GMT
expires: Thu, 07 Dec 2023 03:02:11 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 88666
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.usps.com/global-elements/lib/script/helpers.js
192.229.221.165 358 B URL www.usps.com/global-elements/lib/script/helpers.js
IP 192.229.221.165:0
File type ASCII text, with very long lines (695), with no line terminators
Hash 5372347b4f98f60b33579180ef6a3567
02064f1641c40b35c14a0da9ee310de54ff76cd5
7fa317b049ed33139394313aba29f27b7f11a226270bf10ce1c26d674c0177e4
GET /global-elements/lib/script/helpers.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 14283
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Thu, 07 Dec 2023 03:02:11 GMT
etag: "2b7-505dad4fe5380+gzip"
last-modified: Mon, 20 Oct 2014 13:38:38 GMT
server: ECAcc (dce/26C8)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 358
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c
142.250.74.40 89 kB URL www.googletagmanager.com/gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c
IP 142.250.74.40:0
File type SVG Scalable Vector Graphics image, ASCII text, with very long lines (4179)
Hash cac369268c1ed02ee74884adf413ce6f
cebf65369ba2b32c086704dc866b9cd05876e44c
9a47455e149f90d4d4f0063448e26bc4580424e005d984dc4381744b695d712a
GET /gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 03:02:12 GMT
expires: Thu, 07 Dec 2023 03:02:12 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 88666
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
postupdate.top/static/css/main-sb.css
155.94.134.4200 OK 55 kB URL GET HTTP/2 postupdate.top/static/css/main-sb.css
IP 155.94.134.4:443
ASN #8100 ASN-QUADRANET-GLOBAL
Certificate IssuerLet's Encrypt
Subjectpostupdate.top
Fingerprint7C:99:7B:52:95:E2:DD:2C:F5:73:5E:D6:83:3E:27:8A:9E:EC:5E:2B
ValidityWed, 06 Dec 2023 14:42:44 GMT - Tue, 05 Mar 2024 14:42:43 GMT
File type gzip compressed data, from Unix\012- data
Hash 0ad3b5d18f18408bb5d0fe6985405f4b
d2a5bbfa75039bcbf04219085b673d4de5711eae
329901802028e7664dfaae64c4116cef4e4ec85c3c5700ca47e3ba0af726bca2
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/css/main-sb.css HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: text/css
last-modified: Tue, 20 Sep 2022 20:41:12 GMT
vary: Accept-Encoding
etag: W/"632a2568-1f01"
expires: Thu, 07 Dec 2023 15:02:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
postupdate.top/static/css/footer-sb.css
155.94.134.4 984 B URL postupdate.top/static/css/footer-sb.css
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type ASCII text, with very long lines (3053), with CRLF line terminators
Hash b57ca8ef21e6662cd44e1753364bf943
898aa74ba44766702ec4d15ed27589f313d5378f
b7eeda9e9092c1bb2c28c88041c5569ec6a0dc6f1a3f54f7b07d56aa2230e4c6
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/css/footer-sb.css HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: text/css
last-modified: Tue, 20 Sep 2022 20:41:12 GMT
vary: Accept-Encoding
etag: W/"632a2568-bef"
expires: Thu, 07 Dec 2023 15:02:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.usps.com/global-elements/header/script/search-fe.js
192.229.221.165 930 B URL www.usps.com/global-elements/header/script/search-fe.js
IP 192.229.221.165:0
File type ASCII text, with very long lines (2264), with no line terminators
Hash f7f70265f5cf47386622e433317412cb
e1b28284e51c848685c7ea6d19ff551284c58e8a
766a3dfb7dab82af4fae555132f7fdbacb7d167f17015fbb23c9591daaaf698b
GET /global-elements/header/script/search-fe.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 14366
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Thu, 07 Dec 2023 03:02:12 GMT
etag: "8d8-5d77081c47c40+gzip"
last-modified: Mon, 07 Feb 2022 16:58:17 GMT
server: ECAcc (dce/26A2)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 930
X-Firefox-Spdy: h2
ushoutai2.top/click/addClick?behaviour=
155.94.156.115 12 B URL ushoutai2.top/click/addClick?behaviour=
IP 155.94.156.115:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type ASCII text, with no line terminators
