| latestuploads.net/ |  104.21.3.126 | | 234 B |
IP104.21.3.126:0
File typeHTML document, ASCII text Hashf67c5dd77b127144c96eda1a89307e01 d4055a2ce9aa8a69fbf3787bb8bb621db41c293a ce3d1a6b9e9867d576f5b6cb617a6917ea42aaed032372a05b37afa648c425fe
GET / HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 19 Apr 2024 10:35:36 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://latestuploads.net/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iBryUN60vhrXHFlGaFXfg9rQ2RpOKjUazHE8UbIBtIoDHjPFTOJ439nV03N9Ul3l8V%2B9eIbSY62%2BXjXFK6EG1SRIjDYhhdqYu5CACnPNkPfTPlopUvvXz0H5r7RdGmRY%2F45fzA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 876c3fb06b85b50f-OSL
alt-svc: h2=":443"; ma=60
|
|
| latestuploads.net/en/ca/pay/img/AmEx.png | 104.21.3.126 | 200 OK | 1.3 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/img/AmEx.png IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typePNG image data, 76 x 48, 8-bit/color RGBA, non-interlaced Hash801b445314b9ff68a391c117d99619ed 7fa0bdd998a1edae990a6797cc023a304f05088d be9293395bb536020f4052e431a51639c3c9256ddb3e16f2820f0ad90d43fb9e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/img/AmEx.png HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: image/png
content-length: 1261
last-modified: Sat, 10 Apr 2021 23:41:44 GMT
cache-control: public, max-age=10368000
expires: Sat, 17 Aug 2024 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PTmPCOakGcrmwUDvfPrLkyNwx05WQCH0eeQVcMc6g%2FLHk78U49t62rI9E5%2BespKDyi06oPEH9vQlmpPA4lHb8kYDn6RP3SY1vw3dXa5uDrZbykKpFNBTrXmi8ya4hUZlDJdexQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf9a1a56a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/img/MasterCard.png | 104.21.3.126 | 200 OK | 2.1 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/img/MasterCard.png IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typePNG image data, 76 x 48, 8-bit/color RGBA, non-interlaced Hashb2702b4b6944f05e00e7a9065c9d071b a40d684e4e7e4cb085c37bd942874a3d60f719b5 8c4f22dc313ee84b9c84d4295b3593584159ab23c8a1f095b366aff8ca05f196
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/img/MasterCard.png HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: image/png
content-length: 2077
last-modified: Sat, 10 Apr 2021 23:41:38 GMT
cache-control: public, max-age=10368000
expires: Sat, 17 Aug 2024 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RxXQPTKlXfluEzwKX5CqtAHNnpHY09eCE6vzoYcud8Kv8t%2FcUcn9LT4TOT07nKcHoUUN8hiAWBkGKaHe62SFlkWu7HErjQQcxGS%2FVykhBuC0PaARIw6hNMzWSA2lGULtr7x3kA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf8a1756a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/img/CVV_icon.png | 104.21.3.126 | 200 OK | 4.6 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/img/CVV_icon.png IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typePNG image data, 125 x 90, 8-bit/color RGBA, non-interlaced Hash6c1a7798f28815cbb8c4c8918e36080a c475698985de9dbd65b56f389dce8eac58b4b000 107c0d3bba74e80c13517241c8c0dc093459f0c56a7f998eb53feaa0aa811200
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/img/CVV_icon.png HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: image/png
content-length: 4637
last-modified: Sat, 10 Apr 2021 23:49:52 GMT
cache-control: public, max-age=10368000
expires: Sat, 17 Aug 2024 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W7z4Qf2sW7jUBAMomtddJAPDEQ6rlBZUNvxmC3hiyrchEngOy%2FvF98wsVjbxgLjCCu0ru1VQoUf9mhHFRUVo553zCo2gipCudI7v9B5eIkWDPSU6ApsEqLpC9K5dOZuihk%2F0qA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf9a1d56a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/remove_screen_capture.png | 104.21.3.126 | 200 OK | 857 B |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/remove_screen_capture.png IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typePNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced Hashe4387ea5cc65d51d08a60765f46cbbcb f8314def36b28e99c28cda0f4369e4786bf18ca4 37f7e4cae3c3a409193078169c5731a142552e04ca3bbb19c85e87432ce58afb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/remove_screen_capture.png HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: image/png
content-length: 857
last-modified: Thu, 08 Apr 2021 23:06:14 GMT
cache-control: public, max-age=10368000
expires: Sat, 17 Aug 2024 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dKTdgl7TQM1Lqra%2FxqN4%2FXDhW8jHd%2BjP6tVvv%2Fn835fIwun3dwNMm0MDUUIYyEAwkFko79ycU33pPh0bbtFq4d5m%2B33AXMOskjSUbu8IEkDlc54MomJIdflmYVCVbric6KasLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf9a2156a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/img/VISA.png | 104.21.3.126 | 200 OK | 2.6 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/img/VISA.png IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typePNG image data, 76 x 48, 8-bit/color RGBA, non-interlaced Hash725caa991a29101f5da78da2fc1e1e63 cf4f10dfd71289c43273496120b79ef01a437d19 ef844111dee838dc5c8d388a96108379b2c97ced776fc95b2fa32b28f7ef6bde
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/img/VISA.png HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: image/png
content-length: 2600
last-modified: Sat, 10 Apr 2021 23:41:32 GMT
cache-control: public, max-age=10368000
expires: Sat, 17 Aug 2024 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lzKPii4ZnHzlNJFi14cH1nhmK37gXOptw%2FFgY0hpGc3ZM7RuYmcY2U%2F8dbrYUmSEmT1AuUFiZt5v5BrB%2BEVx4p%2FUb7YbmRdqsGGOSanrxctyvujKK1gp%2F8Fch71kua8RVz%2FZuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf8a1356a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/building_preview.gif | 104.21.3.126 | 200 OK | 12 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/building_preview.gif IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeGIF image data, version 89a, 113 x 108 Hash3c3ba37130de5fe15faf97c18908283e c15b49cb09745a9939315132e18f2e40fa2ccf22 9096646da2177d5db92f79352509450582a376913bb5387557c1efd28d0c377b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/building_preview.gif HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: image/gif
content-length: 12336
last-modified: Thu, 08 Apr 2021 23:06:14 GMT
cache-control: public, max-age=10368000
expires: Sat, 17 Aug 2024 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3%2FUdcRgjRGsjhAUDKOH9sRvPZGP5NnjMDvqEIR%2FNauDZoNtmI2pfXSNktucGGa0M6ECHXIY0uCe5kaFbtRetk0USA0N1Vhj2ssgAmqmBx13DPHPQ4wMEFuYbEC6%2FcpO0v04%2FvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf9a2656a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/ | 104.21.3.126 | 200 OK | 51 kB |
URL User Request GET HTTP/2latestuploads.net/en/ca/pay/ IP104.21.3.126:443
CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (3772) Hash42f114e06e4067f2b70c0443dcce0ce6 0741e8089d0dd950672d5693471c2c64c8253888 a3f406afe8f566ad7b69d415869331c61a02f1f7e9b521cdbf3288d10ddcd320
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Canada Post |
GET /en/ca/pay/ HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2; path=/
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bm6BjHOtBR8D999zXOcnW2fnUGuQ5h7DpmqtexxOrmMT9ZJh%2Box9%2BIA5fchGgb2qTFlSTiAbzifJVE62I9oWc7jK2t0l2GgFBbRutklbd8w4uZgolMoTjEbioBDhN7v7Jqi6ZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3f9decf35693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,500,700 |  142.250.74.106 | 200 OK | 1.2 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,500,700 IP142.250.74.106:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typegzip compressed data, max compression Hashb421b4d0af0695583eb1280fac05e997 327fb120c162c78707e271f3a95f574a63c9ea7c 1a0cd5900776ce34de51e69a0780676f4c5714c985042b37b084d1cf79bea6a8
GET /css?family=Roboto:300,400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 19 Apr 2024 10:35:39 GMT
date: Fri, 19 Apr 2024 10:35:39 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v27/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 57 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v27/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 57116, version 1.0 Hash0df839703cae7648ea76e7525842ec83 1220ca1a9f7fb2f27f0249fdcc31e29636e48e9b 1287b4c6427119cabf899a5ea898f81e831a2742614813a3302f671690b399c2
GET /s/roboto/v27/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://latestuploads.net
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 57116
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:46:52 GMT
expires: Fri, 18 Apr 2025 02:46:52 GMT
cache-control: public, max-age=31536000
age: 114527
last-modified: Tue, 21 Sep 2021 23:13:54 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| latestuploads.net/en/ca/pay/index_files/donald.css | 104.21.3.126 | 200 OK | 63 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/donald.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeASCII text, with CRLF line terminators Hash3ff1e6b658b884049648ca4fd6a76f0a c2ef7458391e62f3041887c6da4eeadd70e1f931 8fcefb89f5ce25854e0ff7bd02b49027e4c2d174f35a983b7a35132eb5722a72
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/donald.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:08 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5CSKXPURg28O6ISmhqoz0nHAN9RLOGGtKQnU9cR0R%2BktADHh2BWRlPii1H%2BgW0K%2FzrcQdLMSfHw4gNXiFX3lOIJIqMXtNQZAAIyJr0Ro%2BBM7AQ%2F0sKyzNEeIPLToHYPy8EeVSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf89f856a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15732, version 1.0 Hash80fe119e5efa3911b9d61b265f723b3d 34f751a1b1a0c1c0b5264b99f490e689db939657 33530b007071281a97e79baab13ddf7cc4b9de942ebd3e212224857335f7cb97
GET /s/roboto/v27/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://latestuploads.net
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15732
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:51:44 GMT
expires: Fri, 18 Apr 2025 02:51:44 GMT
cache-control: public, max-age=31536000
age: 114235
last-modified: Mon, 05 Apr 2021 21:10:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v27/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15828, version 1.0 Hashbf28241e67511184c14dbd0ef7d39f91 c706e0a4122ab727645b744c21667390e8898a4d 0eaeadb58e6995ba85eccb6198aaef77eeb1d4b66699e4e1f3fc10eb6adfcdb9
GET /s/roboto/v27/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://latestuploads.net
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15828
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 17:35:18 GMT
expires: Fri, 18 Apr 2025 17:35:18 GMT
cache-control: public, max-age=31536000
age: 61221
last-modified: Mon, 05 Apr 2021 21:10:46 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.canadapost.ca/cpc/assets/cpc/img/icons/search.svg |  104.110.20.42 | 301 Moved Permanently | 0 B |
URL GET HTTP/1.1www.canadapost.ca/cpc/assets/cpc/img/icons/search.svg IP104.110.20.42:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerDigiCert Inc Subjectwww.canadapost.ca FingerprintE3:FC:14:7A:D5:BD:99:E6:02:72:3A:7C:D4:11:C2:B0:56:C6:E0:A5 ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cpc/assets/cpc/img/icons/search.svg HTTP/1.1
Host: www.canadapost.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/search.svg
Date: Fri, 19 Apr 2024 10:35:39 GMT
Connection: keep-alive
strict-transport-security: max-age=31536000; includeSubdomains; preload
|
|
| latestuploads.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js | 104.21.3.126 | 200 OK | 3.9 kB |
URL GET HTTP/3latestuploads.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (12331) Hash88a769d2fe35899fd45a332a0a032cc0 514c6c1d8475d17e412849a4c90159517d0fa10a ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/pixel(1).html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: application/javascript
last-modified: Tue, 16 Apr 2024 15:45:04 GMT
etag: W/"661e9d00-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HtZ0I7U0kgK1vyT8MQT%2FcxEAt93ZYusrXgZ9PnRTjWbzn7%2FiQmfsjnfNai4ple2SjPlzqR7mcVA%2FLPEnijBBgcyD%2BudZmmfa3QrKYHOlhawmbMAaai7ZWPwYZFQp8MvB79FEcw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876c3fc12b9d56a2-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sun, 21 Apr 2024 10:35:39 GMT
cache-control: max-age=172800, public
content-encoding: gzip
|
|
| latestuploads.net/en/ca/pay/index_files/jquery-ui.min.css | 104.21.3.126 | 200 OK | 12 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/jquery-ui.min.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeASCII text, with very long lines (29137) Hash0b5729a931d113be34b6fac13bcf5b29 88ba90d2d2944315afd28a706ee5715ed980c634 ac1c8f94750b39b12327a5d0c56fdf946dabfb6d91e5d2a202879ff9a5d67e29
