| postsikei.top/static/js/us.js |  172.67.203.45 | 200 OK | 82 kB |
URL GET HTTP/3postsikei.top/static/js/us.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeHTML document, ASCII text Hashc100894c08e792cf983b55454833a1bb 734f27ffe5b19bf7d215949ad5b1ac5996f3283e 7c0909a41432f8efb596fd4d5351da28976d73afb16c7e651f7c827ef478882e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/us.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:08 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-43f"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o4wR28LkQnxGxBRcBI4AwAaefp28zZv7Aeb%2BL1ZGHNNQIZsoz%2FrlFga0Ry4JMoCSmnEdAu3pB6Xu6PZ667MVH8Lqj7pKpGdyAuC4qw9Q7M%2BnnHckTVb9Zsahqu1sve7Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8eccf52b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/axios.js | 172.67.203.45 | 200 OK | 19 kB |
URL GET HTTP/3postsikei.top/static/js/axios.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeJavaScript source, ASCII text Hash1eb8e8e2284670dc214a3e70c25992b8 94ece417aa560aa8de906e8f54c0985da90364cc 96b65382c74cd6255d4628044c5394f2ef3f0662d7d72b10f1bceb50b6ee5455
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/axios.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:09 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-a6f0"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C%2F%2FqD20Kihsqk0jel9m4kP9ZwuTaixoV5goVFeunGUMnr7G96QHcrqNm1lUacV6OV0CmvYTOFQpbOYGapkq52xsBRvM5lp3VtdjE3KI3tc7seq9ES3zg34Z1QSJ0ruQE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8ef8a2db50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/jquery-ui.js | 172.67.203.45 | 200 OK | 12 kB |
URL GET HTTP/3postsikei.top/static/js/jquery-ui.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeASCII text, with very long lines (1004), with CRLF, LF line terminators Hash803337a2b884f13875e5ce58b8921f4c 1974ccb1182ef9a6279436ec29e51d7de739bd38 1d354faf02dbb69ae38266b9e5cbd4c45a6f3c215c6f3002a44083480e7fcb03
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/jquery-ui.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:09 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-59f"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dBnS2uBZynikx6QVBNVbPHzMrRPcHKS8CbO1IXxnj8IQCeZWMczHOldNyYwXCOOs3PkZdUrSjKM2%2FeSQrPkMM%2BGoetedVuU3ypgzGWaDDdBMMLM549vXOUQf3bxyaEsJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8ef8a33b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.postsikei.top/websocket/274c4bd7790f98846f33fa355b525127 |  104.21.69.25 | | 0 B |
URL api.postsikei.top/websocket/274c4bd7790f98846f33fa355b525127 IP104.21.69.25:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /websocket/274c4bd7790f98846f33fa355b525127 HTTP/1.1
Host: api.postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://postsikei.top
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: guUWwulVlrUzQSZBKDmBdA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 23 Apr 2024 17:44:10 GMT
Connection: upgrade
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Max-Age: 3600
Access-Control-Allow-Headers: *
Upgrade: websocket
Sec-WebSocket-Accept: Vt7LBV7GYjb0VPFO7gAWzxth1FQ=
Sec-WebSocket-Extensions: permessage-deflate
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7uVc7MI8juegz71gREbG5BQnZKfayuNI46hBbVrd4Jvsy2GV7ZDpR9HHYfDVhgAQj0rzMdyNAXClOUz%2BC1gUJOi0%2B0xppx1TRm2F0UQzPifftS9ZHtK4zUUKPfy6zUn0%2FP%2Bwxw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 878fa8f53e8d56ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/social-twitter_2.png | 172.67.203.45 | 200 OK | 1.8 kB |
URL GET HTTP/3postsikei.top/static/picture/social-twitter_2.png IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typePNG image data, 50 x 48, 8-bit/color RGBA, non-interlaced Hash4f6b06552f2054fecb5a3ab3956d7a79 c1257b76200738ad53147be110920f84efd479b3 248385895aacd78d7a7b045cd5109103c2f849bbaef9cff5980d59823a620c91
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/social-twitter_2.png HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/png
content-length: 1842
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: "653f5e14-732"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zwsomdcNGBziivMwdYHzDoluJq9WcLI2QtgvOGuegSZnvdCwzzth8vtMUxpHfHZm9mEl1uEyieq6sv4%2BeNJ8Frnm623GPxb2g0bjvLjv83o20gievmtL3FqWWWgoFCRX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8ff0acab50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/social-pinterest_6.png | 172.67.203.45 | 200 OK | 2.3 kB |
URL GET HTTP/3postsikei.top/static/picture/social-pinterest_6.png IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced Hash010bf7d7901ccaa3905cfe4b7c1cb50d 9c174f76a3ed50a173637d44793d6bc15a818112 67d664b844fdba0588665c6f1986b25fcb6d99e5122a455c36da8622f1eaab62
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/social-pinterest_6.png HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/png
content-length: 2325
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: "653f5e14-915"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V9W1c4Fl6x5%2F9WTPV3FZMPmRY9c2FGBzfkCrQVjanQJZUeHpe%2Bf7VTwmYjwPtx%2B0elkU7dJfi%2Fl7j3T3b7%2B45W%2B1ihN4dfdHpEHaRVULD9E4ppefoIXSpYmenPGN8WGX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8ff0acbb50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/social-youtube_3.png | 172.67.203.45 | 200 OK | 2.5 kB |
URL GET HTTP/3postsikei.top/static/picture/social-youtube_3.png IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typePNG image data, 50 x 35, 8-bit/color RGBA, non-interlaced Hashe38ff6af4b8ff088fcb2dc92410b759b 529c88413dbc330fa05a0629b2084ca7931f453e c2b609bbc0ed5b17740df6ab378bfcbe068e3b08d85e85b2d9dfbe6dd3c6be95
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/social-youtube_3.png HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/png
content-length: 2461
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: "653f5e14-99d"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SOxA07ob3UPR%2F3X1%2Ffcmdzvw2BINNLLnvLgUi3LlXLNZ4uhaPUe4hQK7N3ycQwrPBBwEqxKLqhfH%2F0Wqf4kChW9FALvulAJ1HhxayRfsBUiEjQv4S9jORgNPiw%2BHwwv1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8ff0accb50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/social-facebook_1.png | 172.67.203.45 | 200 OK | 1.9 kB |
URL GET HTTP/3postsikei.top/static/picture/social-facebook_1.png IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced Hash5d1fed200f7befa569074a293cf2abed 11bacbc9debe99986d9a6e974e9a819aaa74be29 9d0ef8aa34abec770b6a9fb4358842a29413d08c0d1e4b74f5c4c31ab477c14c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/social-facebook_1.png HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/png
content-length: 1873
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: "653f5e14-751"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WC4TUBCS4%2BgApo05sfhkO3VC%2BPN9w25Cl%2FbVdYFhFLQXq9VVBZXxCL4txI%2FMU2hWNW4cmNOM3vQRUmnjz8FU%2BVTcqBFuiHMgE95kvsK1Vv2jDnTz%2FcXdpeW5JWwzlcne"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8ff0ac9b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/go-now.png | 172.67.203.45 | 200 OK | 20 kB |
URL GET HTTP/3postsikei.top/static/picture/go-now.png IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typePNG image data, 210 x 170, 8-bit/color RGBA, non-interlaced Hash6311ef7a60f86d77aa48fcc48a675a31 96bc8b2fe87b126ffbf0d7b7ad8419661cb6bd9c 70d715475fb0a4756fc65c50cbb2cf0ca15f7311efc6c54b18e045e6ab202251
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/go-now.png HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/png
content-length: 19969
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: "653f5e14-4e01"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HSwqhZJzfoiVFWZEyl5lwbJqDWy7O%2BAltZnT4mLHHfjwJOlmN28Ayz23bjk4Sw5Ptr3NnEzc06i3eU8Gtuyec5rcXze3fRU%2FcoMkshP3pqsMhvaf4PANCYRG0N0OmpUW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feeaa2b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/ResourceConfig.js | 172.67.203.45 | 200 OK | 3.4 kB |
URL GET HTTP/3postsikei.top/static/js/ResourceConfig.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeUnicode text, UTF-8 text, with CRLF line terminators Hash4519150759ef895bf980927a110d89a2 934fe23fe06b0064ffb4b5acd256a1bde2f24260 737a131422a388019fda89166ee813b067deb8713dfbc46fbe9f7cf7061394b3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service | | urlquery | suspicious | Suspicious - Suspicious Javascript code |
GET /static/js/ResourceConfig.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: application/javascript
last-modified: Mon, 06 Nov 2023 14:01:09 GMT
etag: W/"6548f1a5-3dd9"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M6KlAxT%2B69WjS76qLCD%2BMkrkkFl046K0rz%2FQtjaPsEfMNoNdKMoC36kU1KzrMd4MFTcIKSM1L9suSHHR1lIm2k6rMa84FRYhcKSG3ROHllnWK46wgkgoeFAchq1LnpVa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8ff0ac3b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/validator.min.js | 172.67.203.45 | 200 OK | 4.8 kB |
URL GET HTTP/3postsikei.top/static/js/validator.min.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeJavaScript source, ASCII text, with very long lines (7391) Hashbcb17bca17171883c8bc1dec99880fae c5c518b09743622f47bb6d75e8e9172258ce5d5e 731c763b42ba829a6e28ad983af6151f96709f91b3687f1993193a4f8fa501e7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/validator.min.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-1da0"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BlhemR1biI6uTvDTL%2Fz1BAAE8DXdSFMI4%2FONM9pEaMLSq688LQIrazr4vPuspXpey5gcQgVcarkqIZqMVbn0Xi8payEplMU59o3fTfByn%2BWQTYtgD7XEbsRUockgWTB6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8ff1adab50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.postsikei.top/click/queryIp | 172.67.203.45 | 509 No Reason Phrase | 14 kB |
URL GET HTTP/3api.postsikei.top/click/queryIp IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
Hash3da150058c6e81d8b02741876fb7d1c1 a04b9c9e271424ea1129b7c4283f145d48940bf7 268d677b1d63586b358755edcfd6e23c9f0a47dcc16d8eb8d0c9812faba79e3e
GET /click/queryIp HTTP/1.1
Host: api.postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://postsikei.top
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 509 No Reason Phrase
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: text/html;charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: *
access-control-max-age: 18000L
access-control-allow-headers: x-requested-with, authorization, Content-Type, Authorization, credential, X-XSRF-TOKEN,token,username,client
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: *
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AMdFytWhdvhTDGa17iYD63W4Hdzm9M%2B1vWB1xbrkhNAy3egtKtfoTf8A8jIgn2sozf7xy%2BhGvTRUvnd8J5AYKSiCCleztQ%2F5%2B%2FJTvGV7zfStD63yRsQO3U7LEn5B6oYUVa52VA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878fa9070bc7b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| api.postsikei.top/click/addClick?behaviour=&workUrl=https://postsikei.top/ | 172.67.203.45 | 200 OK | 0 B |
URL GET HTTP/3api.postsikei.top/click/addClick?behaviour=&workUrl=https://postsikei.top/ IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /click/addClick?behaviour=&workUrl=https://postsikei.top/ HTTP/1.1
Host: api.postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: sink,sinks