Hash 35b0bce9d250429df012c0426f88d0bd
f81d80af9cbeb0011316fbba3da8002b32251f7a
da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
Quad9 DNS malicious Sinkholed
GET /click/addClick?behaviour= HTTP/1.1
Host: ushoutai2.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
sink: USPS2
sinks: 2
Origin: https://postupdate.top
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:12 GMT
content-type: application/json
content-length: 12
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE
access-control-max-age: 3600
access-control-allow-headers: *
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-cache: MISS
X-Firefox-Spdy: h2
postupdate.top/static/css/tracking-cross-sell.css
155.94.134.4 53 kB URL postupdate.top/static/css/tracking-cross-sell.css
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type gzip compressed data, from Unix\012- data
Hash 04a1915c4b691619442e7bc995d3dea2
402c7658fb3d54b51636f4c4ddd157db226502ef
17e0b7df0a9b5daf7aecd4686f4181394eeae36d12c64b358b711bd299675adc
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/css/tracking-cross-sell.css HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:05 GMT
content-type: text/css
last-modified: Tue, 20 Sep 2022 20:41:12 GMT
vary: Accept-Encoding
etag: W/"632a2568-bec"
expires: Thu, 07 Dec 2023 15:02:05 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.usps.com/global-elements/lib/script/require-jquery.js
192.229.221.165 74 B URL www.usps.com/global-elements/lib/script/require-jquery.js
IP 192.229.221.165:0
File type ASCII text, with no line terminators
Hash ea38e8196b75d9720bc3902d6d735130
165284464c58d7f213c1211f2c433873299e4527
cdbf334e8e860aaf1665d2ac56113f51f1ff304b63cff897beb969c8dd5597d9
GET /global-elements/lib/script/require-jquery.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: https://www.usps.com
age: 14366
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Thu, 07 Dec 2023 03:02:12 GMT
etag: "4a-5057c23aa4c00"
last-modified: Wed, 15 Oct 2014 20:40:16 GMT
server: ECAcc (dce/268C)
strict-transport-security: max-age=31536000 ; includeSubDomains
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 74
X-Firefox-Spdy: h2
postupdate.top/static/css/megamenu-v4.css
155.94.134.4200 OK 40 kB URL GET HTTP/2 postupdate.top/static/css/megamenu-v4.css
IP 155.94.134.4:443
ASN #8100 ASN-QUADRANET-GLOBAL
Certificate IssuerLet's Encrypt
Subjectpostupdate.top
Fingerprint7C:99:7B:52:95:E2:DD:2C:F5:73:5E:D6:83:3E:27:8A:9E:EC:5E:2B
ValidityWed, 06 Dec 2023 14:42:44 GMT - Tue, 05 Mar 2024 14:42:43 GMT
File type gzip compressed data, from Unix\012- data
Hash d6daddeaa17dd532a2bbce2694737b9b
018bcbe9769623706fd91b884825d58a85dab3d6
dcbf72dd91e0fcd25baeed8f7502089c6baaf133dde9dbd17dd7b22519aafcac
Analyzer Verdict Alert OpenPhish phishing United States Postal Service
GET /static/css/megamenu-v4.css HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:05 GMT
content-type: text/css
last-modified: Tue, 20 Sep 2022 20:41:12 GMT
vary: Accept-Encoding
etag: W/"632a2568-a71c"
expires: Thu, 07 Dec 2023 15:02:05 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
resources.digital-cloud-gov.medallia.com/wdcgov/2/onsite/embed.js
23.54.15.53 526 B URL resources.digital-cloud-gov.medallia.com/wdcgov/2/onsite/embed.js
IP 23.54.15.53:0
File type ASCII text, with very long lines (587)
Hash 06ca7ee776ff8b8723c1cbb0bbab61ca
bef6c06b581bd1bdb948a5d443ebccb77f3c1bc2
11364f1a6ea8e5ed4a6e4f161365c00a6d5fa869a342a40f06a85c44c2a21b8c
GET /wdcgov/2/onsite/embed.js HTTP/1.1
Host: resources.digital-cloud-gov.medallia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: +b0b4/POQAFjs29ebo7oMoKT5LLnSl1Pg1/5Ugmyy8u951igIQO7cMwFXXQkb2cXQSS5bNn/gMY=
x-amz-request-id: 588CR8HG5AHN0J9Q
last-modified: Mon, 04 Dec 2023 19:26:40 GMT
etag: "06ca7ee776ff8b8723c1cbb0bbab61ca"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
expires: Thu, 07 Dec 2023 03:02:13 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 07 Dec 2023 03:02:13 GMT