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/jquery-ui.min.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:08 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xbSurW%2FLW2WRgvMrBm3rELnrJsTuS49%2BnQb3vKT1KAJruUkLvmYbxvhy6S%2FcXJniojOAvPATQiw44opctU95Fo%2BRe9AawRQUogm3YhLBubGHxYBaTbC32lDb4bawUb%2Bs9epW%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf79e756a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/foundation.min.css | 104.21.3.126 | 200 OK | 23 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/foundation.min.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashf8ae2a1092962bcd8e91ea09ae3bf524 77321c6bfb9c1d00fce3f4c8bf97f89bf0abf0c6 83860ecb8f88d1db766bf42b0428c78d80580dd42dc99100c216dbe65293c48c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/foundation.min.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:06 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lEpvPLi0pvo0XcT4Sks7GXip%2B2jDxab1A4%2BxcXCXCMLylmRB2Ljnhk0hjxr36PQprU%2BpnKJ5tYUbaqR3Ux3eo2zadpufvSqPJx3utWaAaMVi79kPoJPvLmvo%2Be4AXtA2AWmnwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf79e556a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/tony.css | 104.21.3.126 | 200 OK | 7.2 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/tony.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeASCII text, with very long lines (546), with CRLF line terminators Hash4502100ed8616d59fda6f9a9195d1924 b839422347e4fda8f5c7bad094e2858d8f1c130b 6454c4997b9458617c695003eb4748e7a43150dcf62dc605ad5c1a09b8d196c5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/tony.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:08 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3zH9sdWyla7jq7wony5hdyRyAJUOlYnERVw%2F%2BRTFtvvm08LhgjRU%2FQHr73YIqAhcNWT7dP%2BwGv6bO%2B%2Bqi06YBrN80bw6E2u9teizG1TXENWx8TJwMUoAWMU0Ztwt4veNjIYnXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf79f256a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/css | 104.21.3.126 | 200 OK | 50 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
Hash7a0d22ea5c3ac26e9936e27ceba627fc e77f387e2d31a2cb61a993593cb1f56f2c8d9492 610d47513c7012062f6a591cebe9c4cd0c1296acd9b8d2124f31d6d32b24f5f0
GET /en/ca/pay/index_files/css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
last-modified: Thu, 08 Apr 2021 23:06:08 GMT
cache-control: max-age=2592000
expires: Sun, 19 May 2024 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XIihW3%2Bn3vCbHkJWd5Zh9fLr%2BpX0n7N9G%2FRp9LZb9Ie6xQiJUsGSYc7v1T5CIzw4tAbe3xMJM1TuPWdK8Ppp2E8AtQJPCaA%2BtsbxufX89w8JC0G3d1JG4n1zLnRvGhrnUpeJBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf8a0356a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/global-alert/cancel.svg | 104.110.20.42 | 200 OK | 377 B |
URL GET HTTP/1.1www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/global-alert/cancel.svg IP104.110.20.42:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerDigiCert Inc Subjectwww.canadapost.ca FingerprintE3:FC:14:7A:D5:BD:99:E6:02:72:3A:7C:D4:11:C2:B0:56:C6:E0:A5 ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash3948f6860d7550e3d88531e44be227c0 54b6ecf506f3fa6183931604e76ac410f6ae210b 8608c8e2dcc2a14b5b21503077bf54d62a215a013a4eb7b80b09099d201a445e
GET /cpc/assets/cpc/img/icons/global-alert/cancel.svg HTTP/1.1
Host: www.canadapost-postescanada.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://latestuploads.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/svg+xml
ETag: "5a6b5666-331"
Last-Modified: Fri, 26 Jan 2018 16:25:10 GMT
p3p: CP="NON CUR OTPi OUR NOR UNI"
content-security-policy-report-only: object-src 'none'; connect-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.cpggpc.ca https://www.google-analytics.com https://siteintercept.qualtrics.com https://www.facebook.com https://sslstats.canadapost.ca https://*.wistia.com https://dpm.demdex.net https://csi.gstatic.com https://adservice.google.com https://*.googlesyndication.com https://*.g.doubleclick.net https://maps.googleapis.com https://vmss.boldchat.com https://www.linkedin.com https://canadapost.tt.omtrdc.net https://services.postcodeanywhere.co.uk https://embedwistia-a.akamaihd.net https://cdn.cookielaw.org https://geolocation.onetrust.com; font-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://fonts.gstatic.com https://*.arcgis.com; form-action 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca https://*.epost.ca https://www.facebook.com https://google.com; frame-ancestors 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.cpggpc.ca https://www.adobetag.com https://assets.adobedtm.com https://siteintercept.qualtrics.com https://zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com https://connect.facebook.net https://snap.licdn.com https://z.moatads.com https://static.ads-twitter.com https://www.googletagmanager.com https://www.google.com https://www.googletagservices.com https://*.google-analytics.com https://*.googleadservices.com https://www.gstatic.com https://*.googlesyndication.com https://adservice.google.com https://adservice.google.ca https://maps.googleapis.com https://cdn.ampproject.org https://*.doubleclick.net https://*.twitter.com https://cdn.syndication.twimg.com https://dpm.demdex.net https://*.wistia.com https://*.frontlinesvc.com https://*.arcgis.com https://www.linkedin.com https://vmss.boldchat.com https://sb.scorecardresearch.com https://www.rnengage.com https://sjs.bizographics.com https://www.instagram.com https://secure.adnxs.com https://app.five9.com https://cdn.cookielaw.org; style-src 'self' 'unsafe-inline' https://*.frontlinesvc.com https://fonts.googleapis.com https://translate.googleapis.com https://*.twitter.com https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.arcgis.com https://*.arcgisonline.com https://app.five9.com; report-uri https://www.canadapost-postescanada.ca/cwc/components/rs/csp-reports;
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
Cache-Control: max-age=86400, private
Expires: Thu, 07 Sep 2023 13:32:21 GMT
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: master-only
Content-Security-Policy: frame-ancestors 'self'
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubdomains; preload
Content-Encoding: gzip
Content-Length: 377
Date: Fri, 19 Apr 2024 10:35:39 GMT
Connection: keep-alive
Vary: Accept-Encoding
|
|
| www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/global-alert/alert.svg | 104.110.20.42 | 200 OK | 455 B |
URL GET HTTP/1.1www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/global-alert/alert.svg IP104.110.20.42:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerDigiCert Inc Subjectwww.canadapost.ca FingerprintE3:FC:14:7A:D5:BD:99:E6:02:72:3A:7C:D4:11:C2:B0:56:C6:E0:A5 ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash1e9710967bed0a1e09621c7aa4f3dcc5 753bd41b31cb907179a42b3829c9a0056135fa52 e62e54914dbabecaaaa6b6ba4b605ec384be240d485555452e7e094a3c5d9b7c
GET /cpc/assets/cpc/img/icons/global-alert/alert.svg HTTP/1.1
Host: www.canadapost-postescanada.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://latestuploads.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/svg+xml
ETag: "5a6b5666-3ef"
Last-Modified: Fri, 26 Jan 2018 16:25:10 GMT
p3p: CP="NON CUR OTPi OUR NOR UNI"
content-security-policy-report-only: object-src 'none'; connect-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.cpggpc.ca https://www.google-analytics.com https://siteintercept.qualtrics.com https://www.facebook.com https://sslstats.canadapost.ca https://*.wistia.com https://dpm.demdex.net https://csi.gstatic.com https://adservice.google.com https://*.googlesyndication.com https://*.g.doubleclick.net https://maps.googleapis.com https://vmss.boldchat.com https://www.linkedin.com https://canadapost.tt.omtrdc.net https://services.postcodeanywhere.co.uk https://embedwistia-a.akamaihd.net https://cdn.cookielaw.org https://geolocation.onetrust.com; font-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://fonts.gstatic.com https://*.arcgis.com; form-action 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca https://*.epost.ca https://www.facebook.com https://google.com; frame-ancestors 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.cpggpc.ca https://www.adobetag.com https://assets.adobedtm.com https://siteintercept.qualtrics.com https://zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com https://connect.facebook.net https://snap.licdn.com https://z.moatads.com https://static.ads-twitter.com https://www.googletagmanager.com https://www.google.com https://www.googletagservices.com https://*.google-analytics.com https://*.googleadservices.com https://www.gstatic.com https://*.googlesyndication.com https://adservice.google.com https://adservice.google.ca https://maps.googleapis.com https://cdn.ampproject.org https://*.doubleclick.net https://*.twitter.com https://cdn.syndication.twimg.com https://dpm.demdex.net https://*.wistia.com https://*.frontlinesvc.com https://*.arcgis.com https://www.linkedin.com https://vmss.boldchat.com https://sb.scorecardresearch.com https://www.rnengage.com https://sjs.bizographics.com https://www.instagram.com https://secure.adnxs.com https://app.five9.com https://cdn.cookielaw.org; style-src 'self' 'unsafe-inline' https://*.frontlinesvc.com https://fonts.googleapis.com https://translate.googleapis.com https://*.twitter.com https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.arcgis.com https://*.arcgisonline.com https://app.five9.com; report-uri https://www.canadapost-postescanada.ca/cwc/components/rs/csp-reports;
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
Cache-Control: max-age=86400, private
Expires: Fri, 10 Nov 2023 14:33:46 GMT
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: master-only
Content-Security-Policy: frame-ancestors 'self'
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubdomains; preload
Content-Encoding: gzip
Content-Length: 455
Date: Fri, 19 Apr 2024 10:35:39 GMT
Connection: keep-alive
Vary: Accept-Encoding
|
|
| www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/toolbar-cg/feedback.svg | 104.110.20.42 | 200 OK | 382 B |
URL GET HTTP/1.1www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/toolbar-cg/feedback.svg IP104.110.20.42:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerDigiCert Inc Subjectwww.canadapost.ca FingerprintE3:FC:14:7A:D5:BD:99:E6:02:72:3A:7C:D4:11:C2:B0:56:C6:E0:A5 ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hasha56b96fb3ea0b8699b84605f3a502963 7b4a96e43604b02571eeed372aa4febf6ae8d756 acf56f4833ccd8789f66864deae46f9a6efb8625f15b9e5996a00e5634f094e1
GET /cpc/assets/cpc/img/icons/toolbar-cg/feedback.svg HTTP/1.1
Host: www.canadapost-postescanada.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://latestuploads.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/svg+xml
ETag: "5a78a638-2d4"
Last-Modified: Mon, 05 Feb 2018 18:45:12 GMT
p3p: CP="NON CUR OTPi OUR NOR UNI"
content-security-policy-report-only: object-src 'none'; connect-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.cpggpc.ca https://www.google-analytics.com https://siteintercept.qualtrics.com https://www.facebook.com https://sslstats.canadapost.ca https://*.wistia.com https://dpm.demdex.net https://csi.gstatic.com https://adservice.google.com https://*.googlesyndication.com https://*.g.doubleclick.net https://maps.googleapis.com https://vmss.boldchat.com https://www.linkedin.com https://canadapost.tt.omtrdc.net https://services.postcodeanywhere.co.uk https://embedwistia-a.akamaihd.net https://cdn.cookielaw.org https://geolocation.onetrust.com; font-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://fonts.gstatic.com https://*.arcgis.com; form-action 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca https://*.epost.ca https://www.facebook.com https://google.com; frame-ancestors 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.cpggpc.ca https://www.adobetag.com https://assets.adobedtm.com https://siteintercept.qualtrics.com https://zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com https://connect.facebook.net https://snap.licdn.com https://z.moatads.com https://static.ads-twitter.com https://www.googletagmanager.com https://www.google.com https://www.googletagservices.com https://*.google-analytics.com https://*.googleadservices.com https://www.gstatic.com https://*.googlesyndication.com https://adservice.google.com https://adservice.google.ca https://maps.googleapis.com https://cdn.ampproject.org https://*.doubleclick.net https://*.twitter.com https://cdn.syndication.twimg.com https://dpm.demdex.net https://*.wistia.com https://*.frontlinesvc.com https://*.arcgis.com https://www.linkedin.com https://vmss.boldchat.com https://sb.scorecardresearch.com https://www.rnengage.com https://sjs.bizographics.com https://www.instagram.com https://secure.adnxs.com https://app.five9.com https://cdn.cookielaw.org; style-src 'self' 'unsafe-inline' https://*.frontlinesvc.com https://fonts.googleapis.com https://translate.googleapis.com https://*.twitter.com https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.arcgis.com https://*.arcgisonline.com https://app.five9.com; report-uri https://www.canadapost-postescanada.ca/cwc/components/rs/csp-reports;
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
Cache-Control: max-age=86400, private
Expires: Thu, 21 Mar 2024 06:34:41 GMT
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: master-only
Content-Security-Policy: frame-ancestors 'self'
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubdomains; preload
Content-Encoding: gzip
Content-Length: 382
Date: Fri, 19 Apr 2024 10:35:39 GMT
Connection: keep-alive
Vary: Accept-Encoding
|
|
| latestuploads.net/en/ca/pay/index_files/vendor.866d3d2023e5a297a1b9.js.download | 104.21.3.126 | 200 OK | 86 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/vendor.866d3d2023e5a297a1b9.js.download IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
Hash866d3d2023e5a297a1b9b8937819fd2e 48fdf04f7281c77ada5cdca54e0e1e19a2728b9c 8b1c3ea45f907204bc8b4aa2865e5bf51e1d99ce1cf777de76705e9cf4dbef49
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/vendor.866d3d2023e5a297a1b9.js.download HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:14 GMT
cache-control: max-age=31536000