Referer: https://postsikei.top/
Origin: https://postsikei.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: text/plain;charset=utf-8
content-length: 0
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE
access-control-max-age: 3600
access-control-allow-headers: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i5gbX3Cgjwq1PS5FsiIm0hMt687CfsrCybiyUd4vjLsTYHh14BcTnS1JysJ6z9fOhi%2FnQMRctcXuabY6pXLpAR5ej%2BKSPU3ae97x2cPt88NYcnwR4q7Oq1P9ZVQk9XEhGGUAig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878fa90aef24b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fast.fonts.net/t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 | 104.16.41.28 | 200 OK | 0 B |
URL GET HTTP/2fast.fonts.net/t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 IP104.16.41.28:443
CertificateIssuerGoogle Trust Services LLC Subjectfonts.net Fingerprint40:BB:71:39:9B:62:CA:2E:30:5E:D3:A9:33:D6:69:83:D8:1F:D0:57 ValidityThu, 04 Apr 2024 03:21:50 GMT - Wed, 03 Jul 2024 03:21:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1
Host: fast.fonts.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Cookie: __cf_bm=VuyEEwEwlxaKstbP5AMTN3nYUyBKiFdiiU6n9kXxr48-1713894252-1.0.1.1-5WobKk1B08cp.aBrv3pMy0so2k.bUxAPa0zHZTrmHAWvZXb9KuTdnOIiEMKnjKqVGR7pYrO6UNlEEsMhqemjgg
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: text/css; charset=utf-8
content-length: 0
x-amz-id-2: 3MfqsHPaoDtzAO5M60cnj6YppXUBAUSyzeBMzUz6Lxda2ER3pN3Q8agq/kaNUhGTvfCNT/hayTo=
x-amz-request-id: RSCD8TA6YG17HWQG
last-modified: Tue, 23 Mar 2021 12:59:23 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
cache-control: public, max-age=0, s-maxage=604800
x-amz-meta-mtime: 1519217722
x-amz-version-id: null
cf-cache-status: HIT
age: 368883
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90c0f6392a0-CPH
X-Firefox-Spdy: h2
|
|
| postsikei.top/static/picture/mailman.svg | 172.67.203.45 | 200 OK | 33 kB |
URL GET HTTP/3postsikei.top/static/picture/mailman.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hash1426a5796b4337302ee498d4a9265b38 c3b2b8042eb536d43101c5281d5aae8244d1e0e1 87f26b59587d5549f99b77e77519bf17b625c6a693931f54f62accac834e6ff1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/mailman.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-723"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SNn%2ByNfPwUDdmxk9QT1%2FMZicPPVY0bT2wp95Z7QtyLZuM0rwPDVtLqscHddfz548UJKkijCuAMWIOJRkG44BRGnE8LbP27CrSe%2FDSM4lQmYSmUPz6JGjDYeLHdtx2SB5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feca7eb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/jquery.min.js | 172.67.203.45 | 200 OK | 183 kB |
URL GET HTTP/3postsikei.top/static/js/jquery.min.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeJavaScript source, ASCII text, with very long lines (65453) Size183 kB (183137 bytes) Hash8234c1aca62c1e09cc00f7fb5908d309 831062e805247046abdbab52149b03604119fd11 e1ee1eb92c6acc3fbf821c99963ad92dd9954d576eababe7f6df6800f91bc062
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/jquery.min.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-14b60"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LpQ90815znQ4q7y8gwkWj1Eagj%2FqzIbJAHy1iEvre8%2BnvLE1Cj3yqY0a%2BzoT1HJGfq%2Fyk%2FTsGsEqioSkRMJjyvCgMBUQve1foc%2FpIwUpo9cIWD1YDsFRBb4upU8CB8My"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90b6f96b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/__imp_apg__/js/sed-usps-70fc8edc-qa.js | 172.67.203.45 | 404 Not Found | 459 B |
URL GET HTTP/3postsikei.top/__imp_apg__/js/sed-usps-70fc8edc-qa.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash932da5a430ff6db1bc48425b567d56fa e7e88023dbbc6346d354ffe9fb7db957888c2299 10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /__imp_apg__/js/sed-usps-70fc8edc-qa.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=46bfVY4rZtCvtHYUV45pSCGgDHZz8Wddf16cIonobY%2FhTObE%2BJEDEpjBC36%2BKYWDHAxOJTfyAAmvJ1pV2vATS%2FspLSnlTrH12R%2FatgR4yBIolTe7Ov2SaSg3%2BOx%2BZtF3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8fc6fe2b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/package-intercept.svg | 172.67.203.45 | 404 Not Found | 175 B |
URL GET HTTP/3postsikei.top/static/fonts/package-intercept.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash932da5a430ff6db1bc48425b567d56fa e7e88023dbbc6346d354ffe9fb7db957888c2299 10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/package-intercept.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=66JaNKkN57z%2B%2F31MGGAZCcv1%2F2FuEF9lmymhUTycDo0J9oO3o4Z1ripYCa8iATD0YjG2US377z4bJXLFew0NiYN%2BzST9Sxk9ZyhMgf3rop%2FMJLPECbIB4CIKBcR8TFw1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a1e73b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/header-init-search.js | 172.67.203.45 | 200 OK | 1.2 kB |
URL GET HTTP/3postsikei.top/static/js/header-init-search.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeASCII text, with CRLF line terminators Hashd8cb563907e68e9649948c6f521efe60 f5b7cf8123929db8162a2af51d07dd11c21fbac3 fd1e9eadb5698c1bc534ef8a75303b3b67f5e1ab7d1b217b27b09da42aa5036a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/header-init-search.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-388"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WOzA9NeDYx%2FCqZIBOFEV2lj26ahLet14guYZ8kEor%2FKUrdq78mjpIfCro5wVqy0JiLeKuLeJkDzzRV%2B6hnG8Gs0px2EX4U6zhgGDw1V1vCelTNR%2BIfdixtYuyNE8U8NN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8fefabbb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/po_box.svg | 172.67.203.45 | 200 OK | 40 kB |
URL GET HTTP/3postsikei.top/static/picture/po_box.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hashd3793852de4f419211843c1f4c05ddb4 8c7eccab4e3865a04553d720c150e4506d8990a0 7487a4b55d8cb9a837520dcb7ea5e50c915b5797c165f9bf7a7a3f8fe468a0a0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/po_box.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-667"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=flQt%2F7l9pWGdvPW8wg9%2BFyW26E1dn1qVBLG9P9vMY3ly8seHSMKTOX5wv2H5arAii0L9GDtQ%2B2B4B%2BN76XAW%2FDo0de51B2ZeNC1rf1xZ0l2WfDyuFM3YeqyyHID6l9kE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feea9bb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.postsikei.top/click/addClick?behaviour=&workUrl=https://postsikei.top/ | 172.67.203.45 | 200 OK | 29 B |
URL GET HTTP/3api.postsikei.top/click/addClick?behaviour=&workUrl=https://postsikei.top/ IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeASCII text, with no line terminators Hasha5c362845fa58be688c489c8d194db79 b73cd2f8fe71835614151253dfb3fcfc1ea247f2 26750b07a315494f4f1159449f3ebaa32faa6578755493b381d72fc77689c0ac
GET /click/addClick?behaviour=&workUrl=https://postsikei.top/ HTTP/1.1
Host: api.postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
sink: USPS2
sinks: 2
Origin: https://postsikei.top
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: application/json
content-length: 29
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE
access-control-max-age: 3600
access-control-allow-headers: *
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nVL2mQdqnlt9LAL1BmCDQt5IS8riaBZ93gjkh%2Fu6p5drv5GT%2FBuvSfSRbEnBmsdaV1fKuVGmtL2z3KwT4%2BKGOhYhtO5QfJ9UvFpkI%2Fn%2FhTA2FMzfMGisvovIYHJXFTwa%2FimvmA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878fa90c284fb50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| | 172.67.203.45 | 200 OK | 40 kB |
URL User Request GET HTTP/2IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeHTML document, ASCII text, with no line terminators Hashbef46d3bb712d23036be3aa8ebfba884 41c025e409ff2150939375dca4a336a997c9f778 1f40abcbcb4dedbc58e0bf815935a87e2d10ef2c2ec65cd347a64ae96402a4b9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET / HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 17:44:08 GMT
content-type: text/html
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JQwW4WlHr39dxmqT07WyFPjPE6LAW8Qtp%2FJSb4FHBkOiBeNmtG7ssV0Zs3D3uSDocahijsIWx8BkzlUZIh2NHw9qfmq%2BpSUiiUFQULdor88EB13JnIEEKqPQd8mkys3%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878fa8e978457131-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fast.fonts.net/t/trackingCode.js | 104.16.41.28 | | 5.8 kB |
URL GET fast.fonts.net/t/trackingCode.js IP104.16.41.28:0
CertificateIssuerGoogle Trust Services LLC Subjectfonts.net Fingerprint40:BB:71:39:9B:62:CA:2E:30:5E:D3:A9:33:D6:69:83:D8:1F:D0:57 ValidityThu, 04 Apr 2024 03:21:50 GMT - Wed, 03 Jul 2024 03:21:49 GMT
File typegzip compressed data, from Unix Hash22ae68f7ba04515da80425a6e17c1651 73706283b7ab3b7f2cba663fe2ac340800e209ec 5db153eb3a6da10ce3ec7d998b5e8a2c5a8de352418c4090b3fefbb0bcf366b4
GET /t/trackingCode.js HTTP/1.1
Host: fast.fonts.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Cookie: __cf_bm=VuyEEwEwlxaKstbP5AMTN3nYUyBKiFdiiU6n9kXxr48-1713894252-1.0.1.1-5WobKk1B08cp.aBrv3pMy0so2k.bUxAPa0zHZTrmHAWvZXb9KuTdnOIiEMKnjKqVGR7pYrO6UNlEEsMhqemjgg
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: text/plain; charset=utf-8
x-amz-id-2: zYhKraNibKo66IAlBtLIrsktkibAUzYdxDcd1UBHtMIR3rDILmrzgSBdW+oiKuILrXLJ3lo7Mn4=
x-amz-request-id: PG321HJQEBES9CSD
last-modified: Tue, 23 Mar 2021 09:15:19 GMT
etag: W/"32dd789522cc6923c80141fcf5d3a614"
cache-control: public, max-age=300
x-amz-meta-mtime: 1383840033
x-amz-version-id: null
cf-cache-status: HIT
age: 505
expires: Tue, 23 Apr 2024 17:49:13 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90b6e2f92a0-CPH
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.usps.com/global-elements/footer/script/jquery-3.5.1.js | 192.229.221.165 | 200 OK | 31 kB |
URL GET HTTP/2www.usps.com/global-elements/footer/script/jquery-3.5.1.js IP192.229.221.165:443
CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators Hash9ac39dc31635a363e377eda0f6fbe03f 29fa5ad995e9ec866ece1d3d0b698fc556580eee 9a2723c21fb1b7dff0e2aa5dc6be24a9670220a17ae21f70fdbc602d1f8acd38
GET /global-elements/footer/script/jquery-3.5.1.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 33811
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Tue, 23 Apr 2024 17:44:13 GMT
etag: "15d84-5affcd6633ac0+gzip"
last-modified: Wed, 23 Sep 2020 15:35:47 GMT
server: ECAcc (dce/2687)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 30950
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c | 142.250.74.72 | 200 OK | 98 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c IP142.250.74.72:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Hash41dd39bbbfa7034ea34c1d3ff92b975b 3b6b5540ada2f67a59d9460fdb214d3538370f87 dee7e653aa69f6853e46e44e24e40691b5648dc6fc4e9a050faaad6d492330be
GET /gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 23 Apr 2024 17:44:13 GMT
expires: Tue, 23 Apr 2024 17:44:13 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 98020
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| postsikei.top/static/js/axios.js | 172.67.203.45 | 200 OK | 66 kB |
URL GET HTTP/3postsikei.top/static/js/axios.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeJavaScript source, ASCII text Hash1eb8e8e2284670dc214a3e70c25992b8 94ece417aa560aa8de906e8f54c0985da90364cc 96b65382c74cd6255d4628044c5394f2ef3f0662d7d72b10f1bceb50b6ee5455