content-length: 526
access-control-max-age: 86400
access-control-allow-origin: *
X-Firefox-Spdy: h2
postupdate.top/static/fonts/b0868b4c-234e-47d3-bc59-41ab9de3c0db.woff2
155.94.134.4 40 kB URL postupdate.top/static/fonts/b0868b4c-234e-47d3-bc59-41ab9de3c0db.woff2
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type Web Open Font Format (Version 2), TrueType, length 40372, version 2.655\012- data
Hash 9bb1ce2aa7fed31792aa1750d0306831
6a538f9d945eaa6f7e8f97b4530183347d20bee5
5e284133b1b11165e7354b29cfabb5f214c473f0ca18198a49c052d8df3f172f
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/b0868b4c-234e-47d3-bc59-41ab9de3c0db.woff2 HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/static/css/main.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:11 GMT
content-type: font/woff2
content-length: 40372
last-modified: Tue, 20 Sep 2022 20:41:32 GMT
etag: "632a257c-9db4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/js/jquery.min.js
155.94.134.4200 OK 64 kB URL GET HTTP/2 postupdate.top/static/js/jquery.min.js
IP 155.94.134.4:443
ASN #8100 ASN-QUADRANET-GLOBAL
Certificate IssuerLet's Encrypt
Subjectpostupdate.top
Fingerprint7C:99:7B:52:95:E2:DD:2C:F5:73:5E:D6:83:3E:27:8A:9E:EC:5E:2B
ValidityWed, 06 Dec 2023 14:42:44 GMT - Tue, 05 Mar 2024 14:42:43 GMT
File type ASCII text, with very long lines (65453)
Hash b3d8d1ba3cd027dd6e8af634d54910a6
eda269788facb5afc9be30bedca8cc70a56d1fca
621a36aded669eb4bc102033eb7f4d127cab61d13fccbf3233a2288d5f13f235
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/jquery.min.js HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:11 GMT
content-type: application/javascript
last-modified: Tue, 20 Sep 2022 20:41:16 GMT
vary: Accept-Encoding
etag: W/"632a256c-14b60"
expires: Thu, 07 Dec 2023 15:02:11 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
postupdate.top/static/fonts/462d508d-efc7-478f-b84e-288eeb69a160.woff2
155.94.134.4 39 kB URL postupdate.top/static/fonts/462d508d-efc7-478f-b84e-288eeb69a160.woff2
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type Web Open Font Format (Version 2), TrueType, length 39112, version 2.655\012- data
Hash e37c1d87055e7062c217e73098ab36d9
61f4c682ce807183e59a52ded2c9af89a419fabe
c98cd4bd3267c7d8484044bff1fbffaf0c2362edc04917457244809e1f24e404
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/462d508d-efc7-478f-b84e-288eeb69a160.woff2 HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/static/css/main.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:11 GMT
content-type: font/woff2
content-length: 39112
last-modified: Tue, 20 Sep 2022 20:41:30 GMT
etag: "632a257a-98c8"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
postupdate.top/static/js/landing.js
155.94.134.4 50 kB URL postupdate.top/static/js/landing.js
IP 155.94.134.4:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type gzip compressed data, from Unix\012- data
Hash e9ef77cf927f2bf506fa770f0059cca1
0c206fab475e2fdbbb20c1323915f8e00d6ca3d8
9c4ae2b94b3a8f37efabc1435b7d315c42df5b38dd0b9088a61bdce2c515bd1d
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/landing.js HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: application/javascript
last-modified: Tue, 20 Sep 2022 20:41:28 GMT
vary: Accept-Encoding
etag: W/"632a2578-235a"
expires: Thu, 07 Dec 2023 15:02:06 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
postupdate.top/static/js/jquery-ui.js
155.94.134.4200 OK 1.4 kB URL GET HTTP/2 postupdate.top/static/js/jquery-ui.js
IP 155.94.134.4:443
ASN #8100 ASN-QUADRANET-GLOBAL
Certificate IssuerLet's Encrypt
Subjectpostupdate.top
Fingerprint7C:99:7B:52:95:E2:DD:2C:F5:73:5E:D6:83:3E:27:8A:9E:EC:5E:2B
ValidityWed, 06 Dec 2023 14:42:44 GMT - Tue, 05 Mar 2024 14:42:43 GMT
File type ASCII text, with very long lines (1452), with no line terminators
Hash 41b0999494be450f941d147a1b4e8da4
f3c6bb5dca48bc65a85110db1dae651ac5c3d9b5
523325d1f02572c5e57dab27b722584e4796944e26f498c18db7cd1dfe425cad