expires: Sat, 19 Apr 2025 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bl66%2FPb5YRxNaem3KlbXrGzbIHA8cH4U2rdqpXAsSmyfrGyn9sfFniirKo34HKJZSKghGTwrynIzW%2FBDXUtkVaEeCiMVgKHKwNpgj%2Fysvru018vXgSkvnT7zfWhc7S6bXHZcGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc30dc556a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/search.svg | 104.110.20.42 | 200 OK | 218 B |
URL GET HTTP/1.1www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/search.svg IP104.110.20.42:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerDigiCert Inc Subjectwww.canadapost.ca FingerprintE3:FC:14:7A:D5:BD:99:E6:02:72:3A:7C:D4:11:C2:B0:56:C6:E0:A5 ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash251094ec25cfdd8a820ffd758d2a281a fa37e27aae09872b1b719eeec3313b09e711453e 3228f4cd6fd28ef733c3d98079f3478b1c4cb3338dcd7b95658ba731b817e113
GET /cpc/assets/cpc/img/icons/search.svg HTTP/1.1
Host: www.canadapost-postescanada.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://latestuploads.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/svg+xml
ETag: "5a78a621-140"
Last-Modified: Mon, 05 Feb 2018 18:44:49 GMT
p3p: CP="NON CUR OTPi OUR NOR UNI"
content-security-policy-report-only: object-src 'none'; connect-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.cpggpc.ca https://www.google-analytics.com https://siteintercept.qualtrics.com https://www.facebook.com https://sslstats.canadapost.ca https://*.wistia.com https://dpm.demdex.net https://csi.gstatic.com https://adservice.google.com https://*.googlesyndication.com https://*.g.doubleclick.net https://maps.googleapis.com https://vmss.boldchat.com https://www.linkedin.com https://canadapost.tt.omtrdc.net https://services.postcodeanywhere.co.uk https://embedwistia-a.akamaihd.net https://cdn.cookielaw.org https://geolocation.onetrust.com; font-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://fonts.gstatic.com https://*.arcgis.com; form-action 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca https://*.epost.ca https://www.facebook.com https://google.com; frame-ancestors 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.cpggpc.ca https://www.adobetag.com https://assets.adobedtm.com https://siteintercept.qualtrics.com https://zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com https://connect.facebook.net https://snap.licdn.com https://z.moatads.com https://static.ads-twitter.com https://www.googletagmanager.com https://www.google.com https://www.googletagservices.com https://*.google-analytics.com https://*.googleadservices.com https://www.gstatic.com https://*.googlesyndication.com https://adservice.google.com https://adservice.google.ca https://maps.googleapis.com https://cdn.ampproject.org https://*.doubleclick.net https://*.twitter.com https://cdn.syndication.twimg.com https://dpm.demdex.net https://*.wistia.com https://*.frontlinesvc.com https://*.arcgis.com https://www.linkedin.com https://vmss.boldchat.com https://sb.scorecardresearch.com https://www.rnengage.com https://sjs.bizographics.com https://www.instagram.com https://secure.adnxs.com https://app.five9.com https://cdn.cookielaw.org; style-src 'self' 'unsafe-inline' https://*.frontlinesvc.com https://fonts.googleapis.com https://translate.googleapis.com https://*.twitter.com https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.arcgis.com https://*.arcgisonline.com https://app.five9.com; report-uri https://www.canadapost-postescanada.ca/cwc/components/rs/csp-reports;
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
Cache-Control: max-age=86400, private
Expires: Thu, 04 Jan 2024 23:57:57 GMT
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: master-only
Content-Security-Policy: frame-ancestors 'self'
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubdomains; preload
Content-Encoding: gzip
Content-Length: 218
Date: Fri, 19 Apr 2024 10:35:40 GMT
Connection: keep-alive
Vary: Accept-Encoding
|
|
| www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/icon-lock.svg | 104.110.20.42 | 200 OK | 432 B |
URL GET HTTP/1.1www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/icon-lock.svg IP104.110.20.42:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerDigiCert Inc Subjectwww.canadapost.ca FingerprintE3:FC:14:7A:D5:BD:99:E6:02:72:3A:7C:D4:11:C2:B0:56:C6:E0:A5 ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashc146562facedf9c2843a88aecb645c76 519710e01a84f9bb01e9d80c586b1fa351119ff2 abf1f63a2886e67a68c108a433a64215a46d85737b37e6ad9b1cae1e38318917
GET /cpc/assets/cpc/img/icons/icon-lock.svg HTTP/1.1
Host: www.canadapost-postescanada.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://latestuploads.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/svg+xml
ETag: "5a78a622-38b"
Last-Modified: Mon, 05 Feb 2018 18:44:50 GMT
p3p: CP="NON CUR OTPi OUR NOR UNI"
content-security-policy-report-only: object-src 'none'; connect-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.cpggpc.ca https://www.google-analytics.com https://siteintercept.qualtrics.com https://www.facebook.com https://sslstats.canadapost.ca https://*.wistia.com https://dpm.demdex.net https://csi.gstatic.com https://adservice.google.com https://*.googlesyndication.com https://*.g.doubleclick.net https://maps.googleapis.com https://vmss.boldchat.com https://www.linkedin.com https://canadapost.tt.omtrdc.net https://services.postcodeanywhere.co.uk https://embedwistia-a.akamaihd.net https://cdn.cookielaw.org https://geolocation.onetrust.com; font-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://fonts.gstatic.com https://*.arcgis.com; form-action 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca https://*.epost.ca https://www.facebook.com https://google.com; frame-ancestors 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.cpggpc.ca https://www.adobetag.com https://assets.adobedtm.com https://siteintercept.qualtrics.com https://zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com https://connect.facebook.net https://snap.licdn.com https://z.moatads.com https://static.ads-twitter.com https://www.googletagmanager.com https://www.google.com https://www.googletagservices.com https://*.google-analytics.com https://*.googleadservices.com https://www.gstatic.com https://*.googlesyndication.com https://adservice.google.com https://adservice.google.ca https://maps.googleapis.com https://cdn.ampproject.org https://*.doubleclick.net https://*.twitter.com https://cdn.syndication.twimg.com https://dpm.demdex.net https://*.wistia.com https://*.frontlinesvc.com https://*.arcgis.com https://www.linkedin.com https://vmss.boldchat.com https://sb.scorecardresearch.com https://www.rnengage.com https://sjs.bizographics.com https://www.instagram.com https://secure.adnxs.com https://app.five9.com https://cdn.cookielaw.org; style-src 'self' 'unsafe-inline' https://*.frontlinesvc.com https://fonts.googleapis.com https://translate.googleapis.com https://*.twitter.com https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.arcgis.com https://*.arcgisonline.com https://app.five9.com; report-uri https://www.canadapost-postescanada.ca/cwc/components/rs/csp-reports;
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
Cache-Control: max-age=86400, private
Expires: Thu, 14 Dec 2023 14:07:07 GMT
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: master-only
Content-Security-Policy: frame-ancestors 'self'
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubdomains; preload
Content-Encoding: gzip
Content-Length: 432
Date: Fri, 19 Apr 2024 10:35:40 GMT
Connection: keep-alive
Vary: Accept-Encoding
|
|
| www.googletagmanager.com/gtag/js?id=DC-9852050&l=dataLayer&cx=c | 142.250.74.40 | 200 OK | 72 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=DC-9852050&l=dataLayer&cx=c IP142.250.74.40:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hashdef5927f6eedd638d2fd5fd116959a34 1d1f224cf9af266541d1270694f060a210199f81 09fce7f61e6fe225fdb46da8ab571007f01904aa391dd1bbac479bdc692ed593
GET /gtag/js?id=DC-9852050&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 10:35:47 GMT
expires: Fri, 19 Apr 2024 10:35:47 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72525
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| latestuploads.net/en/ca/pay/index_files/app.js | 104.21.3.126 | 404 Not Found | 10 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/app.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hashec1c915da5931b4e1f2535fb3e7addd2 f5b67a6daecc1f4d69c5bb969ce5b6f2613a275d 751626de48aa4fa14310ece09a2abafd4dfec3503fcb4d85504d14db51b57357
GET /en/ca/pay/index_files/app.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:47 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VRcf3Nh%2FgSNmTEFV06FfMxFd0tLkw4izcfoBgyKuxX66NxFesiGRJNa1o3eLYYYp1jyb4avda4K7KTztsuXwgoLWjSHJwUBtrInO4YIHwVz08%2FZ5VO7PpYM7AWDKu8lVHy6sbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc26ccd56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.google.com/pagead/conversion_async.js | 142.250.74.164 | 200 OK | 18 kB |
URL GET HTTP/2www.google.com/pagead/conversion_async.js IP142.250.74.164:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCC:CC:99:46:65:6C:77:0B:C8:AA:AD:5E:58:B6:2D:19:B2:C7:0B:06 ValidityMon, 04 Mar 2024 07:19:07 GMT - Mon, 27 May 2024 07:19:06 GMT
File typeJavaScript source, ASCII text, with very long lines (2037) Hash36d18274b6e8c0c50252e25b57c396ea fbade01357c570d804889beff0eff90acd64d8ff 893cddabf1e1457a1500009781930db07bd50dbbe2e88d9cc594378e9cb3ac21
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Fri, 19 Apr 2024 10:35:50 GMT
expires: Fri, 19 Apr 2024 10:35:50 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 15615388052213112931
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 18266
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.canadapost-postescanada.ca/store-boutique/en | 104.110.20.42 | 307 Temporary Redirect | 136 B |
URL GET HTTP/1.1www.canadapost-postescanada.ca/store-boutique/en IP104.110.20.42:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerDigiCert Inc Subjectwww.canadapost.ca FingerprintE3:FC:14:7A:D5:BD:99:E6:02:72:3A:7C:D4:11:C2:B0:56:C6:E0:A5 ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashed10607782c0c178ac891c97e9aa1470 5ce456cdbdcbdaab83e380dd5dc4d7a4033eaa90 8fc58eab6a6eb86985c8b65a22e5816abedaf9e82470bc3ff93bffd2dd7e8a41
GET /store-boutique/en HTTP/1.1
Host: www.canadapost-postescanada.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Content-Length: 136
Content-Type: text/html
Location: https://store.canadapost-postescanada.ca/store-boutique/en
p3p: CP="NON CUR OTPi OUR NOR UNI"
content-security-policy-report-only: object-src 'none'; connect-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.cpggpc.ca https://www.google-analytics.com https://siteintercept.qualtrics.com https://www.facebook.com https://sslstats.canadapost.ca https://*.wistia.com https://dpm.demdex.net https://csi.gstatic.com https://adservice.google.com https://*.googlesyndication.com https://*.g.doubleclick.net https://maps.googleapis.com https://vmss.boldchat.com https://www.linkedin.com https://canadapost.tt.omtrdc.net https://services.postcodeanywhere.co.uk https://embedwistia-a.akamaihd.net https://cdn.cookielaw.org https://geolocation.onetrust.com; font-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://fonts.gstatic.com https://*.arcgis.com; form-action 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca https://*.epost.ca https://www.facebook.com https://google.com; frame-ancestors 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.cpggpc.ca https://www.adobetag.com https://assets.adobedtm.com https://siteintercept.qualtrics.com https://zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com https://connect.facebook.net https://snap.licdn.com https://z.moatads.com https://static.ads-twitter.com https://www.googletagmanager.com https://www.google.com https://www.googletagservices.com https://*.google-analytics.com https://*.googleadservices.com https://www.gstatic.com https://*.googlesyndication.com https://adservice.google.com https://adservice.google.ca https://maps.googleapis.com https://cdn.ampproject.org https://*.doubleclick.net https://*.twitter.com https://cdn.syndication.twimg.com https://dpm.demdex.net https://*.wistia.com https://*.frontlinesvc.com https://*.arcgis.com https://www.linkedin.com https://vmss.boldchat.com https://sb.scorecardresearch.com https://www.rnengage.com https://sjs.bizographics.com https://www.instagram.com https://secure.adnxs.com https://app.five9.com https://cdn.cookielaw.org; style-src 'self' 'unsafe-inline' https://*.frontlinesvc.com https://fonts.googleapis.com https://translate.googleapis.com https://*.twitter.com https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.arcgis.com https://*.arcgisonline.com https://app.five9.com; report-uri https://www.canadapost-postescanada.ca/cwc/components/rs/csp-reports;
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: master-only
Content-Security-Policy: frame-ancestors 'self'
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubdomains; preload
Date: Fri, 19 Apr 2024 10:35:51 GMT
Connection: keep-alive
|
|
| store.canadapost-postescanada.ca/store-boutique/en | 23.36.79.8 | 301 Moved Permanently | 0 B |
URL GET HTTP/2store.canadapost-postescanada.ca/store-boutique/en IP23.36.79.8:443 ASN#20940 Akamai International B.V.