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/axios.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-a6f0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RSoodslkdg1qG5C7X6ZlSPm0y2v%2F7PCWGBmP88DHeNWGpEjFtC19jakhIumYBhlhPLEUZKTTOSCkRebpAcyCXMrVpLtzNE8YyuR5UoSUyg49uxwh7Jw3CuH9T7zKyWgn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feaa53b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff | 172.67.203.45 | 200 OK | 52 kB |
URL GET HTTP/3postsikei.top/static/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeWeb Open Font Format, TrueType, length 51685, version 1.0 Hasha93e96be336c174933e68ef61d56e0d3 48f7a75a367904ff4a9a79689a508e29edda462c cc469406025b7ce0913cdefc664007cd0fc46bc66a740dc7aff67cc041bccde0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/main-sb.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:14 GMT
content-type: font/woff
content-length: 51685
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: "653f5e13-c9e5"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NfVO%2BNtMaDUcKA4PuO%2Fi6ALj6Tlpu3ZJwvcdPOt6QmpsgRuSKvnL%2B57eglpxn6MLtpZXiIaOc1f3BAsWq2o9h4WI8Nyf51J8gmhO590BZGtUnQjDXGDF7bbD5M%2Ba%2FUmm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90bdff5b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.usps.com/global-elements/lib/script/resize-manager.js | 192.229.221.165 | 200 OK | 468 B |
URL GET HTTP/2www.usps.com/global-elements/lib/script/resize-manager.js IP192.229.221.165:443
CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1040), with no line terminators Hash90d8fb00194d91e9dd20281817c285d6 e7e37421b14a39e0d3787988a52a45d27ec3761f 479b585bb1f3ca011746467c115b58ca0cd6ac62aa68c9d953635b3344953887
GET /global-elements/lib/script/resize-manager.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 33783
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Tue, 23 Apr 2024 17:44:14 GMT
etag: "410-5057c23b98e40+gzip"
last-modified: Wed, 15 Oct 2014 20:40:17 GMT
server: ECAcc (dce/26B9)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 468
X-Firefox-Spdy: h2
|
|
| postsikei.top/static/js/optimize.js | 172.67.203.45 | 200 OK | 104 kB |
URL GET HTTP/3postsikei.top/static/js/optimize.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeJavaScript source, ASCII text, with very long lines (1720) Size104 kB (103921 bytes) Hash649c3e8e8378fdc785ae5fbd51f843b4 5eb51f662d4652db4932aa3bd444a3399923a9f4 8ff752ffa3c7cc5de38982c9e9e02bcd12f7ec83d5401438af6cc8b983b6d32a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/optimize.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:12 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-1cedc"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lXcmSHUU8v1QEGSs5dM1LRozPVI9S%2FLujddkKSCTVd0g34t5WATkJ3DbqQgDbjb5nqt0oHJwGRFODidKXRQQzS0vb3XEcgSq6Ck9IVOKdk81iJoND6K46NZhbILrDIyb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8fe7a20b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| resources.digital-cloud-gov.medallia.com/wdcgov/2/onsite/embed.js |  104.110.27.57 | 200 OK | 527 B |
URL GET HTTP/2resources.digital-cloud-gov.medallia.com/wdcgov/2/onsite/embed.js IP104.110.27.57:443
CertificateIssuerDigiCert Inc Subject*.digital-cloud-gov.medallia.com Fingerprint84:B5:7D:49:49:24:06:EB:EA:17:83:AB:54:4F:3D:08:4E:12:19:EF ValidityMon, 01 Jan 2024 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (587) Hash44eeac962b1b7cbf3df859eda2a9d6ec acd2bf8d1fcfd4cf29488ddd1f5146d7a331cec5 74375e8bdeaf589cca286668fb57915e8d7b8a2e4b86320566fe214c72e8f8bb
GET /wdcgov/2/onsite/embed.js HTTP/1.1
Host: resources.digital-cloud-gov.medallia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: pI+1yiZmYGgP9w5ZMg6ramL/R87DMFnlF8VV87o8suT7gCDQYXCqh47/UdUjMXZc2rc3XTIdruE=
x-amz-request-id: B61508V94VMNBQXN
last-modified: Mon, 22 Apr 2024 20:27:51 GMT
etag: "44eeac962b1b7cbf3df859eda2a9d6ec"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
expires: Tue, 23 Apr 2024 17:44:14 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 23 Apr 2024 17:44:14 GMT
content-length: 527
access-control-max-age: 86400
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| postsikei.top/static/js/modernizr.js | 172.67.203.45 | 200 OK | 11 kB |
URL GET HTTP/3postsikei.top/static/js/modernizr.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeJavaScript source, ASCII text, with very long lines (11084) Hash66e83c4165a234cdda478a9c55cb90db 22e9211030a1f612ef4acd010185181bde967307 779ab662607b48249e86f3c27e9eafff4bbc808b48899a439d5cd9b2c78f99e6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/modernizr.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-2bfd"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G4btRymMryVPdHkJUXX77R%2B%2Fip704SJSamK47sQ53kKfvv68HTpcXU%2Bqe0V%2BbVUWWUvNJGbIYPoNBb3ezUIAlZfcqnCs3yDO0AZqJtTfrHEh96AepcFzf%2BEpU5zJbLNo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feeaa6b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/po_box.svg | 172.67.203.45 | 200 OK | 52 kB |
URL GET HTTP/3postsikei.top/static/fonts/po_box.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/po_box.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bFVU%2FOiNOTRE5GZis7JNe0JcbB%2FMlNsjWcpDtMMVnq%2F7%2BlR0WtWXHwDOdRq18q0FE%2FPXMMWvpxOvsz972Y0n%2BH%2BjxqIOFZIimAuPiMKC0r%2BMIDQmcehldQzTN7%2FfzQE1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a1e7eb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/collectors.svg | 172.67.203.45 | 200 OK | 1.1 kB |
URL GET HTTP/3postsikei.top/static/fonts/collectors.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hash4554cbdb5e84baf194db7efa63951371 66719fafdb1a0a831b647addd645607f0449adef 7e7cf980806d79cc11f61e846573b77d601c9eca47cbf1b760a072c66288e8ef
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/collectors.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-461"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UI30xIG4TG2M3jKXo3zqEFrfhcsyNEj0tvwP2eMmnuYcYBihrjVj6NvwIyBSjNPgWrU3nmZuYaFDesEhoOVLkozNLG48VfQv1A%2B30cBNHKMPGt%2BXk09AkQb2NdmSVJSv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a2e89b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/schedule_pickup.svg | 172.67.203.45 | 200 OK | 52 kB |
URL GET HTTP/3postsikei.top/static/fonts/schedule_pickup.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/schedule_pickup.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8wp73aO%2B57MUKR2HAK19vTeSw1xSy5XxOqkY8GHngw0t10qs59tG%2Fzhp8bTd1nJbVEM8VsQBM61d0hu7jdlg%2B3QmTqGuST6%2FUbRajHjW2nmj%2Fc3W%2FRcaWdhBBd%2FeFLcM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a0e5eb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/change_address.svg | 172.67.203.45 | 200 OK | 52 kB |
URL GET HTTP/3postsikei.top/static/fonts/change_address.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/change_address.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7%2FStkm%2BVgIXxAHwltyxIgTjT9dWV1ocO506WjYRvfED8ZBScVnM9edpb2FOyveGE5iTqd7l9%2BRt90d9VQdwv5cJZpxf%2F%2F%2F5BkNvxU4iMhfxEUBh6pScSQqJW6ST%2FZHvl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a1e7ab50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fast.fonts.net/t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0 | 104.16.41.28 | 200 OK | 0 B |
URL GET HTTP/2fast.fonts.net/t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0 IP104.16.41.28:443
CertificateIssuerGoogle Trust Services LLC Subjectfonts.net Fingerprint40:BB:71:39:9B:62:CA:2E:30:5E:D3:A9:33:D6:69:83:D8:1F:D0:57 ValidityThu, 04 Apr 2024 03:21:50 GMT - Wed, 03 Jul 2024 03:21:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0 HTTP/1.1
Host: fast.fonts.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 23 Apr 2024 17:44:12 GMT
content-type: text/css; charset=utf-8
content-length: 0
x-amz-id-2: ki65sQC1HlYAvAwzpIlg68BKJDoZiZ/BwbN/hDH5RUfm7vMSBZqfat1D29ePjiEs20YJy+049dY=
x-amz-request-id: 4MWDSXH8MPCQQMJM
last-modified: Tue, 23 Mar 2021 12:59:23 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
cache-control: public, max-age=0, s-maxage=604800
x-amz-meta-mtime: 1519217722
x-amz-version-id: null
cf-cache-status: HIT
age: 427468
accept-ranges: bytes
set-cookie: __cf_bm=VuyEEwEwlxaKstbP5AMTN3nYUyBKiFdiiU6n9kXxr48-1713894252-1.0.1.1-5WobKk1B08cp.aBrv3pMy0so2k.bUxAPa0zHZTrmHAWvZXb9KuTdnOIiEMKnjKqVGR7pYrO6UNlEEsMhqemjgg; path=/; expires=Tue, 23-Apr-24 18:14:12 GMT; domain=.fonts.net; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa903f95992a0-CPH
X-Firefox-Spdy: h2
|
|
| postsikei.top/static/images/location.svg | 172.67.203.45 | 404 Not Found | 153 B |
URL GET HTTP/3postsikei.top/static/images/location.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeHTML document, ASCII text, with no line terminators Hash2311107fc4a0cc05c1bf56cf25df6b90 f60e44c137b1c78e8b732aaf85e8d9efa0043140 518be356167fcc8b31e415bd6054a1214b010541c1f2a21d6839cb9bc95987b0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/images/location.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eGjhpJbh5EJeIoj5gSWHfxam05lHzLVTqubVqp9eal0oqqBgCUBOWRTjAwBRpturYXa8uc73iB0aGyLxFJdNuhK9nlnx1f3Hwgm2ORrSevyuiWSHOoERM3Li%2FbWGDodE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa909ee44b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff | 172.67.203.45 | 200 OK | 47 kB |
URL GET HTTP/3postsikei.top/static/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeWeb Open Font Format, TrueType, length 46657, version 1.0 Hash3beb1cf49dc702cd4de8618eeb344dd4 080e1b4dc8b43ddb06961a3490857cdb936a8c2a ffd7af6177837790e2620c429dce0da6dc7d18bbdcf87a7ed2c033a03513e947
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/main-sb.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: font/woff
content-length: 46657
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: "653f5e13-b641"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BovptS%2B1jsajVQrhNDdLkh%2B8uwsfhwY859bN6PVZUvZFfxTBAt8su26%2Fqree9mxUtYGRDha31BetQnDw3Q7WjMpocmpw8xniWI%2B%2FuxSoM7XUN59oKKzY8OCOsH8Kn8dz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90bbfeab50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/bootstrap.min.js | 172.67.203.45 | 200 OK | 37 kB |
URL GET HTTP/3postsikei.top/static/js/bootstrap.min.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeJavaScript source, ASCII text, with very long lines (36812) Hash5a419da48d7b5f7ed34fda267cac899b 5b1552a7baf7a483457cfc229129405f7b6b94ce 6cd4e4ed31432db3cdfdf272f1066de426166a2013598db7cb71b77a47d02148
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/bootstrap.min.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-9049"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pHD18mx26awAzIr5x24z2EHgcRMYQSzw6qMuZlEX6r9Rf8%2BdQjTtoiBzE3k9JhlFyzGc5eorsCOuEDLgKh9yndL6BaYx%2Fv7w4iOzXB54JUZtVwyZlDCR7AfwOVlKmvej"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8ff1ad5b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/schedule-redelivery.svg | 172.67.203.45 | 404 Not Found | 153 B |
URL GET HTTP/3postsikei.top/static/fonts/schedule-redelivery.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeHTML document, ASCII text, with no line terminators Hash2311107fc4a0cc05c1bf56cf25df6b90 f60e44c137b1c78e8b732aaf85e8d9efa0043140 518be356167fcc8b31e415bd6054a1214b010541c1f2a21d6839cb9bc95987b0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/schedule-redelivery.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eD5e8Nf%2Bq9qeP%2BrG3oZY%2FyYfHE9UNsRwdKEfSk%2FSy4oo12DC0EpLVRmZvJ3iFjvnHjyiRblOYJ%2F19tXKM2qn%2BeOnEZjnfyCaaxvLDVKbNeZLgeXlhLAPCe2kh2a8ys2O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a1e75b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/b0868b4c-234e-47d3-bc59-41ab9de3c0db.woff2 | 172.67.203.45 | 200 OK | 40 kB |