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/jquery-ui.js HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:01:58 GMT
content-type: application/javascript
last-modified: Wed, 01 Mar 2023 19:03:24 GMT
vary: Accept-Encoding
etag: W/"63ffa17c-59f"
expires: Thu, 07 Dec 2023 15:01:58 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
postupdate.top/static/css/bootstrap.min.css
155.94.134.4200 OK 121 kB URL GET HTTP/2 postupdate.top/static/css/bootstrap.min.css
IP 155.94.134.4:443
ASN #8100 ASN-QUADRANET-GLOBAL
Certificate IssuerLet's Encrypt
Subjectpostupdate.top
Fingerprint7C:99:7B:52:95:E2:DD:2C:F5:73:5E:D6:83:3E:27:8A:9E:EC:5E:2B
ValidityWed, 06 Dec 2023 14:42:44 GMT - Tue, 05 Mar 2024 14:42:43 GMT
File type ASCII text, with very long lines (65371)
Size 121 kB (121084 bytes)
Hash 473c24f70d7d3d76cc9d6c67a852b100
4b017192f7e665f0b5cc5ed1b737f709fc7a6be4
a78c4915ce28caf156345123fa0a8a4424355edd10ea1f733ac93c87ebc9637c
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/css/bootstrap.min.css HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:05 GMT
content-type: text/css
last-modified: Wed, 19 Oct 2022 10:38:47 GMT
vary: Accept-Encoding
etag: W/"634fd3b7-1d8fc"
expires: Thu, 07 Dec 2023 15:02:05 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
postupdate.top/static/css/footer.css
155.94.134.4200 OK 2.9 kB URL GET HTTP/2 postupdate.top/static/css/footer.css
IP 155.94.134.4:443
ASN #8100 ASN-QUADRANET-GLOBAL
Certificate IssuerLet's Encrypt
Subjectpostupdate.top
Fingerprint7C:99:7B:52:95:E2:DD:2C:F5:73:5E:D6:83:3E:27:8A:9E:EC:5E:2B
ValidityWed, 06 Dec 2023 14:42:44 GMT - Tue, 05 Mar 2024 14:42:43 GMT
File type ASCII text, with very long lines (2924), with no line terminators
Hash 8f712712b0de29097c944acffb88091c
de7c34ad57e913b27cefb63c472ca27d02ae5df2
173e627d22f2d55b5d8e377edf12bc26f078028c91efd78365e5ae80f59da2d1
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/css/footer.css HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:05 GMT
content-type: text/css
last-modified: Tue, 20 Sep 2022 20:41:10 GMT
vary: Accept-Encoding
etag: W/"632a2566-b60"
expires: Thu, 07 Dec 2023 15:02:05 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
postupdate.top/static/js/axios.js
155.94.134.4200 OK 43 kB URL GET HTTP/2 postupdate.top/static/js/axios.js
IP 155.94.134.4:443
ASN #8100 ASN-QUADRANET-GLOBAL
Certificate IssuerLet's Encrypt
Subjectpostupdate.top
Fingerprint7C:99:7B:52:95:E2:DD:2C:F5:73:5E:D6:83:3E:27:8A:9E:EC:5E:2B
ValidityWed, 06 Dec 2023 14:42:44 GMT - Tue, 05 Mar 2024 14:42:43 GMT
Hash 1eb8e8e2284670dc214a3e70c25992b8
94ece417aa560aa8de906e8f54c0985da90364cc
96b65382c74cd6255d4628044c5394f2ef3f0662d7d72b10f1bceb50b6ee5455
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/axios.js HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:05 GMT
content-type: application/javascript
last-modified: Sat, 10 Nov 2018 04:07:50 GMT
vary: Accept-Encoding
etag: W/"5be65996-a6f0"
expires: Thu, 07 Dec 2023 15:02:05 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
postupdate.top/static/picture/logo-sb.svg
155.94.134.4200 OK 3.6 kB URL GET HTTP/2 postupdate.top/static/picture/logo-sb.svg
IP 155.94.134.4:443
ASN #8100 ASN-QUADRANET-GLOBAL
Certificate IssuerLet's Encrypt
Subjectpostupdate.top
Fingerprint7C:99:7B:52:95:E2:DD:2C:F5:73:5E:D6:83:3E:27:8A:9E:EC:5E:2B
ValidityWed, 06 Dec 2023 14:42:44 GMT - Tue, 05 Mar 2024 14:42:43 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3740), with no line terminators
Hash bd8c973ec0b53678ec2e4dc5134fa653
e643657e09913383e36bfb797352a7223e202f15
3c24c49690aa84ba6ff95c560fb35c92ea3b7b7f6d7a4355f8628b19b3e1f97d
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/logo-sb.svg HTTP/1.1
Host: postupdate.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postupdate.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:02:06 GMT
content-type: image/svg+xml
content-length: 3557
last-modified: Tue, 20 Sep 2022 20:41:14 GMT
etag: "632a256a-de5"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2