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerLet's Encrypt Subjecttp3.kibocommerce.com Fingerprint0C:9F:4E:78:6D:15:FC:72:1E:E1:32:8B:F4:88:93:C3:51:E1:8E:E9 ValidityWed, 27 Mar 2024 16:26:26 GMT - Tue, 25 Jun 2024 16:26:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /store-boutique/en HTTP/1.1
Host: store.canadapost-postescanada.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
content-length: 0
location: /home
access-control-allow-origin: https://store.canadapost-postescanada.ca
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-vol-canonical-url: /home
x-vol-correlation: 6c543e60937341f38049ae67cab15900
expires: Fri, 19 Apr 2024 10:35:52 GMT
cache-control: max-age=0, no-cache
pragma: no-cache
date: Fri, 19 Apr 2024 10:35:52 GMT
set-cookie: sb-sf-at-prod-s=at=jhJDDIgsOE4ZYYa4NE0Fz1EieTVjotXrSJgHbQVX7wnd4ucgNAJq9J7qjVsyDI8Kizkf%2B4sFro8VsJYdZx5qVeo%2BScAZkI%2FWkob4WXiCFEhMlQ2KXbFA%2BFL0JB5cOOhAB0dECorsrnGj5%2FbiKpPQGwitEgi77DePO%2FyS4wwntFWdqE71Zov%2BN73%2BVG5nSwYgtE2R%2FD6WePxnWc8br9fB9yrZ87CipJ3BBNFa8zcwwyByvcCrN7E9mNBTiyVe3gKxegowrGu8VRSn%2BKcS6vX2tP%2FS0NvLyW6YARoKJ3YaXhWOK3yPD2AoAPI8f4LVo7Wq8pqdifZimJYR7bFPmkjJzw%3D%3D&dt=2024-04-19T10%3A35%3A52.1023720Z; path=/; httponly
sb-sf-at-prod=at=jhJDDIgsOE4ZYYa4NE0Fz1EieTVjotXrSJgHbQVX7wnd4ucgNAJq9J7qjVsyDI8Kizkf%2B4sFro8VsJYdZx5qVeo%2BScAZkI%2FWkob4WXiCFEhMlQ2KXbFA%2BFL0JB5cOOhAB0dECorsrnGj5%2FbiKpPQGwitEgi77DePO%2FyS4wwntFWdqE71Zov%2BN73%2BVG5nSwYgtE2R%2FD6WePxnWc8br9fB9yrZ87CipJ3BBNFa8zcwwyByvcCrN7E9mNBTiyVe3gKxegowrGu8VRSn%2BKcS6vX2tP%2FS0NvLyW6YARoKJ3YaXhWOK3yPD2AoAPI8f4LVo7Wq8pqdifZimJYR7bFPmkjJzw%3D%3D; expires=Tue, 19 Apr 2044 10:35:52 GMT; path=/; httponly
_mzvr=JiTiB3vjiU2Ci9QEPAQqjQ; expires=Sat, 19 Apr 2025 10:35:52 GMT; path=/; httponly
_mzvs=nn; path=/; httponly
_mzvt=o7aTdnNE-k2954SwKh18Yw; expires=Fri, 19 Apr 2024 11:05:52 GMT; path=/; httponly
_mzPc=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%3D%3D; path=/
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
|
|
| latestuploads.net/jfe/static/dist/c/jsApi.8da1775e8131fb08b25b.js | 104.21.3.126 | 404 Not Found | 20 kB |
URL GET HTTP/3latestuploads.net/jfe/static/dist/c/jsApi.8da1775e8131fb08b25b.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash1bd376436db6ffe2255900a9a99936d7 5daa067ecb6d97b2e8de546927c647fc2c2bfb0f aad4e90082e2e6ee618da97abceea8d0dc5f0456b6f936a3011b9702b4beb1e4
GET /jfe/static/dist/c/jsApi.8da1775e8131fb08b25b.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:52 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c%2FzRqjkn7C0a%2BygwyPdo7dg%2F3j4ItvCH5F1cRunae5ZTZurbxvvCsT1E7CvxcMkBUd2%2BKaAqkXzVuiQ8tjWCnjVzQnish2XzGqT5oae4UHKAcu%2BumGtmvPyMfKgOxx8IVYX3Rw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fca6d5c56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/meta.ff17afb25384dfc7e22f.js.download | 104.21.3.126 | 200 OK | 2.4 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/meta.ff17afb25384dfc7e22f.js.download IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (2504), with no line terminators Hash35e26b22fc67f5a956b7298a8357c28a 199062bf59f55904ba927efe2e5477a2690e4005 9a95a2035e2dd19946513071daf30236d168ec3d29a615cceed3649a0399cc33
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/meta.ff17afb25384dfc7e22f.js.download HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:14 GMT
cache-control: max-age=31536000
expires: Sat, 19 Apr 2025 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5p%2FhvVKos5kj7toa2N%2F2xlWjlRJLamOcGYdfFjyspbg6swOg3ScaGFNEgpHW2sWIxDRun1azsGMwuVUqxCahos6bx80A3O3rRpomVptArPtlfwHL0%2FyN%2BL68YkyqtdMsN4r2Dg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc31dd156a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/jsApi.8da1775e8131fb08b25b.js.download | 104.21.3.126 | 200 OK | 14 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/jsApi.8da1775e8131fb08b25b.js.download IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (14066), with no line terminators Hash8da1775e8131fb08b25b4797288456ec 8e5f01a257a0fac6d33486411d6d3b0602025246 9cb6997fba02986945ff79d03c0eb1b8afb0d8a06c4cf46c2015608d48915056
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/jsApi.8da1775e8131fb08b25b.js.download HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:41 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:14 GMT
cache-control: max-age=31536000
expires: Sat, 19 Apr 2025 10:35:41 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lE8FqQd1UCxgtVKI%2BFLjUC6FXuoGwWzoGSleLFz4HAdLRA52WarpEWsyaSF77SLps2qaZbC49iaKkyESMCaMVp1EUQznWif36YGn10cicwTKClQEKMpO%2B6GcC6FeG3ARUC82tA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc31ddb56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/uwt.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/uwt.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hashb6a13b882be0a03bb5c3ba2514430d65 b2e7744abe3ba81a7e520560774f73746e272e17 6dbc2a1b319c18e6e49445e607d9b83d731a192110d4a55d81134ce80714ce94
GET /en/ca/pay/index_files/uwt.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:53 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FbUP3aeugezCg0arykF6vJSPkqPKP63MGFvP3s0APJXsop3As3aGY8SoFNaKxVWGjXGeho2MN6aKnV5Zbkq2i%2FfjVIe05jLYWGB9C7BSt%2FZbneEgJE%2FRBArfpQegDJeuF3Iycg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fd53f7056a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/lib/js/zip.js | 0.0.0.0 | | 0 B |
URL GET latestuploads.net/en/ca/pay/lib/js/zip.js IP0.0.0.0:0
Requested byhttps://latestuploads.net/en/ca/pay/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en/ca/pay/lib/js/zip.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2; _gcl_au=1.1.1983429645.1713522947
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| latestuploads.net/en/ca/pay/index_files/pixel.html | 104.21.3.126 | 200 OK | 1.7 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/pixel.html IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (1749), with no line terminators Hash550bd66ed576ba3b046022f018bf8788 7f214e1ed2ca2b1b51793e911786997058dfc05f 908cdc26b58ad6f31dbbb04307a6ceb49cdbd57336188040e4f826f9fe3787a6
GET /en/ca/pay/index_files/pixel.html HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=0, public
expires: Fri, 19 Apr 2024 10:35:38 GMT
vary: Accept-Encoding
x-powered-by: WP Rocket/3.14.4.2
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rj%2Flp7%2B0yn97%2B0KlkTmkC9CEihLS7qdWMWC07lf8A9atQXtqyvDPJtjHfYYBYm51fnSHts6XBIPS0Uh8wuuvr4DDUoQMp8y52v4ZbQ4uCPj4ZAM6VFPRDaRcGdlQHSFEfBz02Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf8a1456a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/foundation.min.js | 104.21.3.126 | 404 Not Found | 51 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/foundation.min.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash58f70fa5ea8bc82aa906c19b21b6b019 677548f6a7d0cd1597c58433e5b476252560effb ec9943027af8698f58ff641e028d54604a82954b39e1264c8fe19ecb990edc40
GET /en/ca/pay/index_files/foundation.min.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:41 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X%2FfnUhG%2BukJnc8DAMTZRZ3%2B0VydhZ8NX8aiGRsqaKlaTGK%2FGQBHWhrNcaaqkZQjpX%2F5NHMsUMiocIINgm5nxjBq49GMLbjx0ezbxGIKNNgpM8thPwmQHVIu%2FMP1VGVqlihCE4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc25cab56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/mp.68f8d86dd01e19ae1c35.js.download | 104.21.3.126 | 200 OK | 5.0 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/mp.68f8d86dd01e19ae1c35.js.download IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (5205), with no line terminators Hashcb1021636ff84c7cdc1c33587398bc14 2b0ed1c9ea316b857459b6927251326d9d73794a 2dcddd9e198e59f68691811466aacb2cfe8255e611651465acf95d228dc8460c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/mp.68f8d86dd01e19ae1c35.js.download HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:41 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:14 GMT
cache-control: max-age=31536000
expires: Sat, 19 Apr 2025 10:35:41 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w8fOV0Vfcg7KArRu7NQ2hXsfdaVHRM8NTJGce22JbM6Szw9aWzoxHecFa3SBCK73BVq6QHw3xtndVhJazZ0%2FcgBWXEzWqyxLw754Z8TZZKtywnZoprkt7r9pQdjSZBBozhhR%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc32de256a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/f(1).txt | 104.21.3.126 | 200 OK | 2.6 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/f(1).txt IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (2721), with no line terminators Hashe3dbd05977b29a55966794ea7833080f b1daa0d5de876d12878116afccdeb20599762631 09720282b8be2f6bbaf7c69b10ba2456c9bb71b69772523f60dcf172a51cdf2b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/f(1).txt HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: text/plain; charset=UTF-8
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 10:35:39 GMT
vary: Accept-Encoding
x-powered-by: WP Rocket/3.14.4.2
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LPCLAu18z4AMz9bDEfN%2FUbP%2FCdzkiozF4Txqe6beRHmXxZ3r0QjGJlL7l%2FFFZCoZm0Gz01tCkiXa%2FSCWbwS%2F%2B8xPByzixw3zsFRCJ%2F58YZc1uCV%2FGrrHw7DlD%2Fs%2F8yuBNmCtzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc26cde56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/cpotools/mc/assets/images/structure/blue_question_icon.gif | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/cpotools/mc/assets/images/structure/blue_question_icon.gif IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash0fd091615497154dbbb8cd623ad6266e 673369906cfb2e3a50a57cc77426c268fef8afd0 6908bad7ac3be18a0c78743562796d22fb5cc6b673a07dadf4b6d296519b4e6e
GET /cpotools/mc/assets/images/structure/blue_question_icon.gif HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/extendstyles.css
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:40 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XStN3GTxq%2BzNTWnEMtVy0Z6Koctoxd9DInJ8OrFlExMEOVkGoVmoexjmslc48cBwXHwT4OBfy%2BVN%2BTyWBx0PLOO6HdOWuWv9j%2BJSQIiowNDIzSsPXb0OxAM7pVauPLRbxnqDIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc21c7656a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/RCf1b64ddc47d04c2ba552708d0de25b3b-source.min.js | 104.21.3.126 | 404 Not Found | 51 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/RCf1b64ddc47d04c2ba552708d0de25b3b-source.min.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash5341d47c0451013afd5f22859de3e76d 6b9884bd7ec8b34740daa1e0a3656f2e2cc52c52 f55ea08e62ce9eaa21ab2673cee338a6d6fd5c41df335a1e4772b8762d0c7540
GET /en/ca/pay/index_files/RCf1b64ddc47d04c2ba552708d0de25b3b-source.min.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:46 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=It46dpzzL9OrU1Tf6WKIGBkmvga69cWVCZ4nH7HGGGXbWCW4rFusHAWftEp34pErK1JhuncEQNUPPxCTh7UxvEUKmfNf5ygV1RnRiXwNAlYtVsBi8q0U%2FdjdR4NekPl%2BEW2H0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc25cb756a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/lib/js/phone.js | 104.21.3.126 | 200 OK | 1.4 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/lib/js/phone.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (1498), with no line terminators Hashdc8012ab814e60e5b9edadf126b53915 30256b3b4e80e58d8a73a095d594b38f24f4d61b 1feac83d17daf4ef813d9fb9cfe6b1cb74c3ac673c240802f771afd6ceecd5a7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/lib/js/phone.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 11 Apr 2021 07:20:02 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nFku11HRgd6tLyMK%2FeAgymhYOj1wdJtqUUbXeMUEXNr8lGHuTc%2B2Pch7HR8TOjgGoMn5EZEI9RWRyRuundErLO927UwnaPmKPfBRjQimiPQft%2F0vbBL%2Bmd485GzTMpJStR7KLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc28d0756a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/f.txt | 104.21.3.126 | 200 OK | 36 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/f.txt IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (2427) Hash8cce5c485785aa23c0a1bdd71572bc33 d4c42488642ee3b2eea2cf6fc754015504134714 7dd0c324d72de932b7265f7de9dd40e21c681f9b6a04d66c5996860b5441866d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/f.txt HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: text/plain; charset=UTF-8
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 10:35:39 GMT
vary: Accept-Encoding
x-powered-by: WP Rocket/3.14.4.2