URL GET HTTP/3postsikei.top/static/fonts/b0868b4c-234e-47d3-bc59-41ab9de3c0db.woff2 IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 40372, version 2.655 Hash9bb1ce2aa7fed31792aa1750d0306831 6a538f9d945eaa6f7e8f97b4530183347d20bee5 5e284133b1b11165e7354b29cfabb5f214c473f0ca18198a49c052d8df3f172f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/b0868b4c-234e-47d3-bc59-41ab9de3c0db.woff2 HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/main.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: font/woff2
content-length: 40372
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: "653f5e13-9db4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HSlemWQgk3JL0%2BN7lDag4bdT58dwXnfVLCeuZhBoZVqdqFuVOjLCXcI%2FUUZAZGFdybi4mVv0Ny%2Fi8YXza4PLKA5yuJ9Lhy%2FGs3%2FhBMUEouzHCRhhwuNq9YCO41sjKD4V"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90b0f3cb50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/tracking.svg | 172.67.203.45 | 200 OK | 52 kB |
URL GET HTTP/3postsikei.top/static/fonts/tracking.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/tracking.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yY5oznlR9Z%2BJtWmKAcfBc5BT4qQ3yQwaNLVX8EaqjTl%2FjsPFqn%2BnCcla4gna0ncW3tE0y4ni0xJqLcPUZ1%2BwmP3K3rJLVx%2BcHU4M6Q3zawKBnVoW5avC%2FAEgjJ%2FTjF2J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a0e66b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/search.svg | 172.67.203.45 | 200 OK | 1.5 kB |
URL GET HTTP/3postsikei.top/static/picture/search.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hash72686f982dfebbd9157958b01f2ce9e6 525eb380721cdc53b170b7ed00d9a87f6ab71167 92f4f127afbc23dba0b9a8edd2b7baf572c6f2abec350a4d992e372b000e674c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/search.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-5b9"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OBUwucy25Jh1bqqMie%2Bx42ZRWBxgZYlZwJmtMeJDZSk91%2FBtIaK0XUUP7%2F1IrYSKqyUbZz9jUHNbdRLNtTeDdff7Ige%2FMY%2FoSXSp0oHgOO2QFglmzTzDIiIK7edkGwIw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feca74b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/landing.js | 172.67.203.45 | 200 OK | 9.1 kB |
URL GET HTTP/3postsikei.top/static/js/landing.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeJavaScript source, ASCII text, with very long lines (10234), with no line terminators Hash0f4184554a83887bcb3f73f463933a90 e093bfdcdf35253d254999395bdaa7ed67a99068 d868a0399477d0d43d7d3caf437be0a1263e7d41b6cdc81b3ff05b6f68d7c5e4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/landing.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-235a"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sit506CXZplgGTRiLLSzKaPHegjzdW1h24b5OQqS%2BuNy6ikjzqfnqVkTfR7bgEPBHr%2B%2BvPOcbI8hluW7VEhvyHBluJT8GlvafGGAJ9qCPf3IeSPFGWx%2FsP7CS5NGtq8O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8ff1addb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/config/urlConfig.json | 172.67.203.45 | 404 Not Found | 153 B |
URL GET HTTP/3postsikei.top/config/urlConfig.json IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeHTML document, ASCII text, with no line terminators Hash2311107fc4a0cc05c1bf56cf25df6b90 f60e44c137b1c78e8b732aaf85e8d9efa0043140 518be356167fcc8b31e415bd6054a1214b010541c1f2a21d6839cb9bc95987b0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /config/urlConfig.json HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 23 Apr 2024 17:44:12 GMT
content-type: text/html
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9td9Rd7OPPFGkNBNat4bwmQQoEqQ%2B4AMyQZL%2F4tF%2FU11UVrxwiec0JA0MeJtsA%2F7fGLOoAKjrVTt7KuIsKhiqoCG1LSFWaLAsdOQdAmMpEFCW3k3mEyTvFBdiUjoSbGW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878fa905ca7fb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/ge-login.js | 172.67.203.45 | 200 OK | 9.3 kB |
URL GET HTTP/3postsikei.top/static/js/ge-login.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeASCII text, with very long lines (10568), with no line terminators Hash8e71360989154bfff52eed7385693c97 fef06dd99e04c205b34719c8e60d038327551574 92a38453573da7e18c1db67ab224561714b604b7c517034e3311b65aac11346e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/ge-login.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-2460"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LbxtTJBFk5mOWHCa2ydHmVOMHJvs6aW3X4XpQ6KEGaFJPq1XKkwuk7vT3pqgmJKQLQv4W%2FXjzqmtc%2Bf8uPRChgW0jpJi7EARDE5TMI0lBkLoqmh2S0o6yLaub74R7cO8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8fefab4b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/images/chinese_characters.gif | 172.67.203.45 | 200 OK | 2.2 kB |
URL GET HTTP/3postsikei.top/static/images/chinese_characters.gif IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeGIF image data, version 89a, 44 x 102 Hash6cfd66aca15e28ed9e77672fa22604b7 79f78e9167a5853d740486cdae627034cf2a7085 dc9835ec6574c8d748f4fe255d01035a7d289f4a8caae72a989a32d3973caecd
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/images/chinese_characters.gif HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/gif
content-length: 2173
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: "653f5e14-87d"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4%2FhG6dnfscR071kU2QNDwunjuRaytt322I9HM6eWSQODE9H9%2B%2BLNiqOCeP4b4DqkJy3hyhe51IdEGFZXWRxAVerPjf%2FeaFlnGIXlznQimeVZMJM4IyCv8AI%2F8WQ%2Bym8Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa909de3db50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/stamps.svg | 172.67.203.45 | 200 OK | 52 kB |
URL GET HTTP/3postsikei.top/static/fonts/stamps.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/stamps.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bm4PPl9ms5dn1jKu1TIW1LLt5GOVNdKiRvNsKRRVcuXP5cX7yR1Eijl0YaIUl4i7FmQBOT58vu9Dc6fgnS9171UEz9DhkukI8gKCQd7gw3w1c2u6jWPG6YZKLdQLQShk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa909fe54b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/cards-and-envelopes.svg | 172.67.203.45 | 200 OK | 2.2 kB |
URL GET HTTP/3postsikei.top/static/fonts/cards-and-envelopes.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hash6088261f72b5ce3642b5cec0eb113793 d132c9f520c2a5b4a724c5ecb2e8fc4f4f45fa07 2a7560f8b14ba4d21e129f29758c750aca7787cff99c49c1c05c389d22a15457
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/cards-and-envelopes.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-8a9"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QLIDM5GwbfXSjSbDfgD27n6xSuls3q40t371xucqpXH7nQj6VyejOW%2B%2BlsQvey7soNryucTU9f4IrMVXbrjQoWbp%2FGvTzByFnPgVLxLZJGiyaGQW0P4uLMDVVgpNDKyb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a2e86b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/onelinkusps.js | 172.67.203.45 | 200 OK | 3.6 kB |
URL GET HTTP/3postsikei.top/static/js/onelinkusps.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeASCII text, with very long lines (4144), with no line terminators Hash2575b25dbdbd1b914b3c983cb24bcf90 31a451e8403be6b3f4fffb0bad224b1e02464c0f 07b3aca05a0a6d91a57cd83bafc5366a099a5719cab8a5a672a4ab732ae3c2f5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/onelinkusps.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-e37"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KnffTCjpZR1NrfB%2FuK7oye7xC0sxrPckvBpC9WpUNssri25zKuftF58H%2F5N6JgdOzVUVKikc108P44H%2B3RSrKCszrd3Om9HwPiTPqmjxaXU3MD975c2sc29BKGb6HM7C"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feeaafb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/location.svg | 172.67.203.45 | 200 OK | 52 kB |
URL GET HTTP/3postsikei.top/static/fonts/location.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/location.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rdQSXBRzXwoJkw7S78xIWn55%2Fn0saHqzN2nA3bKACkUVznimyLpgoShu%2BdCI8V2kY8aa7Y%2Fo%2FQERVXRPZ2yUthD1Lyd3kXB5CcyxXMjwjFUrLKDx41DXK1XbWH%2B%2F0AU4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a0e63b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/css/megamenu-v4.css | 172.67.203.45 | 200 OK | 43 kB |
URL GET HTTP/3postsikei.top/static/css/megamenu-v4.css IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeASCII text, with very long lines (42778), with CRLF line terminators Hashffff53c10c3ee489b1b0100d34eaf6be 2b388dc2ee7341a6b183e2652f2a07953468164c 12608b8833ec103ad06f97ca844c653f22dd8e03b50632d8d6bd3dbccdc5c422
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/css/megamenu-v4.css HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:12 GMT
content-type: text/css
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-a71c"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5t%2F9sGvaCOsLYQclUo8Yw1LREOP7spqpUabcLpUNV55wKVLR5DEr24gahWaxPCvSoPcG6MCiJAIzv0b6MWqThxxS4RAc1Xt5wIxAzUkSf4cL%2FE4OmEJwDX9xGbV0%2BNLF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feaa4db50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/tracking.svg | 172.67.203.45 | 200 OK | 1.6 kB |
URL GET HTTP/3postsikei.top/static/picture/tracking.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hash51e3139d76e5dc032ee585cca0dc7fa3 25f66b3ef42009851954f22e6d6f4904f506c0b8 dfd96cdbd5e0b4bd7f31c68d620874a37ec2c3f4e5d2716d7227057d2e66d264
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/tracking.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-619"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4levmiUUZ%2Fe2bI4CHTBjbhFW%2BFr0kl5tUKrK9QuUS1ndbsYm%2FPPLcHmEY607nJAhmNpBknx6GikG2GNOKS1CRQZXiM2QuWiavpdDRqQ5rL8Q4sIGpHDVTbOP0uvvo7PI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feca79b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/featured_clicknship.svg | 172.67.203.45 | 200 OK | 1.1 kB |
URL GET HTTP/3postsikei.top/static/picture/featured_clicknship.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hash4eaba35653e775df78f96942d040dcc3 f5fd90e8f32041520795f0c82a1652124a02f93c 08f3c04fe589387977fca30dc02a87bf42ce3c066fc28c1071be412aaf9cf852
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/featured_clicknship.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-436"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ol2SuHckCMAh%2FnJ%2FVAuGtc3wYXL0rpNPnxz1RZV8gTGrsmMXDd7%2B%2BOqMlLlsCs5gXWozB0tP8QeAqKxttwJitLp40d2dheMgTEea2xfaSSD6wB1mVDi63v3mUJ6Vt22b"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feeaa0b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/3b303641-706e-4221-94c4-4fb491f4f8ef.woff2 | 172.67.203.45 | 200 OK | 32 kB |
URL GET HTTP/3postsikei.top/static/fonts/3b303641-706e-4221-94c4-4fb491f4f8ef.woff2 IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 31696, version 2.655 Hash10290cd4148c956fa2287d2ab5c71631 0186c7c5f9e12701022362effcab5c7f08ef0a29 0419465d8b720ca4a1a4307e1aaf37c9c1fda715473e458a9e7d1a94854c68e3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/3b303641-706e-4221-94c4-4fb491f4f8ef.woff2 HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/main.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: font/woff2
content-length: 31696
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: "653f5e13-7bd0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PLn%2B4vaxI3byOg4rv0dUSptf%2BbJlesiORuVoUPlzyfBYTOd7KnlzbttBL%2BM9ngxEvB5awTG%2BXQd78M2ttxSWZmA0aJp3%2B%2FxQnTzLRkf%2FPJPG7npQLvS6BMbcXEPBWTEL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90aff35b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/free_boxes.svg | 172.67.203.45 | 200 OK | 1.1 kB |
URL GET HTTP/3postsikei.top/static/picture/free_boxes.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hashe7462fb4ef0723c03ebac6aa9526541d 72952a4ed5e25022fe16dd1fa5584c7c76706894 281fbdd399ccac84f423007a4262f191dc0637eb8e04583d85c2e01395085314
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/free_boxes.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-42a"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1GqC35%2BgMwazRm4KarljH2dvp6zEP9GKNIVH9odZNch2CN36TEg0W4JyVRw4oFrFDu0tjOO%2FfMVCwJmGUSkkmcJIaT8juhHaG71tR8uaKtXWPz8cXfTdzzrwxXBPdMbF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feea9eb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.usps.com/global-elements/header/script/search-fe.js | 192.229.221.165 | 200 OK | 2.3 kB |
URL GET HTTP/2www.usps.com/global-elements/header/script/search-fe.js IP192.229.221.165:443
CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (2371), with no line terminators Hash690e11c17ea930354a127c08389ed9a1 579699275e0e6b16bbdbda6b2256c07ed07c6f2f c51bf1d17893563dd2a3848f2d4cf1a62274a8d48a1d6b54779236828e2332b4
GET /global-elements/header/script/search-fe.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 33766
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Tue, 23 Apr 2024 17:44:13 GMT
etag: "8d8-5d77081c47c40+gzip"
last-modified: Mon, 07 Feb 2022 16:58:17 GMT
server: ECAcc (dce/26A2)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 930
X-Firefox-Spdy: h2
|
|
| postsikei.top/static/images/favicon.ico | 172.67.203.45 | 200 OK | 32 kB |
URL GET HTTP/3postsikei.top/static/images/favicon.ico IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeMS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hash3f0f72ed57a54b97cda500bcf0545efb 2f252619c18e729d98e16b96d37cd7cd567b38eb 67fbe8ef9020e5c776aadf6801a1fef8dc563e2e4dc9ddc740af8010c0c38943
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/images/favicon.ico HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/x-icon
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-7d26"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BEXUXxduiLdFd6swwUefzpsAi7H5ybCYljSjb8BzmYzkltDFU%2FXz7DyJ7bM2Vhsr2x%2FILrqDNgko7NNEiInkOXDjL5YrgLJv44WwFt5veJRWdx0f9BxfBpjpCdJ%2BXbYQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa905ba65b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.usps.com/global-elements/lib/script/require-jquery.js | 192.229.221.165 | 200 OK | 74 B |
URL GET HTTP/2www.usps.com/global-elements/lib/script/require-jquery.js IP192.229.221.165:443
CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashf735d63751fc4b77e05b807f7dbb74ba e4e42cbfc17717a40f755213b67d84ce54d792b8 44b301dd27674e82ffc06d7635a718402c2de5c95081c398d26e19b387d7aac0
GET /global-elements/lib/script/require-jquery.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: https://www.usps.com
age: 33750
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Tue, 23 Apr 2024 17:44:13 GMT
etag: "4a-5057c23aa4c00"
last-modified: Wed, 15 Oct 2014 20:40:16 GMT
server: ECAcc (dce/268C)
strict-transport-security: max-age=31536000 ; includeSubDomains
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 74
X-Firefox-Spdy: h2
|
|
| postsikei.top/favicon.ico | 172.67.203.45 | 404 Not Found | 153 B |
URL GET HTTP/3postsikei.top/favicon.ico IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeHTML document, ASCII text, with no line terminators Hash2311107fc4a0cc05c1bf56cf25df6b90 f60e44c137b1c78e8b732aaf85e8d9efa0043140 518be356167fcc8b31e415bd6054a1214b010541c1f2a21d6839cb9bc95987b0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /favicon.ico HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 23 Apr 2024 17:44:09 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ryGnsaxHR1RFQykuCInqAL%2Bn4tRI%2Fd%2BiAZN6iezCxN347xT6zy2BVz1fJSlXAfjDFc8e0E2DoD0bfvFsslnYsYFDei568qN22rE3b%2FRpCXjMHdBWnxoRHHmROdNaprJS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8f43ef4b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/462d508d-efc7-478f-b84e-288eeb69a160.woff2 | 172.67.203.45 | 200 OK | 39 kB |
URL GET HTTP/3postsikei.top/static/fonts/462d508d-efc7-478f-b84e-288eeb69a160.woff2 IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 39112, version 2.655 Hashe37c1d87055e7062c217e73098ab36d9 61f4c682ce807183e59a52ded2c9af89a419fabe c98cd4bd3267c7d8484044bff1fbffaf0c2362edc04917457244809e1f24e404
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/462d508d-efc7-478f-b84e-288eeb69a160.woff2 HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/main.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: font/woff2
content-length: 39112
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: "653f5e13-98c8"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5mP%2Fd3Yb%2Bp8%2BLujHfrV6HUUUR3yX5Z%2FL49Xby5jeSD%2FRZZ9sh%2B7wPysau5mwmT55wfQL0sYB5tIUGoHdjz2yMQItQRkaWpdU7iqb%2FBJyRCnLb%2BCa4TMMAxEgaoATvgXb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90b0f48b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/shipping-supplies.svg | 172.67.203.45 | 200 OK | 2.6 kB |
URL GET HTTP/3postsikei.top/static/fonts/shipping-supplies.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hashab67d7e569a64be0744cb3d179612d50 65e256ede2d7bc4297f7497f4430182c04b627e9 b3b380736b4280b27e829b17a7fb722f88c100d77bea94909c9b110e2a4a691e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/shipping-supplies.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-9f8"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U%2FFQ2FggD9%2BpwW3NUxn8YCoWaM%2Bdm4xluHhmWu82X8lHofde2ZRkC8%2BrQ0m5smNEW6OdyaY55tA4pxmM5d6DonZSuyXc4s9fpZVJU4ZrHV814demQBqCNK%2FnWRYBi3UM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a2e85b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/css/bootstrap.min.css | 172.67.203.45 | 200 OK | 121 kB |
URL GET HTTP/3postsikei.top/static/css/bootstrap.min.css IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeASCII text, with very long lines (65371) Size121 kB (121084 bytes) Hash473c24f70d7d3d76cc9d6c67a852b100 4b017192f7e665f0b5cc5ed1b737f709fc7a6be4 a78c4915ce28caf156345123fa0a8a4424355edd10ea1f733ac93c87ebc9637c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/css/bootstrap.min.css HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:12 GMT
content-type: text/css
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-1d8fc"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TlwDFyGsAZUih83A5HaGzxlVWY10gUXKa%2FsPL5npctDmQJ5cPZWQZXsw%2Fj2fM6CdH9ZVUpI%2FkgGnOZ9DwlZLE6kV4LbG%2BEd2T6QmNYtHl6Wwz7iRPxWMJw7kOqwl0XnB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8fe8a27b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api.postsikei.top/websocket/274c4bd7790f98846f33fa355b525127 | 104.21.69.25 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1api.postsikei.top/websocket/274c4bd7790f98846f33fa355b525127 IP104.21.69.25:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /websocket/274c4bd7790f98846f33fa355b525127 HTTP/1.1
Host: api.postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://postsikei.top
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: guUWwulVlrUzQSZBKDmBdA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 23 Apr 2024 17:44:10 GMT
Connection: upgrade
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Max-Age: 3600
Access-Control-Allow-Headers: *
Upgrade: websocket
Sec-WebSocket-Accept: Vt7LBV7GYjb0VPFO7gAWzxth1FQ=
Sec-WebSocket-Extensions: permessage-deflate
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7uVc7MI8juegz71gREbG5BQnZKfayuNI46hBbVrd4Jvsy2GV7ZDpR9HHYfDVhgAQj0rzMdyNAXClOUz%2BC1gUJOi0%2B0xppx1TRm2F0UQzPifftS9ZHtK4zUUKPfy6zUn0%2FP%2Bwxw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 878fa8f53e8d56ca-OSL
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/css/main-sb.css | 172.67.203.45 | 200 OK | 7.9 kB |
URL GET HTTP/3postsikei.top/static/css/main-sb.css IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeASCII text, with very long lines (8068), with no line terminators Hash240d2c6020f53f231be98f099dfc00cf b855005ba3a6be537b754a324853a89f53f33150 ea58be7f60a5c2d65f14278ed684965d8c69be76db4562a9eaef78844d271ed6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/css/main-sb.css HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: text/css
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-1f01"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hVeYO4XQy3M%2F4MAPyV5Vxv8pqmH7bh3%2FPqCN6gylTeftyziIGLVezYNT8krQz5COR12c2JV3udkc4P0OLNt%2BwrkWMAT6NYkAaeHYn%2BqMHtKtOi8SXGwRiODWgDjzZNed"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8ff0ac4b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/images/mailman.svg | 172.67.203.45 | 200 OK | 1.8 kB |
URL GET HTTP/3postsikei.top/static/images/mailman.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hash7e63b1510cfe1e7b2e2c00dbe7b48f49 7b13f782d0ea7d101e612cab914da1574180fa76 3bfb113a66658cfbfb3238b0210f43d4e564d7fce174ee72f3ab8d3b8b3cff41
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/images/mailman.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-723"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V8zoonMvpSU3umWeLx%2F5AcFyJLfd8OxHU%2FjoJBiMIsuNrE4LKeYKWvkHSCS1AqB5XexqrjSibeyvjJEnAln%2BnB%2F1piCUZLNgnBXc6ERJ9ELhZ6bQw5G9yNsWSTfRbnVv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa909fe49b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/search.svg | 172.67.203.45 | 200 OK | 52 kB |
URL GET HTTP/3postsikei.top/static/fonts/search.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/search.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XEuQpi7jJhoc6y7IuXsd2tCGI%2B%2BVcGPHmf%2F%2FIjfeDokzwv7R97M2TrZiWznlvNIfSpyroyBD6%2Ba1Bq0F3OBoXqd73SCpblVDOjsj6llGaQ%2BsB%2F2UMDXjpAZm5AGU0KZf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a0e6cb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/logo-sb.svg | 172.67.203.45 | 200 OK | 3.6 kB |
URL GET HTTP/3postsikei.top/static/picture/logo-sb.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hashbd8c973ec0b53678ec2e4dc5134fa653 e643657e09913383e36bfb797352a7223e202f15 3c24c49690aa84ba6ff95c560fb35c92ea3b7b7f6d7a4355f8628b19b3e1f97d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/logo-sb.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-de5"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ssdDEmO0s6D9NBl%2FA5ALS9DKQsZ68D6J9Pc3KH%2BUJq88k7xQisqVI74fSs3xWlPgzRF0LDPupPGxdI0vKDyxK5S48QhdZ2euZX4AEB%2Fd97XaE4bKi195wl5BHOEblM%2BB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feba68b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff | 172.67.203.45 | 200 OK | 59 kB |
URL GET HTTP/3postsikei.top/static/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeWeb Open Font Format, TrueType, length 58690, version 1.0 Hasha6e2d3921c9ea0fd81897d9ae7a33ba4 bc31969f2fb1926a15cd678b3e573c37a44e5421 f2e2ef638dd9aac863f0f6027ceb784cd4c5a14a676bed909c8f2ac4b088d510