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3kyirdp2okXNd%2FAH1DLok5gtN5AAndjY9MM%2FeyU6LIJSk1bMawJ4DeLt%2Fhn2zer65QQkoiDAv3Yb8orOyunG1gmR4Ydx2VthV95sT5mHj2Vmrx0I3W0LkHGCephB0yc6HMzDog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc29d3456a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.canadapost.ca/cpc/assets/cpc/img/icons/global-alert/cancel.svg | 104.110.20.42 | 301 Moved Permanently | 817 B |
URL GET HTTP/1.1www.canadapost.ca/cpc/assets/cpc/img/icons/global-alert/cancel.svg IP104.110.20.42:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerDigiCert Inc Subjectwww.canadapost.ca FingerprintE3:FC:14:7A:D5:BD:99:E6:02:72:3A:7C:D4:11:C2:B0:56:C6:E0:A5 ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cpc/assets/cpc/img/icons/global-alert/cancel.svg HTTP/1.1
Host: www.canadapost.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/global-alert/cancel.svg
Date: Fri, 19 Apr 2024 10:35:39 GMT
Connection: keep-alive
strict-transport-security: max-age=31536000; includeSubdomains; preload
|
|
| latestuploads.net/en/ca/pay/index_files/jquery.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/jquery.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash9309bb9704d9f4fcf12774a3339fa6c9 13eda40de31c5bb36870ab21b6a28ce00d40f1fd 4dfbad9e3ff7b651081f4e537ab3acecb654f44970656dbb22b29889c2925c5b
GET /en/ca/pay/index_files/jquery.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:48 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uAfrYd2oAsGW%2B%2Bmakbt5EwA2BLFRUkQqSXfYtGWYt3iumLYZFp9h%2BRMwpLnFZX95ZTwzPyYSI8lnH7JogTrBeNrPD4OM5afro1Dc%2FSWIhjyxtakwwMB25feQkr1ILj70rl4l2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc27cfc56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/lib/js/jquery.mask.min.js | 104.21.3.126 | 200 OK | 8.2 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/lib/js/jquery.mask.min.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (8408), with no line terminators Hash2df11a850b2c383a5496827dc24a5bbb 1370b2368a82d53aa7d22e77f1d3571e94ea5aa6 41fda6e25714b894305cc1c72f0ed1375b919a79cd1889a06bb20dd7b80c5229
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/lib/js/jquery.mask.min.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 24 May 2018 18:53:56 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U7SBF%2Fj6Mful3sTD8dFAfhGLq70Sz8Uy4%2BX6jmdFRR0fl4WnnkyjxIkIna2KzGGJGb5qGsBR%2FNTyCZInqjFGbICrGD15SPoZekMUgsc7HYihYe1qAG678vzVQXyKoJLJODJi8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc28d0f56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/jfe/static/dist/c/mc.3b7764525d9f2c925e16.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/jfe/static/dist/c/mc.3b7764525d9f2c925e16.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hashe7ef342abf74b58a7befdbe2a6ae8f97 37a9d765d0cc7f32a664f967311c2878540de969 af7ef2b4974188467288dda0048a89a39faa2f7a8086e699e412e6426d37891f
GET /jfe/static/dist/c/mc.3b7764525d9f2c925e16.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:52 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uNlGyrh0gx9YPvpQ4GaJMLG%2BibuZW3XyPhgq3R%2F6XCc0r%2FwHj9DX%2B17NgcrycJKAsByQw0PIK9%2Faq%2BiUgdH8othdb0JkqfWO3EoTzI6IxXFDBi5LOcvyZ6JklOiYiuSzdFUM3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc4efea56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/arrow-down.svg | 104.110.20.42 | 200 OK | 185 B |
URL GET HTTP/1.1www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/arrow-down.svg IP104.110.20.42:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerDigiCert Inc Subjectwww.canadapost.ca FingerprintE3:FC:14:7A:D5:BD:99:E6:02:72:3A:7C:D4:11:C2:B0:56:C6:E0:A5 ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash231387872f54e61f662a372055284f9a 4b82dad7a343edec42c3d39acede0e9909b99738 ecc5e417beec73fdaa5352916945468d694c684977be2498dbaa83e23e5ae8ea
GET /cpc/assets/cpc/img/icons/arrow-down.svg HTTP/1.1
Host: www.canadapost-postescanada.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://latestuploads.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/svg+xml
ETag: "5a78a622-b9"
Last-Modified: Mon, 05 Feb 2018 18:44:50 GMT
p3p: CP="NON CUR OTPi OUR NOR UNI"
content-security-policy-report-only: object-src 'none'; connect-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.cpggpc.ca https://www.google-analytics.com https://siteintercept.qualtrics.com https://www.facebook.com https://sslstats.canadapost.ca https://*.wistia.com https://dpm.demdex.net https://csi.gstatic.com https://adservice.google.com https://*.googlesyndication.com https://*.g.doubleclick.net https://maps.googleapis.com https://vmss.boldchat.com https://www.linkedin.com https://canadapost.tt.omtrdc.net https://services.postcodeanywhere.co.uk https://embedwistia-a.akamaihd.net https://cdn.cookielaw.org https://geolocation.onetrust.com; font-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://fonts.gstatic.com https://*.arcgis.com; form-action 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca https://*.epost.ca https://www.facebook.com https://google.com; frame-ancestors 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.cpggpc.ca https://www.adobetag.com https://assets.adobedtm.com https://siteintercept.qualtrics.com https://zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com https://connect.facebook.net https://snap.licdn.com https://z.moatads.com https://static.ads-twitter.com https://www.googletagmanager.com https://www.google.com https://www.googletagservices.com https://*.google-analytics.com https://*.googleadservices.com https://www.gstatic.com https://*.googlesyndication.com https://adservice.google.com https://adservice.google.ca https://maps.googleapis.com https://cdn.ampproject.org https://*.doubleclick.net https://*.twitter.com https://cdn.syndication.twimg.com https://dpm.demdex.net https://*.wistia.com https://*.frontlinesvc.com https://*.arcgis.com https://www.linkedin.com https://vmss.boldchat.com https://sb.scorecardresearch.com https://www.rnengage.com https://sjs.bizographics.com https://www.instagram.com https://secure.adnxs.com https://app.five9.com https://cdn.cookielaw.org; style-src 'self' 'unsafe-inline' https://*.frontlinesvc.com https://fonts.googleapis.com https://translate.googleapis.com https://*.twitter.com https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.arcgis.com https://*.arcgisonline.com https://app.five9.com; report-uri https://www.canadapost-postescanada.ca/cwc/components/rs/csp-reports;
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
Cache-Control: max-age=86400, private
Expires: Fri, 11 Aug 2023 13:15:37 GMT
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: master-only
Content-Security-Policy: frame-ancestors 'self'
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubdomains; preload
Content-Encoding: gzip
Content-Length: 167
Date: Fri, 19 Apr 2024 10:35:40 GMT
Connection: keep-alive
Vary: Accept-Encoding
|
|
| latestuploads.net/en/ca/pay/index_files/michael.css | 104.21.3.126 | 200 OK | 41 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/michael.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeASCII text, with very long lines (404), with CRLF line terminators Hashf19d1d21ae9db81b4b28d018c3848fba fbeed5309992c73436ac09150d54538b7eb5a1d7 0eab4639b99f9e8523b2fc1c5d2cb762bcb2681bf740d6e940bc7b2fd4a52e37
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/michael.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:08 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U6b35es4SkcDYNzvK25PUT5EurhyUJvUn%2BvF5NtmkEvjOzkvTOQdn6n7972k1C6Pg%2FA%2FOr7Ta2FMqHU7rtx60WQ9u6iJj%2Bu7iE6FKH82zriX4mUlS0Ijy%2F%2FBb2PRL36EI12xdg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf89f956a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.canadapost.ca/cpc/assets/cpc/img/icons/icon-lock.svg | 104.110.20.42 | 301 Moved Permanently | 907 B |
URL GET HTTP/1.1www.canadapost.ca/cpc/assets/cpc/img/icons/icon-lock.svg IP104.110.20.42:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerDigiCert Inc Subjectwww.canadapost.ca FingerprintE3:FC:14:7A:D5:BD:99:E6:02:72:3A:7C:D4:11:C2:B0:56:C6:E0:A5 ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cpc/assets/cpc/img/icons/icon-lock.svg HTTP/1.1
Host: www.canadapost.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/icon-lock.svg
Date: Fri, 19 Apr 2024 10:35:39 GMT
Connection: keep-alive
strict-transport-security: max-age=31536000; includeSubdomains; preload
|
|
| latestuploads.net/en/ca/pay/index_files/gpt.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/gpt.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hashe5ecc077682b25e2ef89c72b35c6e5b4 ab1470c3c06d81eddaa8c86cd23be15f84513564 cd47fe41c648122155ec492aa2dfb2cd84268f89f7b204ff13d1c7b520a91920
GET /en/ca/pay/index_files/gpt.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:41 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PspVj88VGkMxI5pDrjMtsMH866p5dnpHWr5CST3PuAMQJcU%2FCy7zTeHufYaBipble354OvadaiuvzQxmgEJz6F6d82EjgX08HshZpoUF2wkTB1nN5tSc%2FcMEL8xo6kU77jXnqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc29d3656a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/lib/js/dob.js | 104.21.3.126 | 200 OK | 1.4 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/lib/js/dob.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (1490), with no line terminators Hashe887bc9c4c0e93a350ef9bdad4952216 8a60fea1654a837b66a870c48e9d63fb566393aa dd1cd110f21b70550f204f8909db8cd3af14813b21b12d8154743a0c0676fdc7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/lib/js/dob.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 14 Feb 2021 22:45:10 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lpFDsVRGt7TkWxy4%2FclAaGGfiy10s7WJSYECX3VgSkcNzJX77UIHZGA4Q3QBUBXxtqrRo%2BzIsDWHuy%2B%2FgXkB0k6DSu7b0%2BbgzsV4jby7LVPiSYvjVhbU2r89BvwHWKHSctN7KQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc27cff56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/search.svg | 104.21.3.126 | 200 OK | 320 B |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/search.svg IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeSVG Scalable Vector Graphics image Hashe59aa2af29eb53c11a67a8cde773bc4e b8cc3c733933497f19550234a4145caeb1bb671a 778a24c9bf3b39204e31625101087ce62009094f9623a08a59b09f47aabd5eef
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/search.svg HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: image/svg+xml
last-modified: Thu, 08 Apr 2021 23:06:12 GMT
cache-control: public, max-age=10368000
expires: Sat, 17 Aug 2024 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TUgAtzAKAmUtUT4Uq9YRQxsfJPkqfR4dYqLN0RQ2f9gWU0pDOpp5tK%2FRYe04UzZCjkdQqrU8KiEFUTC%2FQXYIjHtewPzroxLFV%2Bt%2Fmp8zbSqvBYrh5y5kSrTbmH97V8vxtwtsYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf8a1256a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css?family=Roboto:400,100,100italic,300,300italic,400italic,500,500italic,700,700italic,900,900italic | 142.250.74.106 | 200 OK | 26 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:400,100,100italic,300,300italic,400italic,500,500italic,700,700italic,900,900italic IP142.250.74.106:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hashaa41248927242f42f765c279234b7cfb 65f39cf67b13ae7bd1c08e66a5b8e3b769d090ff b2b513d915ee0689890c4c17b634c139f58067a1b0ec3513e21886945b215c66
GET /css?family=Roboto:400,100,100italic,300,300italic,400italic,500,500italic,700,700italic,900,900italic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 19 Apr 2024 10:35:39 GMT
date: Fri, 19 Apr 2024 10:35:39 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.canadapost.ca/cpc/assets/cpc/img/icons/global-alert/alert.svg | 104.110.20.42 | 301 Moved Permanently | 1.0 kB |
URL GET HTTP/1.1www.canadapost.ca/cpc/assets/cpc/img/icons/global-alert/alert.svg IP104.110.20.42:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerDigiCert Inc Subjectwww.canadapost.ca FingerprintE3:FC:14:7A:D5:BD:99:E6:02:72:3A:7C:D4:11:C2:B0:56:C6:E0:A5 ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cpc/assets/cpc/img/icons/global-alert/alert.svg HTTP/1.1
Host: www.canadapost.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/global-alert/alert.svg
Date: Fri, 19 Apr 2024 10:35:39 GMT
Connection: keep-alive
strict-transport-security: max-age=31536000; includeSubdomains; preload
|
|
| latestuploads.net/en/ca/pay/index_files/chat-common.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/chat-common.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash237311cc231ee2120171227c701de1c6 3a8ef7aa15c0539ad6936c3a365abea04aca251d 33fb669063ba1eae51ac5b2eaec581057e390d5f25d8544f32cee607a25ce149
GET /en/ca/pay/index_files/chat-common.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:50 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pMdtDEBdxZ5ivxOM%2BoDPJA5ynAMpCVN97CYIqFxDnzfroOQMafO7pmGjUFzddYqrKtpe9OTPT6%2Br%2F4HLDBL8Lx4NAjOifXdui7U3RK4VlCSGuJyTa772g3f8ZuBv0x9TAvsh4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc25cc256a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/responsive.css | 104.21.3.126 | 200 OK | 106 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/responsive.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
Size106 kB (106523 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en/ca/pay/index_files/responsive.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:08 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=icqWDNPDfn9IBcSC2QGRZHxH2S3eR59%2BvGgPaLhO0sssZWynnzL5Hh%2FMIwUzT4ycfk1eDvA5ourBoKCLAwDieHl0FcRltSqybhIZqYwinu%2FX3CdWRnt6y2jFGO0gdYx52vOP4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf79ea56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/2012_eCommerce.css | 104.21.3.126 | 200 OK | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/2012_eCommerce.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeASCII text, with CRLF line terminators Hash4ea4b57c67b6b31ba434f17c86bb1b2c 4ddb93b21fd115596b6da03a7e8dc870eeb7266c 12102e94398740fc6698f008945c8cae90ce3bf12c95f95ff4ff8b55b4e82ef1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/2012_eCommerce.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:08 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UT0B0TiRRJC%2FN2iKaIZP6Ee37IwAg2RUA8xTYYGRC32hStXRj1%2FkjSJlXDM%2BcvmRYQ3WYzYa757nibi1ybDG2T5EDbrTj8VUnF38UOXhkwHpHxd8ujdQZC5AEvPcaW464nD2tw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf8a0156a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/1.5159a7a0ba1fcaed8917.chunk.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/1.5159a7a0ba1fcaed8917.chunk.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash9991cecb2e87b92cdb1ce5055bd5b29e cae0f0a0e01dcf1915a3b3f69ff9781383cd53b4 a6950a285756fad5cb7d5d93e63f148430ef10b02f8b794b5d2cdfd95a85f227
GET /en/ca/pay/index_files/1.5159a7a0ba1fcaed8917.chunk.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:43 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BOZTyIVVgwyBY0gZgI2L1yUcZaovYh43CV0MLB1MsC6ZqVObZNqid8m5FByTIYBjEtDT1d7LrTlWkYWKQLXMpItnZQjKt9Pnk%2BF8ZpKn4Cc%2BmZmWVLG4TuS7TaTfMKhOHcStEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc25cb056a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/jquery-cookie.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/jquery-cookie.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash181dbd9667c061cc726b00e35ac42df1 46e8f975aeb6f4c006ef13ab369f2e8e3fa3215f 5a07466856d5d7010b6bce0bd51032a992086b8b14d264ca723deb00d8f7cf61
GET /en/ca/pay/index_files/jquery-cookie.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:49 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EfQd7RnK%2Bc9y7VI8WI3Efl1XSN8t7ZH3Dty%2B2Blsf%2FF3y6blXxrC19GjMiO5c3%2B3vXRmsfOulJsa7UqolZ2BuMIx0N1nZQuwXGwO6VgRzmWyRN9xhuhC1UHQr%2B3%2BFkDt49KVXg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc26ce856a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/jquery.smartbanner.css | 104.21.3.126 | 200 OK | 5.8 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/jquery.smartbanner.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeASCII text, with very long lines (5883), with no line terminators Hash184198d1f7ffa5d1d77cf54f34473e08 f2b688a5c73d6e211c7058a4760e446b878be81d e245a8238419476a649a567cd4a53a502fd577de392410afb80f652bcd2a4145
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/jquery.smartbanner.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:10 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ogdtl8uupOetId8SbBsDwGiHA6ingmFif1V1NltHtkCTDEvWetSKE4Af5bk9GO42ihQb9OXkdQ%2B7n5DCkzQ1jpNJ1f51bTRpyWQJg%2FK3r9IWAJDjwfJgdd00WdgkHSG6al21qA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf8a0656a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/jfe.c5d51c1772674a71d60c.js.download | 104.21.3.126 | 200 OK | 259 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/jfe.c5d51c1772674a71d60c.js.download IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
Size259 kB (259159 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en/ca/pay/index_files/jfe.c5d51c1772674a71d60c.js.download HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:14 GMT
cache-control: max-age=31536000
expires: Sat, 19 Apr 2025 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3r0MHlMM7%2FTdHx0i5u9DoUoaNHZCKh6%2BWe3YZRkakAHaDVcs%2FddzAYd4ecPiSbn2QAzko3%2Bw2LD3vn3tvWVD4IxA05eWf%2BUkb0M%2BgiM9DlgFA%2Bku%2FQNOu93n2FBBdRytUf%2Bilw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc30dc456a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/mc.3b7764525d9f2c925e16.js.download | 104.21.3.126 | 200 OK | 39 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/mc.3b7764525d9f2c925e16.js.download IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (39237), with no line terminators Hash3b7764525d9f2c925e1612cd0b055b5a 3566215489cc29838007056e6a12ce0379437ed6 ba56584f69ddfd681892a10af24b2a0c120f096400e799fcbc99412d4f683e04
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/mc.3b7764525d9f2c925e16.js.download HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:40 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:14 GMT
cache-control: max-age=31536000
expires: Sat, 19 Apr 2025 10:35:40 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j5j%2FYvmkj87sGYRqbk3cxV45slnOGGBF8HGvNwm1iVTHAleLXfqKiZt9%2BK%2Fo4hZ5oqv8XpLzt049jfrGCVxaA7dDgiR7Y9wxFdeXp%2BU0M9e8YXOvyz84BrMRrt4qt2kyTl9O2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc31dd656a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/jfe/static/dist/c/meta.ff17afb25384dfc7e22f.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/jfe/static/dist/c/meta.ff17afb25384dfc7e22f.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hashb0853f3a1ec593dad8fbe38fb5754d4b 3d3e266bc63184ad45ed4c30a0b9791fa438bf07 757b50c85d410778309d9b07e8d4e0b3dfb21d2317c024e3eb9084a2546c3689
GET /jfe/static/dist/c/meta.ff17afb25384dfc7e22f.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:52 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c5YWPTYdP3LkOjS9%2BTgKEy%2FVqTm0Qvv6ZW83eqAsqUfCx3s4gMwAlzq7GE%2B7ViujiJaQFl0dLkKjYZ%2B5%2B7ukWf8aYVOmVVf1%2FwiS5T01TS720XlZBlfFruOgtDVD00ZXGnRWtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc4efec56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/lib/js/jquery-latest.min.js | 104.21.3.126 | 200 OK | 96 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/lib/js/jquery-latest.min.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (32086) Hash8101d596b2b8fa35fe3a634ea342d7c3 d6c1f41972de07b09bfa63d2e50f9ab41ec372bd 540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/lib/js/jquery-latest.min.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:47 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 24 May 2018 18:53:20 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aGZJfrRxeTu8ihvDiNFuQB3M3DMaYDU5q0y3EBUybtU1yYoVBGf4JX1mMU6BFY4oOMuwapya1Vbhr4I3xk2WU3XtpWCaqnf0443rrz12JSkS6z69V%2FmaYnaYGHpwjPo%2BntEnsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3ff51cdb56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/lib/js/jquery-latest.min.js | 104.21.3.126 | 200 OK | 96 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/lib/js/jquery-latest.min.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (32086) Hash8101d596b2b8fa35fe3a634ea342d7c3 d6c1f41972de07b09bfa63d2e50f9ab41ec372bd 540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/lib/js/jquery-latest.min.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 24 May 2018 18:53:20 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MtFD%2F1LC%2BfWc54e9QgFQaK7A1rqmU5VSfptZfucr5ySAFDPTorOaoleo%2FA2z9XlJH2zMVWr%2FOKCwnPFeNouG7DHMHqby7w7WTyrw%2ByzmNkGic%2FCJU8wM2z%2FQgdsXUcEqbm1bmw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc28d1156a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/modernizr.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/modernizr.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash3cc0af49d17e8f9f65e9e574a54e38ca 85af25e587b8233b2392b073e24ebc2fa5785343 c27cc9aa98c42c00369331c869aa3e84f31584f56246879eba81c65e4fbd7a84
GET /en/ca/pay/index_files/modernizr.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:50 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aRjfakjNGb5fIq9hB7WLo30qJEK8JBQdsuM4ZQTpAJziMyfm%2FrKU4Pv2ZmEL%2Fmf9toc%2BJyHkGWvryUq0RufHHMPQxjC1gp6Br%2F%2BuXnCtzxCuP3xS4UxEXTopcwoifyQyfo0lGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc27cfd56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/beacon.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/beacon.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash31721d72aa2f2ba616039a80231c30aa 31ec9c95530b8d95c50e8d913fee79ba5926cb54 a9c7339a062973fc2e3d7f2d8f3143a2746de332f4b8da2f3e9d68d57df47e8d
GET /en/ca/pay/index_files/beacon.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:50 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wKl9i8ruECHidUVuLDrSbkA6JIX2WkV5G0Gf5eRLqwBuGYtsl2TzF9RC9D5SRQ1pg5wlJR1rSzA0pdtJOAZeXRODy2ikLIEnMH%2FPtxO2%2B3fqRJhMJXTzmOLoj4DvRlCnVh2szQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc29d3756a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/RightNow.Client.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/RightNow.Client.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash4d1ef9f4acbbbd3ee48b2580bd2a9519 8a700d1b5198a64727039a4ae5ca3419e6adcd7c 6c075a4a4ff433898c33d71ecaba0f1701194878c315a987ffa016e9ae029c6d
GET /en/ca/pay/index_files/RightNow.Client.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:42 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N8DgD7JFs7MyV4Kmal%2B6SrAsCMsUT1KKXYll3bTJUQspigA95P44FHT7HlBfgWv4My0GbE9%2Bc5RO%2B3zBrpDSA71Zf3In7EI38ynHBO6C4c5PQ15Pb7I79faa1NZYPgkw%2FFh%2F0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc24ca956a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/search_autocomplete.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/search_autocomplete.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash0fa55ae29481f149b9d428667df0c11b ecd041ed2d60067f1b0f07fb3a3fc6576485fc5d 394b30a2445028c90d545a004d3997c9836ea13e9eb210df01381f45b5c516f7
GET /en/ca/pay/index_files/search_autocomplete.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:48 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tEJ4UUAo%2Fbei2yyxwu5sqCiH0N4mbZuZ17kNNI3TginlKIFz9%2BVp7s5o33NE7y0R0jRXGuWfHuWSfpF0WCsQfE097kvw0eDtTwWHBiHJXmwzQwg0DkK%2F6zbgKd1QGxNiCU1EjA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc26cdf56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/normalize.css | 104.21.3.126 | 200 OK | 7.6 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/normalize.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeASCII text, with very long lines (8026), with no line terminators Hash1fc3b6010546b3cb799e5d5edc0968ea ce3cc733c49c22985198aa24ccb733146c4797bf 9862b08fe7754b16e1af2f7b6d85276a47608588a19252cd4ad32661b9df7fc4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/normalize.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:06 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MPZ4iNdDWU2IlyHWf%2Fg3V8VELl9GM5nIKkUR5It8kgzsef2pz8rUIu0s4qoGbQDkymgKPBu8ucxorHOlNknUmTTtFuNMFeE214YEgXHAH3fnWUqU%2FpOqcdC5dFMAfe2C%2BLfl9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf79e356a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/mc.3b7764525d9f2c925e16.js.download | 104.21.3.126 | 200 OK | 39 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/mc.3b7764525d9f2c925e16.js.download IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (39237), with no line terminators Hash3b7764525d9f2c925e1612cd0b055b5a 3566215489cc29838007056e6a12ce0379437ed6 ba56584f69ddfd681892a10af24b2a0c120f096400e799fcbc99412d4f683e04
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/mc.3b7764525d9f2c925e16.js.download HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:40 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:14 GMT
cache-control: max-age=31536000