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/main-sb.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:14 GMT
content-type: font/woff
content-length: 58690
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: "653f5e13-e542"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DqmgE85dSZqNJ0OwAZV3fPpPq%2BxWXTa6OHyQKom1cOwM437yoN6ZyvQqLDypJ235CVTjYIlDhwwCP1qh8J%2BXrEPLbJCgb8jsfsZL3rGUbLYS71I8a183hX8qxqNY5cdR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90bcfebb50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/find_zip.svg | 172.67.203.45 | 200 OK | 52 kB |
URL GET HTTP/3postsikei.top/static/fonts/find_zip.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/find_zip.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L0R7twr5grUtwZPXYLdpz2OatdVkpe3yoxQGEzi3G%2Bcf2gdnkJ7QpPgkO%2BPgS1Fex4XrYKEAW9MmEWCGeoU%2Frplf6Fdot0r3AalEiccHZ1vKPUPzSeabx7u4%2BTYEK2EW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a0e55b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/gifts.svg | 172.67.203.45 | 200 OK | 1.0 kB |
URL GET HTTP/3postsikei.top/static/fonts/gifts.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hashd5e000eef8dcaa68cd64f751ed58bbe1 ea5f010cf037aa26788ee74d0b93431f769c99c5 bd96da0c1c77a63e3eb4d350d786cb53debebe069efd91879f62ae24362fc53a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/gifts.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-3ee"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hjOema7JtF3cqxdbURnUih8owx0OXFKTNO%2B7ZTIxLI9k2UelcpejoqdP3USVFyZCLan%2BDxovwCLKFz9gV0F7br36JEi1A5mZEF1WoOBlMgH%2FrwbcQKi5JYvAfqC1H5wW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a2e8bb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/nav-red-chevron.svg | 172.67.203.45 | 404 Not Found | 153 B |
URL GET HTTP/3postsikei.top/static/fonts/nav-red-chevron.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeHTML document, ASCII text, with no line terminators Hash2311107fc4a0cc05c1bf56cf25df6b90 f60e44c137b1c78e8b732aaf85e8d9efa0043140 518be356167fcc8b31e415bd6054a1214b010541c1f2a21d6839cb9bc95987b0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/nav-red-chevron.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xCNf2nRfwHCTrPgNA42kaxCjW0Sk2pt6UALa43iUPDwgxyZD3bcSOhyWtjbKxpOPCl2xcK2Vs19Chzrojb7tT5NVFZPnXjlsSyXHL%2Bro4fDjqteqLw7Gy4cV%2FFDBQOp%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90aff2fb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/ResourceRedConfig.js | 172.67.203.45 | 200 OK | 12 kB |
URL GET HTTP/3postsikei.top/static/js/ResourceRedConfig.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/ResourceRedConfig.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:09 GMT
content-type: application/javascript
last-modified: Mon, 06 Nov 2023 14:01:09 GMT
etag: W/"6548f1a5-2fae"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PanfbO4UrX5nNn%2ByPrnSZwshArdd82IRhDBXc9%2Bl9H9SjyMBpLjFZnGsFxdaOzjBqyi973kDfhdIBrK6W1H3jp8ClzCjlBjYy%2BdzVbXtWUsr3veBhI7SG2qjmMrwRgwm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8ef8a34b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/vue.js | 172.67.203.45 | 200 OK | 342 kB |
URL GET HTTP/3postsikei.top/static/js/vue.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeJavaScript source, ASCII text Size342 kB (342147 bytes) Hasha9b6fe71cb7cfcd689e1ef345aefba51 5c39dfc37fc42400e4b4557db956f3f218a90ca7 159f0ac0c8f517aaa736003b6e13ebc959b5f7129db87e4e56bf2eec8d6d02d7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/vue.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:12 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-53883"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kyf2Ok30ok8iuZHsBunh8cjZJWNDT%2FTPLhisI26mzvN3nvpNtxONZKPT6TpYJQXjYgT%2F8N7fHKDK8LnchErkzSsbBKqVn3gY9nn2fru6g0EXtSqqyOgSrh6G4TynTsxt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feba58b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/jquery.keyboard-focus.js | 172.67.203.45 | 200 OK | 1.1 kB |
URL GET HTTP/3postsikei.top/static/js/jquery.keyboard-focus.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeJavaScript source, ASCII text, with very long lines (1163), with no line terminators Hashf80770d6ef673b444ceb19361315bd76 7f6b37ae017663a9c94251d256d29bcb18a76ac9 f57685215201f98bc879fac89fbd9ec6669a8d88aec2e43d39ed761aa8c87bb2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/jquery.keyboard-focus.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-45f"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=scyfQXApPL3xwFBgKQi82ow7MXRP3gSKZcpeDUGbhHbvkqhQy8rn267HjFxr8dT5oNo8Dn4LD%2BcMV4nznfPWRQ%2BD5%2FDtsvbSinbcgI2zKdDE4duEZfldHlzGHE845338"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8ff1ad6b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/featured_clicknship.svg | 172.67.203.45 | 200 OK | 52 kB |
URL GET HTTP/3postsikei.top/static/fonts/featured_clicknship.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/featured_clicknship.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xcd9h7hTorglOxuxzjBdfpq1iHEJs0CeHZHCLoiA71lMK5jGLdB2Q42ICRyQRNZvTx9bq3myvmitA5WK4xKUllu%2Bg5YaffusX0ZdG%2FXU%2BziXOWGS4ZwKQwpwgj9K54wG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa909fe52b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/calculate_price.svg | 172.67.203.45 | 200 OK | 52 kB |
URL GET HTTP/3postsikei.top/static/fonts/calculate_price.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/calculate_price.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l8z%2BS85tLtpTMQggELNhX7MLUjiL%2BfsTXPBcxXjafJuhUs4Oj8GFdz1LMF9PKgzcREdjAOMkW%2FnLjUWm3wfdWLd5Jh%2Fm2KNdM%2FxbjMxrh2fUfvmrcYSd6frzdZHs%2Biku"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a0e57b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/business.svg | 172.67.203.45 | 200 OK | 1.2 kB |
URL GET HTTP/3postsikei.top/static/fonts/business.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hash6908931641755e0439879badd7d60325 bb620d016ac952020b5a234e5cc1448c11d0fce7 db9835eb4a5a2c0a97c5dc0982f7be2281e727322699d8a1df3b2a4155ea0f37
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/business.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-4d2"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2Z1l%2BT33gX97KfzQUJsKFqS9UMDf2oXRrPebyDLIPqPfFj5XiyLXsrjpgmckJYUys%2Fkva6UfuQPmY97rN%2BMGCS421DUXxAsFxjlhmd9QShKCaiDykU8cSK02yWrhuVWW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a2e8cb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/holdmail.svg | 172.67.203.45 | 200 OK | 1.4 kB |
URL GET HTTP/3postsikei.top/static/picture/holdmail.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hash798a735992c99ecdc76454f1c093261a 89058df9342a184b64cdff41a11798ba07628829 cd9c59aa1822c5bf50b3250455ca1d6a7aceded7ad9d92c1e5072367384c1652
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/holdmail.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-5a8"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OHGBxNYj0nwgRR1ollW2n%2BdmDkGYy%2Bc2%2BPtQA15ooI4DGI%2F0PEXv7YLKUekOrgOdTnjaxgMWFp6W8LrN12M6EqwK2UI3Eqf0AwgC2A05QKbz60wsmE%2Be%2FMszzQFfV7mi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feda96b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/require.js | 172.67.203.45 | 200 OK | 17 kB |
URL GET HTTP/3postsikei.top/static/js/require.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeJavaScript source, ASCII text, with very long lines (17192) Hash16e572a4f80526df4bc3cc7ff056a9a8 f23b5c2fd52e855245e3d2586cd911051561e64c 75237772a7bc8c6eaadbe642be69503335c5842af8981688250a8d4f0f61c377
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/require.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-440f"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vxDLeNMX5fbAnyT9hvHg5P9KtpwcBd2Y506mYKVjBFn9yg4tRMLdZesdiEBzOHRjuHZK%2BejUiFXp62HRMxS9j%2BBJK6O8PmI9ra8m3L4tfQKkROTMKrYmQQ2%2BRKZUAuHu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8fefabab50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.usps.com/global-elements/lib/script/helpers.js | 192.229.221.165 | 200 OK | 695 B |
URL GET HTTP/2www.usps.com/global-elements/lib/script/helpers.js IP192.229.221.165:443
CertificateIssuerDigiCert Inc Subject*.usps.com Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39 ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (727), with no line terminators Hash0d79b60b350ca6bf24fc9bfd618d90b7 ecb547882bd208b9b852c66c259f565dfa64f56f a449f05b1170b1141cb02b4a49f7136c98ff61a302577982507d370f7465b079
GET /global-elements/lib/script/helpers.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 33757
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Tue, 23 Apr 2024 17:44:13 GMT
etag: "2b7-505dad4fe5380+gzip"
last-modified: Mon, 20 Oct 2014 13:38:38 GMT
server: ECAcc (dce/26C8)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 358
X-Firefox-Spdy: h2
|
|
| postsikei.top/static/picture/location.svg | 172.67.203.45 | 200 OK | 2.6 kB |
URL GET HTTP/3postsikei.top/static/picture/location.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hash2b06f7a382ea90d910403786f60f9d81 9f10825ebeb9516e451a6077b1d0049a352b48e3 a0e33a0b87e479cf85c9df62303b3952357a0645e6c7c36627a43fccaafad182
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/location.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-a1a"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lGw2%2BFOALR59E4P8YsR6WxWTZNyuNIC4o8iUpHsaNYiAyGgzTEsINT4qzGqzVbuKMJXLbiMa9TcwGeDZHAJg850DXTEURs0my%2BACDOc2K5Pz7wbs%2Ba9m2e7pnEP%2BtmiG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feca83b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/change_address.svg | 172.67.203.45 | 200 OK | 1.9 kB |
URL GET HTTP/3postsikei.top/static/picture/change_address.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hashba4d97e788e337701dae39405dc2f442 7e0d950d83c7e7eb6102ee1b5175b1db8ce56551 38ff1ba4f58c85e428e833b6bfa50ce3ddba6b350b3aa68779325f1afaa13b5c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/change_address.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-74d"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kmaWQ2E31YVJ2Qd548R3Dl%2B75wFAZ6N5ApymshRM2nyRcnjXdpmJBnMjZLGFk8xm3vD%2F9H10sl%2BEekWYdMwGeyoDpz5aT4FGRlYfLuTTZwaRWNlkP7uX5iwoqRfC29lf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feda98b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/images/printcustomsforms.svg | 172.67.203.45 | 200 OK | 2.5 kB |
URL GET HTTP/3postsikei.top/static/images/printcustomsforms.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hashc0b073578837924579ce25dc32d69c37 9b6cc85096bc4c634fe5625c7f399a273fd468d1 f6b5598453fece3bdf76222a246cc73e36d5df1896420a35a3c31c3b58cfa2ec
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/images/printcustomsforms.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-9e7"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=je6jUge%2BbOershXO3U5tk0N37JM7zRDnmd2dm%2BiItYaE0CJo0wwQefAfenmewwEUahq959SNAYP0hcvW1%2B5pVOoGU2yAdSamNIOoOUpKWje1cHUlF0N%2Fon2rWfdDcrVp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a3e92b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/css/main.css | 172.67.203.45 | 200 OK | 84 kB |