expires: Sat, 19 Apr 2025 10:35:40 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dwCB1LzyckooTymNo1pjVLtcS9cEflKm%2FKDf%2BUHmoaNBVOBfr6r8GvflM%2BTbbrmIA4YSfh2XhZkFS5bv8n4%2FOMMU0FJPtHTCzk%2BJ5LT6R8J%2FObkwmm6dJ%2BtOJ750L5N65S%2BqRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc31dd356a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/cpo.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/cpo.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hashda6e8c7255e5b144b2dec1da3e58e2b0 5d57ca2bda9f5654abb90a54b66e0b0f8c667a15 0e482d37361cfa5b8d00036fee5e62894803dd62fea315bf615b5f2d1433f2b7
GET /en/ca/pay/index_files/cpo.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:46 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z3qF1V7UDilH8NJxBl3g4RIpIi%2FFfB92gM30RpgHGC4AiH9hlUSNv4%2FW0bpQ40rU8NheZybV%2FFYAarTOqK4kP2jrj03EBqkNC9FzSU3H8iroedvYFJisAiecG7NhKtOnIiWRFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc25cc956a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/lib/js/zip.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/lib/js/zip.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hashfe4aaa42d0fc52d4be63e4cc054db5c4 7938e0abe732c0a0c8fe7d95d8f6de47042892a9 a0cc49568c4c499db280108127ab68d235409cfdcd53f28390063db8c880a852
GET /en/ca/pay/lib/js/zip.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:49 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e3m2XVlbqGGBFFVlLWGmU%2FL%2Fw5pxNwY7LY3kyVKJcriNyh483Bb3pA3t00VbDHGxcV%2BXjrrg%2FIBAh8WlGm2RPT2CN3D0iV8HLGWrAAMPAVh6W%2BI1XvLdehCgARK8JjOdPGujEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc27d0656a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/shop/mc/assets/images/app/ecomm/structure/chevron-right.svg | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/shop/mc/assets/images/app/ecomm/structure/chevron-right.svg IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash51991eeb9c032e03d228cb421e3eb454 59ba8ffccabb252afbd89ac390c5adf1c1a967f0 e4364695656472fbf31c2db2b3f7631c76d0556ce68c3469876426d8e20f4d77
GET /shop/mc/assets/images/app/ecomm/structure/chevron-right.svg HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/2012_eCommerce.css
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:42 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XrqFQWJLnocyy2Ad4E3%2Fn2I9j0UjfbYXXTCweut86eKy1ESzmQmfsaxvKpm4sAvor90%2F7OKqQgT4%2FJIXNY2PBKbKwl4j2F5YtbRXOTh%2FOzOiNz7%2Bi9EKxrpmQ%2FF%2FLOx60KHqBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc22c8056a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/lib/js/Acc_Carding.js | 104.21.3.126 | 200 OK | 809 B |
URL GET HTTP/3latestuploads.net/en/ca/pay/lib/js/Acc_Carding.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (860), with no line terminators Hashef78562c5fc58c53859cbba796e53a86 5eeaf9c67bc3742f3655a5ea18ae19accef279f3 f8d108825dbecb9f8ae713fb7c065398d56e96149912720164fc6cfea40595d8
GET /en/ca/pay/lib/js/Acc_Carding.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2; _gcl_au=1.1.1983429645.1713522947
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:47 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=1464
expires: Sat, 19 Apr 2025 10:35:39 GMT
last-modified: Sun, 11 Apr 2021 07:20:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k232CdpKda%2B7Ns90Dwac8zKZECXfIE0rF75gZ9DbyE7ilR2CwpN7nmFEHgYLZ%2BNbsGlye0t6TB4ls50GqOAlAu0sY1kt0xEThE%2Bk3FPEwd2hUHOkJgFKuhMzkFe23LHeRksZfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3ff57d5b56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/14.8f875927fce05bedfe11.chunk.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/14.8f875927fce05bedfe11.chunk.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash7687e32818d41a34c74f717a7d1f37ba 2d878d0c054eedb4b56cb948abd562881442bf65 ebeeed1dfd48bb201a2adee5dd62d08a59bc648cc47698a3dd89e5eab6b35ffe
GET /en/ca/pay/index_files/14.8f875927fce05bedfe11.chunk.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:46 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dTs1YcHbKOO8lBQfBuqNmiNtcNWSzd9wywzXbzHcnU33tSklM8MZ89S4jL03c1S49uDhY1rir9wan%2F8fE3Nw%2BmA0Hl2qG%2BKHmi%2Fwa8nheKAY5e%2FMWYXcCW78EWYkbtQQ9PNHSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc25cb156a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/jfe/static/dist/c/db.21026c4133e1c59eaf45.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/jfe/static/dist/c/db.21026c4133e1c59eaf45.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash35445e191c0e4fed13b7c1580db02b0a 2869af1c541d874d223ad59ed23dc8d398d1d735 4a0499403527a20df61949f93328f20c2e365b53d8800ac5f355516e89a4400f
GET /jfe/static/dist/c/db.21026c4133e1c59eaf45.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:52 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BxkkRLOhPP2qVeZP9t2QhAytTLLObz%2BJMcfdaVsc6Vc6w2UpxgH9%2B4MRwXnX%2B14iZeJSB7ZoKzhxvp7j%2F%2FnNWeNeub2XtAzOUgnRSZBTd51dd8eCIaPBjJti41Lruib8wF2y%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc4efe956a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.canadapost-postescanada.ca/shop/mc/assets/images/structure/cpo.ico | 104.110.20.42 | 301 Moved Permanently | 0 B |
URL GET HTTP/1.1www.canadapost-postescanada.ca/shop/mc/assets/images/structure/cpo.ico IP104.110.20.42:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerDigiCert Inc Subjectwww.canadapost.ca FingerprintE3:FC:14:7A:D5:BD:99:E6:02:72:3A:7C:D4:11:C2:B0:56:C6:E0:A5 ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /shop/mc/assets/images/structure/cpo.ico HTTP/1.1
Host: www.canadapost-postescanada.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-Length: 134
Content-Type: text/html
Location: https://www.canadapost-postescanada.ca/store-boutique/en
p3p: CP="NON CUR OTPi OUR NOR UNI"
content-security-policy-report-only: object-src 'none'; connect-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.cpggpc.ca https://www.google-analytics.com https://siteintercept.qualtrics.com https://www.facebook.com https://sslstats.canadapost.ca https://*.wistia.com https://dpm.demdex.net https://csi.gstatic.com https://adservice.google.com https://*.googlesyndication.com https://*.g.doubleclick.net https://maps.googleapis.com https://vmss.boldchat.com https://www.linkedin.com https://canadapost.tt.omtrdc.net https://services.postcodeanywhere.co.uk https://embedwistia-a.akamaihd.net https://cdn.cookielaw.org https://geolocation.onetrust.com; font-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://fonts.gstatic.com https://*.arcgis.com; form-action 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca https://*.epost.ca https://www.facebook.com https://google.com; frame-ancestors 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.cpggpc.ca https://www.adobetag.com https://assets.adobedtm.com https://siteintercept.qualtrics.com https://zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com https://connect.facebook.net https://snap.licdn.com https://z.moatads.com https://static.ads-twitter.com https://www.googletagmanager.com https://www.google.com https://www.googletagservices.com https://*.google-analytics.com https://*.googleadservices.com https://www.gstatic.com https://*.googlesyndication.com https://adservice.google.com https://adservice.google.ca https://maps.googleapis.com https://cdn.ampproject.org https://*.doubleclick.net https://*.twitter.com https://cdn.syndication.twimg.com https://dpm.demdex.net https://*.wistia.com https://*.frontlinesvc.com https://*.arcgis.com https://www.linkedin.com https://vmss.boldchat.com https://sb.scorecardresearch.com https://www.rnengage.com https://sjs.bizographics.com https://www.instagram.com https://secure.adnxs.com https://app.five9.com https://cdn.cookielaw.org; style-src 'self' 'unsafe-inline' https://*.frontlinesvc.com https://fonts.googleapis.com https://translate.googleapis.com https://*.twitter.com https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.arcgis.com https://*.arcgisonline.com https://app.five9.com; report-uri https://www.canadapost-postescanada.ca/cwc/components/rs/csp-reports;
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: master-only
Content-Security-Policy: frame-ancestors 'self'
referrer-policy: no-referrer-when-downgrade
strict-transport-security: max-age=31536000; includeSubdomains; preload
Date: Fri, 19 Apr 2024 10:35:50 GMT
Connection: keep-alive
|
|
| latestuploads.net/en/ca/pay/index_files/extendstyles.css | 104.21.3.126 | 200 OK | 98 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/extendstyles.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeASCII text, with very long lines (612), with CRLF line terminators Hash1757d184bd0f5622ed56a26838597cd1 36f944f924c6a470347c277a12f28f2ed30b701b e651de6a3600b312d9a3c79d46a2be82578b8d784bf474c1dec46be377f743ca
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/extendstyles.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:08 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=amn0YIk8gzAGqI%2FLJumOHl2g52znFl6%2BYV43nEV6zspGugzQqv7mePUaDm%2FbBPYrJJ1HOROAIAPZNZY22jbHAJa4WUcvhKLLW73NW9XlSGEzNNh9%2BgLXXJRsNc5WOWg2RmsHgg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf79f156a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/f(2).txt | 104.21.3.126 | 200 OK | 2.9 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/f(2).txt IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (2999), with no line terminators Hash7abf2de492c72cfdb98c6dc53c7e9524 b8482514dd196d2fd3a6780f661f3df2b13e117f 645e3261ae5d6b32eebb4786627a3f973318315366354ff56657692d6cc303b1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/f(2).txt HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: text/plain; charset=UTF-8
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 10:35:39 GMT
vary: Accept-Encoding
x-powered-by: WP Rocket/3.14.4.2
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OaKQDQKg28uCBTnJwUiHYokMC1V3WkgRl6TFQP4jO28OFlxOafGXp27OWz58TCS90jJDmNhy4JuG55bkac%2Bza%2F6gsLDVXNqdOUKrIVXVAsOKZzcb11EUCAbzGBMOnjEU8I%2Bb7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc26cdb56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/selector.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/selector.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hashcf00d80715e17634ce255c65ade5fa2c 73961c041e86399c419e9ca3bb0630f77d90fe23 b3686a702cdb6d4130937f287242b83c1e30cee249284ab6789f8fa36b48d366
GET /en/ca/pay/index_files/selector.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:44 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i3SQH5QXXyqZamfPhn1vfhrWEj%2BnqDf9SgllmzOL7u03d%2FD7T2GkfHjlqJpYEaayL88VXcZh720DJ1WuybmmCP2H8WbcyijZ%2Bn7bo%2FVCfKXWuupRfyjhfGLA%2BTxv1snlMSqPxw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc26cec56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/lib/js/txt-crypt.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/lib/js/txt-crypt.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hashbf9ff16667f07b1c206137af3d3fddbb 80cfacab6d53beca0aaea61427c166789a035243 25d657fc36d275715705fa4ad3e9cbf7181d9649e3e72e67198864685f69f965
GET /en/ca/pay/lib/js/txt-crypt.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:50 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JE%2BWg2LeYbDNHUl5fAQRvjixY0cgbsHRh4qf6lWxkjhz8xliP%2Fj65k2%2B9wAZHMQK%2FxEkMMTsXr8ZbUyBi1%2FIWXZNTAB2zbVUMTX3ilH%2FOm%2BqB2JES9bsuy4LLrJVanw6RkF%2FWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc27d0156a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/satelliteLib-f2fc6f00da802a0747b6ffed3c12e3931bfca496.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/satelliteLib-f2fc6f00da802a0747b6ffed3c12e3931bfca496.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hasha8649e66e39f16b5b4837ca56e93f9ad 58d9412926751cdd9bfc144b7e96c801c921dc7e f7f3e363969df84f1a8607bdfb5ab3fac990d523c2bba6a5900be1d53de7b39a
GET /en/ca/pay/index_files/satelliteLib-f2fc6f00da802a0747b6ffed3c12e3931bfca496.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:47 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3TrSG0LHtPYwYmR%2B5JR3900JxmOjoOppLBVAsmaZtNUg4yjaylcrT4MHfhrMaRPpQjsAeCFQF4iS2x90p1RJSMWqeUTrFK23WAcrDxH097oJIoheIG93lqSR10Bih7d%2BE1JtgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc28d2156a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/slick_slider.css | 104.21.3.126 | 200 OK | 9.8 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/slick_slider.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeASCII text, with very long lines (10915), with no line terminators Hash4df8387a6f14471defa31272d39bc7c2 46a2cffaeeab78e682d0a77b8483e62f5fb61444 7094fefea18d6b5e6bbdf6a42eea59e79ca53646edbe4605cc932cbb1ea8231f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/slick_slider.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:08 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cl3%2FHDXZb7DnWI28xQtt%2BUL8mwmm29003ReCyd7uICiZooe%2Fsrjk5gL2J1hqlzhINspzSJTfr92hMAqf7YdykKUQ6gHdGnEiMrzFWJcb%2ByPSb1QszjUJQU9pk%2FQ1EiTftw5cLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf79f056a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html | 104.21.3.126 | 200 OK | 71 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en/ca/pay/index_files/SV_71iOFlig0vNugpn.html HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=0, public