URL GET HTTP/3postsikei.top/static/css/main.css IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeASCII text, with very long lines (49484) Hash49c08d404b1b7f928d0620bf933dc391 c03353ab9593939f553cf5fe5ce11c28fcb482d9 7488fa2a2c396b5f1fd2992492f92757cf8b8c465367a91166fc59067ed0e9fb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/css/main.css HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:12 GMT
content-type: text/css
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-14778"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8bc9%2BpFCG2TC16L9hp0TYpGaTkUip%2Br6mctcMuKyeCp8TRManphPp8MNHE9V6H%2F1MI8blJV5yiJ7uWu12KJn%2FVz5yp6fmF3t6vUO96AbxaO7AXtcaPCmBXX487NmqDPp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8fe8a2ab50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/config/urlConfig.json | 172.67.203.45 | 404 Not Found | 153 B |
URL GET HTTP/3postsikei.top/config/urlConfig.json IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeHTML document, ASCII text, with no line terminators Hash2311107fc4a0cc05c1bf56cf25df6b90 f60e44c137b1c78e8b732aaf85e8d9efa0043140 518be356167fcc8b31e415bd6054a1214b010541c1f2a21d6839cb9bc95987b0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /config/urlConfig.json HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: text/html
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jqkjwjNAsXtOVxhhLzX6%2Fp5NXwu9jcc4EMrNMIup8r2wnMVs5Jn5RZKP4ujOm%2Bms9c91w4JjyaQT2Twimp0gfWaSUsOgF6sSzxHivD8WDQbuBBGgrV%2BX9W2%2BRvRiB4%2Fw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878fa8feba5cb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/css/footer-sb.css | 172.67.203.45 | 200 OK | 3.1 kB |
URL GET HTTP/3postsikei.top/static/css/footer-sb.css IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeASCII text, with very long lines (3067), with no line terminators Hash68d1409c402b1d6879903e30bcc24b8f 6200b8ff79f3ec08aaef65f882b3c5dcfbac3302 30584a58d960708fca0df28eae169606378cda2281bcadff205fba6efcfd5153
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/css/footer-sb.css HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: text/css
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-bef"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dqR1F7lKVl8JiQT%2B2tJoP0NuKTcrZKI%2B%2FLC%2FdI8poi8T3vP0XdWviqqkhBnIveSWXO6p66WnIwY4UMwaOVrTB8bFW4Zxa7TX5A8UK1n8876%2BF4NsQESPU8cSIumCAsT%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8ff0ac6b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/mailman.svg | 172.67.203.45 | 200 OK | 52 kB |
URL GET HTTP/3postsikei.top/static/fonts/mailman.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/mailman.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TMd7OqYWJSLlISxKNJeu%2BV4XHyMY8D5uDbCSaIerdZEUNP9gkzc8kdPnWc%2BMJ1MqXfaUcj3FQENXaWa1ozTXH2mGrMh3hSK9FNNDr%2Byrn2X69Azzs8Q8H6EYx6I8ospD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a1e71b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/hamburger.svg | 172.67.203.45 | 200 OK | 546 B |
URL GET HTTP/3postsikei.top/static/picture/hamburger.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hash877d4644f0a505bf30be77169524e441 d85faf0831fb39673ad3733ad6ecf1d8bac778cd 2336a119dddc7aa4b6d54a4ecd251f5a30cf0572816db55b92e9f0b43ee63ecf
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/hamburger.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-222"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xs9rjlqmltxJyQsjnCB8iAdJEcddrff3thPHMuGvPcwsZKc0aQiyb2U%2BF88ZIUFmpM%2FbWrA8%2FVN%2Fml1%2BF4%2BTgq8OtDw%2BpiA7GfzUJpR9ElbRoE%2FHkCe2Z%2FIeVFh23eNm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feba69b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/schedule_pickup.svg | 172.67.203.45 | 200 OK | 1.8 kB |
URL GET HTTP/3postsikei.top/static/picture/schedule_pickup.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hashc523f85f9a06acc80cd618f10c18063a d385730a45e237ac82907718aa3c7d78f2dd74b2 7ea8f48894b1b43539d09fa9328a76470d7642525b20477bd5c43105f7baaf86
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/schedule_pickup.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-6ef"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cfgBoyUDBKS%2BklIN6hBncQ1QOKSx%2BAXpDo937KSoAh2vnISREXWmgDrH4HIXYxAsvRSPPMy5b7CnRILeSV9pbQ5hxrfpvehsJ9cTuc6wXtyIoztwQy%2B4uTUIPYYEQQl4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feda86b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/calculate_price.svg | 172.67.203.45 | 200 OK | 2.3 kB |
URL GET HTTP/3postsikei.top/static/picture/calculate_price.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hash431fb89252e46304ea7f6f956146f2b7 bd1018ec7dfa59258d8b81a2f914291ede34f27f be94cb1ae2d86c4a1e0b79e6dcea5decd7f5ab1e96e171946de72117094b13a1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/calculate_price.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-8fe"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KDhqxrpGIauYsidfo2kIdDm%2FCBkt%2Fb35NJXGl2GPwmHDymVmIb5hNyJ9Cblqo%2Fjqj62%2F7k37tFD7ADHkdFYxHZxraDCGMd0x7ocIs3HmlCb6OB%2B5OrJccwvg%2F9fFL4Cp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feda8eb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/icon-personalize-stamped-envelopes.svg | 172.67.203.45 | 404 Not Found | 153 B |
URL GET HTTP/3postsikei.top/static/fonts/icon-personalize-stamped-envelopes.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeHTML document, ASCII text, with no line terminators Hash2311107fc4a0cc05c1bf56cf25df6b90 f60e44c137b1c78e8b732aaf85e8d9efa0043140 518be356167fcc8b31e415bd6054a1214b010541c1f2a21d6839cb9bc95987b0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/icon-personalize-stamped-envelopes.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=shv0I5oz5vADTGA8fUBPApYWbtFnLNfMygwikNDLZwy6JvXl38C%2BD5QBjOdGEKZ4gK5OgcrqDjguPaJKtkT4LCQBiaypOmLOIeAoW9209BaL4Yu1pGVRQxKvlipd1kJX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a2e87b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/metrics-all.js | 172.67.203.45 | 200 OK | 11 kB |
URL GET HTTP/3postsikei.top/static/js/metrics-all.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeJavaScript source, ASCII text Hash34bbbc752c38a085d897eb4d08518e56 f47857ba660bef72853357ebf63c1645ed0e6420 58e2e2233ddbf49425919c629e63a97801067da6538b003f9ecaf0161f9bdd85
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/metrics-all.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-2ab1"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rx%2FULaoB9dccQ1D6XIbiVg3gai4Lcwu0Dc0iqztdpVATEIwLRoAgYW9w7NqBflWhj7%2Fhw7ZUC0BOFvseIBPRKY2uL4ZMGIKSbDbNkyCLyIwRymSuGLUB0MjDiiqt3Sol"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8fe7a19b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/megamenu-additions.js | 172.67.203.45 | 200 OK | 1.3 kB |
URL GET HTTP/3postsikei.top/static/js/megamenu-additions.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeJavaScript source, ASCII text, with very long lines (1447), with no line terminators Hash1c913ee614c1d6875a47a3a3bd8e9096 4fc17c58cb33ce9611a86c947deb8ca4abc04e40 ebb943bb747b6f708237a03636f3710d0f120e6cea93f6c3bbb515b0d29fd90a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/megamenu-additions.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-541"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ffKrQaojH01mk54OnmtLAppfyYvPGV7n39Bg41Y5%2FeU4EaOF3TRUDG6ox6xcJH6w6edQ0FqJ694aSfAW5A7K%2FwQTjMihB9CGQT1i9bHehzs%2BKgD8q%2Bb7xxaZEtpcGPrB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8fefabdb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtm.js?id=GTM-MVCC8H | 142.250.74.72 | 200 OK | 687 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-MVCC8H IP142.250.74.72:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (65316) Size687 kB (686802 bytes) Hash7d2c4214d95d3f42fb51263e5669f15d a7b2a1f21aa8f77d1e25b083c3daf271083a36de c99ad15ba885bb403a2193a002cd2dc7bb9afa8b781d8b0b4ce287fd232e2f58
GET /gtm.js?id=GTM-MVCC8H HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: gzip
vary: Accept-Encoding
date: Tue, 23 Apr 2024 17:44:13 GMT
expires: Tue, 23 Apr 2024 17:44:13 GMT
cache-control: private, max-age=900
last-modified: Tue, 23 Apr 2024 16:44:44 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 152479
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| postsikei.top/static/images/loading-icon-transparent-background-12.jpg | 172.67.203.45 | 200 OK | 82 kB |
URL GET HTTP/3postsikei.top/static/images/loading-icon-transparent-background-12.jpg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeGIF image data, version 89a, 630 x 637 Hash9e0373c2b4410c49439dfd822c5fd16e 427f86c03751b7e107fd282bbe32be18fc2e0898 05eb745176d79ec27d52d544582483fc4d0f6378c7ed2060be24dfc4e8990668
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/images/loading-icon-transparent-background-12.jpg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:09 GMT
content-type: image/jpeg
content-length: 81572
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: "653f5e14-13ea4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wFVPvUl5G8UotssynLR%2Fk%2BQJw2MncSYeZCPpBJfcYHvtaue2bBmYSFHSZ47ndztwIxtU%2FVLCas1Yr0JSZOJv%2FABnHsQnchDGnLeIcCSRQ1g4ugo75qzxfSlaMX1i9%2FGu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8ef8a29b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/megamenu-v3.js | 172.67.203.45 | 200 OK | 13 kB |
URL GET HTTP/3postsikei.top/static/js/megamenu-v3.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeJavaScript source, ASCII text, with very long lines (13400), with no line terminators Hashb62e27b15837b70e7dab99846ac90ab3 9a49415c5e47149a5324705eaf78b4b68ce10edf 50764694ee2da70f2d3ce0e8340eca39b9e2760d293b47e4355c690a4769e781
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/megamenu-v3.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-3458"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n%2Bil9ehf3aMSx6qaMHKZEeJMfE93iLtfa4INguhqcQDk3cBwnKETtfN1%2BPld%2BIu%2FHnXGC1H2OdGoHNUpbzXTjiY138ojewehJp9T9iqp%2F9TUPFtVDYhvbRkp4cCHTsYa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feeaa8b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/css/conditionalchatlink.css | 172.67.203.45 | 200 OK | 52 kB |
URL GET HTTP/3postsikei.top/static/css/conditionalchatlink.css IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/css/conditionalchatlink.css HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:12 GMT
content-type: text/css
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-cb57"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aAOUGJCnylpdosABBvg4vGnsB7JW5lbGtPlPefCXxpRWFbkGo3wAFZ63LrHqlwvbQl1d8v7hSjjpY1WjRmIyLkRsmn7%2F4o6FdiQ1ylm6COQfQ6QxSXqjApCgW53ZaHJm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8fe8a33b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/stamps.svg | 172.67.203.45 | 200 OK | 1.1 kB |
URL GET HTTP/3postsikei.top/static/picture/stamps.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hashaa929e4b4109978bc993e27357aae805 90fa6376d480e4b223c10365a264147417064271 2734c778268298b5302a62fb13085c40eff83b394ccfcfbc0bc70918589f45f7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/stamps.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-44f"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U0SFGrb5mWuhGpIHDkaR%2F5C8zzxuRuUKb0%2BMawRJHX8TYdNozR9G5BWgER624JX79nLNTFs8zLH83KzOgiPGF95OO%2Fto3Kvwn0EQiFZZjHNrtnfseb981xlR2wgfaXoA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feda85b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/fonts/holdmail.svg | 172.67.203.45 | 200 OK | 52 kB |
URL GET HTTP/3postsikei.top/static/fonts/holdmail.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/fonts/holdmail.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-cbb4"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8NYiq4LxtIGr4qBKHGHwfg9SHcNvUdHlqTMeMUwhM0CqISsTd9IBA2y8ItCGkDwozS9u0UXlSgsJdy8qJbIDyBGkdIx1jg%2BZSsuFGDVzvWujxAasrTaxofCnodZv%2FFYe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a1e79b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/images/footer-logo.png | 172.67.203.45 | 200 OK | 5.4 kB |
URL GET HTTP/3postsikei.top/static/images/footer-logo.png IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typePNG image data, 221 x 27, 8-bit/color RGBA, non-interlaced Hashccd62119eaa0e3697f60599487c51ad5 8e44d3123b4ce2005c76a2b8dcf7870058d2a82d 1cc43a97be92fddf0fe4244858f5337c80a8d350cd0afcd0c4d2004d3fded0ab
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/images/footer-logo.png HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/footer-sb.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/png
content-length: 5390
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: "653f5e14-150e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kgUaN%2B9g3t%2FmRXttKwsIZcLjOefC%2BhUwz6T90RxopUXy8slajFWgAzzmRq2GlPLjO9EZVZqxDxGDvJ6XPiTFCFFeBNGxnLtstW%2F48icW1FY%2Bi0JvIjW2cWiPE1ZPrs%2FV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90bbfe7b50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/css/footer.css | 172.67.203.45 | 200 OK | 2.9 kB |
URL GET HTTP/3postsikei.top/static/css/footer.css IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeASCII text, with very long lines (2924), with no line terminators Hash8f712712b0de29097c944acffb88091c de7c34ad57e913b27cefb63c472ca27d02ae5df2 173e627d22f2d55b5d8e377edf12bc26f078028c91efd78365e5ae80f59da2d1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/css/footer.css HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: text/css
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-b60"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BFsdUqnLCq1DCig%2BAeJhQpXXEd%2BLNEYpDcb7gSrrlRa1LLoQrqH52NsccYnybqh7HFLU4RJvuW6ucb9A34qgnuU6Hg24C%2F%2BR86MDFHzGzDyAX5ZfQkY5Iqd9DJmfporX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8fe8a24b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/jquery-3.5.1.js | 172.67.203.45 | 200 OK | 90 kB |
URL GET HTTP/3postsikei.top/static/js/jquery-3.5.1.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeJavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators Hash9ac39dc31635a363e377eda0f6fbe03f 29fa5ad995e9ec866ece1d3d0b698fc556580eee 9a2723c21fb1b7dff0e2aa5dc6be24a9670220a17ae21f70fdbc602d1f8acd38
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/jquery-3.5.1.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:12 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-15d84"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0xH8j55cYOuMABhsj%2BOy8x%2FIKymdiaQCgNSAgvM9dxyzLzEu3uLCptUUJObKynB%2Fvm3IuNO7tidvD9d6jZl%2F9kSd%2Bh8I2cPXAN909XYTQX4jH1t9rNw9sPx8aeqIzn5r"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feeaa3b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/idxs-icon.svg | 172.67.203.45 | 200 OK | 1.9 kB |
URL GET HTTP/3postsikei.top/static/picture/idxs-icon.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hash583ef52bd60e417556db5f135ccde412 95657d33aff9e4378ebe4d23588822e15decf037 5a5fd0aafb20d9cb95bf9e3e7110d8877c7bfe8a990e6b5d4ba59148da355bf2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/idxs-icon.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-754"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v3fiPRnG9ABAFGZ3SsjB5XCl742Q4vX7pHJBqhPvII5nEBCIrar%2FCkiJB0nOa%2FBq5gf5ZB0jqGLQdMvzu6QWcKiYW7v84JC57zr8dPaAvw7Uier%2Ffbvw4uTqGZIdo1j3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8fefabeb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/jquery.ui.js | 172.67.203.45 | 200 OK | 284 kB |
URL GET HTTP/3postsikei.top/static/js/jquery.ui.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeJavaScript source, ASCII text, with very long lines (18730) Size284 kB (284465 bytes) Hash4e7e5ae2451d2efbc3d960b63fa78dbb 1479f717ce0594dde5d020d885a988fcf98b106e 5b55ece99168ef9ba6d8557a4e759ad76f53da94eba1d8f331395ea321441bda
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/jquery.ui.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:12 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-45731"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ddeg7Cilr9yCzXEP1coaIfXfNq125VoZHY2M9zmQ8nnizpCzyYbp8nzEFTf4JCJcZa%2FsNXQsgJ4GC5%2F5vXzOjO297SbZWMjOMCFzdeqwgOM7DWEaAy8riMaPtvHoOdno"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8ff0ad2b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/images/utility_languages.png | 172.67.203.45 | 200 OK | 1.5 kB |
URL GET HTTP/3postsikei.top/static/images/utility_languages.png IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typePNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced Hash410956805d5701e87299cff412827e1a 5de9a390649dfc12e3d6df431140d499ad8abd67 6e727dbf5b0f4a3ec76762e445ad2c5cb750f7de41afb8b0342f903124d09826
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/images/utility_languages.png HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/png
content-length: 1456
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: "653f5e14-5b0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3bMYRYRb7Pjpw9N9dZDicC%2FBbVmYqgSEuZqwTra23Btyr69DTfloJiz0yXAMZd0lGpuoZVXaIZXHDZBRxrV%2FyWsotBm5vlZ1lw%2F5Rhq2kyz2Wltnph3xSb7jYTy9jntJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa909de3bb50f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/images/loyalty.svg | 172.67.203.45 | 200 OK | 2.4 kB |
URL GET HTTP/3postsikei.top/static/images/loyalty.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hashc6abeba68f9f1fa28702dab2f96bb6b8 64791c82998f05e0803d64bf688b594297b965d8 ac8121048bf3dc65e8e60b5e14014077ce4c2198b4b7e2d7195a25828201e4d0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/images/loyalty.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:13 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-97d"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o2jsWggiVqVPIol3AzK0snd2oXXuMmIy6TdJceN%2BsQp1pAlyFvwdz%2B6pPMoJdlDUSLhjo6ScoGn0c9grSuxZ4g8sL7djBpddJMAkvczjvb36lXxzRd7BYSY7MO4muplj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa90a2e8fb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/css/tracking-cross-sell.css | 172.67.203.45 | 200 OK | 3.1 kB |
URL GET HTTP/3postsikei.top/static/css/tracking-cross-sell.css IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeASCII text, with very long lines (3072), with no line terminators Hash1748fdddbf9576848c632cc84284cb18 9375f807310e395cfb36a1a0d04df4ae78cfb397 504797b896dd4ddf1f976e9b4719bfcec92f5a897a44760c6dcf42fcc40812d3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/css/tracking-cross-sell.css HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: text/css
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-bec"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K5Ry4oETowmjKuLAvQoqk%2FLFoW%2FDDr4tpF7IW5j%2FpurBm7tWRvplT%2BFTjpzHwc2FdPFzlOhaMBtkveoH0GRLvDnxIfvJLa22Up3laRevYs%2F0x%2FC4yuhHPgEDbFEkTpAW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8fe9a44b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/logo_mobile.svg | 172.67.203.45 | 200 OK | 2.1 kB |
URL GET HTTP/3postsikei.top/static/picture/logo_mobile.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hashe2168d4dc7567ef926b7623237981a82 e316de76563718e76dca3496358cd6364e283f94 bea15c662f2670c57110879e989f6312ce35fe454a22a7b46b2b63e908337784
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/logo_mobile.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-80c"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5wGQJA2TWE9TzQH1pJiNg2cU6C6u%2BE5znBZ0MdbJFM6Hr%2FyFqN6ZOsQRkKlncheTroBZB%2FM6aXtewNZU7K2D2sRshMaUfcwOvh%2Fs2jlQCjF81Jcnl5JtHsE3IM0c8qC%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feca6fb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/picture/find_zip.svg | 172.67.203.45 | 200 OK | 1.5 kB |
URL GET HTTP/3postsikei.top/static/picture/find_zip.svg IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeSVG Scalable Vector Graphics image Hash947f73db1be85b62c0a78fd947ea8f48 4b7cdd980fc356f9afc040ceaa1e4eff64eccdb6 65633c2f9e1f520fcb432d8f51929e8d0872964d876ff9d19e882af7eada0166
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/picture/find_zip.svg HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: image/svg+xml
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-5bf"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YZALSQzc36iTr%2BqA%2BFRX1oFDIjd0QJ2kF4CAw7HCrlTD9GAfZCcvR%2BI%2BmFW4a%2FUqKjKsnv%2BoZ5VmYkagf4p%2BF8GrQY8bS7luBZy9TpYmITgTCDmARKr9QvzDdgbnQFLG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8feda91b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/static/js/data.js | 172.67.203.45 | 200 OK | 2.3 kB |
URL GET HTTP/3postsikei.top/static/js/data.js IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeASCII text, with very long lines (2588), with no line terminators Hash6692d5ea7a27e811825a9159bfaa0210 cc2a3758f56e64554561107df0fbc9765f9ae76a d1147d04efad54c59c37c66620f4aa33ac1f82665f011b8836ba96bb0ea479be
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /static/js/data.js HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:11 GMT
content-type: application/javascript
last-modified: Mon, 30 Oct 2023 07:41:08 GMT
etag: W/"653f5e14-924"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B2K4yn4eSgYIfo6P2n7nNlnR3R%2FS89oaojE6jvjxmvx%2BBjoGAe4wfWXZ2mv%2BDsOC9as6kl%2BZlmwRzC24qbEMtoUw5D1WnHa5SVgiTUuRx1xDrJa%2F%2BoZTig0JpTVuZ8W6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 878fa8ff1adcb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| postsikei.top/ResourceConfig/urlConfig.json | 172.67.203.45 | 200 OK | 261 B |
URL GET HTTP/3postsikei.top/ResourceConfig/urlConfig.json IP172.67.203.45:443
CertificateIssuerGoogle Trust Services LLC Subjectpostsikei.top Fingerprint6D:69:2D:9B:D5:A7:EA:40:6E:50:1B:8B:BA:30:0B:15:D9:EB:70:26 ValiditySun, 21 Apr 2024 08:19:18 GMT - Sat, 20 Jul 2024 08:19:17 GMT
File typeASCII text, with very long lines (334), with no line terminators Hashbc86d2b53859956e1b9663d2a87a26a6 b3b54a672948bdc899d4d8104edbbbc55f4b856b b47b16ca8a482437f55be33e4c02cf30818baf1f30ffb5a170cad8673bd68294
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - US Postal Service |
GET /ResourceConfig/urlConfig.json HTTP/1.1
Host: postsikei.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://postsikei.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 23 Apr 2024 17:44:09 GMT
content-type: application/json
last-modified: Mon, 30 Oct 2023 07:41:07 GMT
etag: W/"653f5e13-105"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nu5Pvco8GGV7SxvfyJtpQnPPaj6e9OFztQ2M1s7yhpSC%2BnmvfOaMi3kVuaQaZY5M4jVZqfBhlPsf3Anr0hbXaf6RDBVwWYF1yxkDVKOg8ZShcC81guKprotNn9QPoz79"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 878fa8ef8a2bb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
0.0.0.0