expires: Fri, 19 Apr 2024 10:35:38 GMT
vary: Accept-Encoding
x-powered-by: WP Rocket/3.14.4.2
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sOToqFgsE2cg9Cj%2Bzj5ae10gV4CHNFg6CodMYGS5Nu5iNzWm5Vk1FR4z9E7SVo2V66%2BYzZNyOL%2Fy5jwFDrXIJx%2Bx%2FyqTHnluhIDVoNh7X33uo7o%2B0QvuAymT3y%2B6OCYYRHOhrg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf79f556a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/jquery-ui.min.js | 104.21.3.126 | 404 Not Found | 51 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/jquery-ui.min.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash08caa1ed8ead22a797155fb16566404e e3bad5e237b8aa592e7c94217e8249a7f82d371e 6ce942a2b10564b49f9a4f4359c3b3ea675e9396c31677ad90bb87b37087ad60
GET /en/ca/pay/index_files/jquery-ui.min.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:44 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JSRNgWeYlB%2BgO73usW0esvPr4U5vk9IEIHT14exyiaUqW96rGWa9DOSuXfmp%2BfcXKuyej5TEZe7y6cn%2FoBzJS5jTq8qUx8xV7lVRUtkDPeL0UzW2rbraeKVs8KaPfTiL%2BsUjkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc27cef56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/EX69ea3e2d8d9a41d99a46ba219e259885-libraryCode_source.min.js | 104.21.3.126 | 404 Not Found | 51 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/EX69ea3e2d8d9a41d99a46ba219e259885-libraryCode_source.min.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash8dee4010746c54efb6f0782e3e87cc86 9b10a19ca5359b858c277d928d6714bc96a0455d 6d100ca04c938ebc2879db3422ed1182802bba37cfdbdfc731c85eeafdf88a3a
GET /en/ca/pay/index_files/EX69ea3e2d8d9a41d99a46ba219e259885-libraryCode_source.min.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:40 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o8yqYtGQ2eIvAhs%2B%2BPp6t7uLKKl5mKBnEeKPfKN%2F8sURcd4xMLM6l1rVtsDjfwX5BTw3CNddORgRcZklhl1ZqdISFzlKDx7QvG8Vb%2FrKaiQ%2FjNh8acdHVDnlSQACgvJc2dZodA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc28d1a56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/mp.68f8d86dd01e19ae1c35.js.download | 104.21.3.126 | 200 OK | 5.0 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/mp.68f8d86dd01e19ae1c35.js.download IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (5205), with no line terminators Hashcb1021636ff84c7cdc1c33587398bc14 2b0ed1c9ea316b857459b6927251326d9d73794a 2dcddd9e198e59f68691811466aacb2cfe8255e611651465acf95d228dc8460c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/mp.68f8d86dd01e19ae1c35.js.download HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:14 GMT
cache-control: max-age=31536000
expires: Sat, 19 Apr 2025 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gklFGGbZQIlmY0U1MDvj2UV14IjWP%2FKXfpstSjYKs3tsgs3cDPljh1n1oEIpdTp7NvtFH8zMFvnS%2F2ihjXx%2BSA%2BxPXjGBg8eWME5vJjCS4Skro322P339VW2cDw7JRk2LQXZAw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc30dc656a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/lib/js/phone.js | 104.21.3.126 | 200 OK | 745 B |
URL GET HTTP/3latestuploads.net/en/ca/pay/lib/js/phone.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (788), with no line terminators Hash3b8363e850fedbfc09a4ff24dbf7ca6a 7cbb971197a03143b295b7c0e29647a962337242 ef59010536779b9eaddb3f2563a479e042e63bd09a0aac2104408cb52e6dd685
GET /en/ca/pay/lib/js/phone.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2; _gcl_au=1.1.1983429645.1713522947
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:47 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=31536000
cf-bgj: minify
cf-polished: origSize=1396
expires: Sat, 19 Apr 2025 10:35:39 GMT
last-modified: Sun, 11 Apr 2021 07:20:02 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2jjBCTIt4tqAsgp%2B6wJcuLSUHLenV1MRn2sWG4ptro6RyaIYPz00AvfrN8rSvdeiJmte%2BWXu%2BzPb2VZkJXYNqGzeTaSAzr%2BE7wJMvyNFZ7Z%2Bbu6ExIsg%2BvmMxl5jVf1sDPqtTw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3ff5ad7c56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/pixel(1).html | 104.21.3.126 | 200 OK | 1.7 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/pixel(1).html IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (1749), with no line terminators Hash471706e6450c55e1acb955de02eba88e f63243c4d4c1bd783c732cc1b8d30deeecf00361 980429e4d771804ef0a7cbc28554e7588455db70fe890de0c5dbeca3b13bf4c7
GET /en/ca/pay/index_files/pixel(1).html HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=0, public
expires: Fri, 19 Apr 2024 10:35:38 GMT
vary: Accept-Encoding
x-powered-by: WP Rocket/3.14.4.2
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q2synG21p0diJhBU3V7r%2Bomh78bAhIM9SRxIiw2sXdKPnL%2FuzuOBnoZsgDGqQ%2BFpMxK%2FXbSrBes5sA8PMKDdqoaGFd4uSm%2Bv9RVtlz1UhxJ6U3mRFwq5yr8%2FeGcnt8PPa0Jtqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf9a2456a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/insight.min.js | 104.21.3.126 | 404 Not Found | 51 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/insight.min.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hashc817b26f9163627f0165f0935a6605d7 2b08e86311e1aedc4f124b7089241298d86ef958 94bee13f6ff5dddbe5d8bf59757738fc9dbf401cc1e5fb1cda31195f879c5ce4
GET /en/ca/pay/index_files/insight.min.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:51 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FZvbitz7o955fqYGyUemiEYm3PpfxgKTPZWIVjddXu0nvih9Qu23iUJ%2FxGjz9m%2FNuDPpAgICDJJTMn4HsTdW%2BI3iubXDyIeAcNKgVS46XWtE8lZIJaVHt%2BMp7LP0wZYsb8u5jw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc29d2b56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/storeEcommerce.css | 104.21.3.126 | 200 OK | 8.3 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/storeEcommerce.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeASCII text, with very long lines (9133), with no line terminators Hash5ba39026194f81ccd7cee9744576c362 1a3b92c1e028cbca8844e0a6c9edb9f72fd2416e 30dbbe52731a2c6cecf346f6b016381af662890eebd281e4d2260e206ed98bb3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/storeEcommerce.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:08 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=no22An%2BUv8DOUGZs2BuvQToLXkO3DtIcTCOv8tmtVpLi%2FeUyTzf3AYrPMcjw82m2jFxbZLru0eMweEn%2Fv%2Fik9rGu%2FzyzYxJuA73yEkC%2FNTa1eiLIb%2FYBhED5PJAPptQyPCuL1A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf8a0056a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/jsf.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/jsf.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash3c27d5954a2850ba11793dbeece93a0d 5bdbfc2190f267aac53ed317068db8a52613b888 289e50ac47edf459f13c3c31f36f3ddfda7a090431fb070f89e953f0ef51d308
GET /en/ca/pay/index_files/jsf.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:46 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dpEll9xIEN9vYcjEW%2FDrago4nT3NHi5ZjiMNL2RY0g2RG54gfv0F4KOXA3b%2FvDcEDDeBfloCMa6KBoxKDDQAnwB8DUESAU6EoFzcvovjoVzMX3lb7thl%2FF%2FizZxdq0%2FiNrzdrA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc25cae56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/db.21026c4133e1c59eaf45.js.download | 104.21.3.126 | 200 OK | 2.7 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/db.21026c4133e1c59eaf45.js.download IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (2769), with no line terminators Hashf465df7704cea2dabf664fca22c360ca 5d0817c96d387bda792b9d4e0369af553098e64a 25dc364c395ea83b9b9907ec1466c562c0bff680890a9437cdf044574d7cee1b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/db.21026c4133e1c59eaf45.js.download HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:40 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:14 GMT
cache-control: max-age=31536000
expires: Sat, 19 Apr 2025 10:35:40 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cNIM8MWsufbvGbnV8helYo9Bza0bX9YqWIWp3skz60wLuyV%2B4kP6smlgF2sRy%2BJ%2BV9UdEZ0WweTCoXZl8DgTApX1s9Cj2Z8JVLAWUkxSjdoVa8l4GPKcFYzcFlNfvVAmkx6s1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc31dd456a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/gpt.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/gpt.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash8e55cd0e664b70be0d2cd21809372c11 47cbf776ca350ecbe205c38eefbd4240e2f39b1c 15f8a16ef860f3b460043f647ff1aaf4028f8af92a4f96b55d458b5693d658f8
GET /en/ca/pay/index_files/gpt.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:53 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3neHSr1BU4QhnmOvgSTrr0JPTcqIqY0HCTMrK7Os2cMi8U9SXfKWgZBkxfb%2FR0Lm69MB7SSC7ZVYimHkTIVCbQG%2F0yLF5AF71fdHB0OOxEi8ctO4Sqy70RQCF0xlXA4Es58p4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fd53f6d56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/kirk.css | 104.21.3.126 | 200 OK | 12 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/kirk.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeASCII text, with CRLF line terminators Hash4526e8794ef9213d7bd92994463f1b2e 3b2276297acd43d2e254640035d7959ec303d87f 45b1109c31695b1cfd409088c8753488eb179fe837fba99f0fbe58159fa63fe0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/kirk.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:08 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FbJxxmA93SK7p084ovmZaL0byMJHR8APONIBXOi6mLBn2zfx2sBnqeB8uFFr9sKmPGZ%2BWLWHSxgogW3PEuVa6nX9Dy1wCdxi%2FQ%2FYiIcylC8nba2tEafYAZChYOKsV%2BZnkQCBpg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf79f456a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/CoreModule.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/CoreModule.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash55e8f519755dab2fff2e1efad86a8c86 9f8720258148f660c8e19bf8c88da191d4d12296 e58e8e9a70b95a55105b629cdcf8adba138e5367b360f0a868cc30050f944dc2
GET /en/ca/pay/index_files/CoreModule.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:41 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TxmAnhx1mp9OHORfXuvXpVBlx5X4jG1uiiFXYGjSViZtL%2BtuOxrBDtukfSC%2BblNk3VZG8HEi0du%2FUn0bS3io4gI9Oqi2y5fz9qbhVh4lisgmM5hiJnOWZ6adSUPuxVMe8cDTYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc24ca156a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/meta.ff17afb25384dfc7e22f.js.download | 104.21.3.126 | 200 OK | 2.4 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/meta.ff17afb25384dfc7e22f.js.download IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (2504), with no line terminators Hash35e26b22fc67f5a956b7298a8357c28a 199062bf59f55904ba927efe2e5477a2690e4005 9a95a2035e2dd19946513071daf30236d168ec3d29a615cceed3649a0399cc33
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/meta.ff17afb25384dfc7e22f.js.download HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:40 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:14 GMT
cache-control: max-age=31536000
expires: Sat, 19 Apr 2025 10:35:40 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8DEvqxomXC6D4PfSuAuzIRuljMNkTAoSiF5UxCGtLDthb13GJcVR5LLzoijeCxUXFhngGF%2Bq4ccxZgV2BrV8nK6q7NKw88j7gEXuexHf4i2kTB1sO9%2B3B8Kh8XKI8trmz%2FPKSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc31dd856a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/ScreenCaptureModule.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/ScreenCaptureModule.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash00ec03026774c3fbfcad11b9074d304b 0afebe73d0b9a5c826706231aea210ac4522a1a6 7b1b670475e3c56f777a5f67fdfcd5f0399fe17e0182d7b6ee897406ae76045d
GET /en/ca/pay/index_files/ScreenCaptureModule.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:42 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6cvgKr9nX9GwaVPJcu2tfWXII9oG4k6qwT74PT%2FQ22iT7ilXsTSLAQs1kVeRbuDg13vmichBsymCh4f4N2zQmGZApoAlVcbEkMonBcvTo8W%2FZE9Cydgz0X7j2YUEfKtySUab9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc24c9d56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/js | 104.21.3.126 | 200 OK | 90 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (2127) Hash4f8a9eff4cf2d8dc4af57a1f055644b5 a010cec787b68e58cc403b89813f6d330ab575f5 06453c0716cf1d0af13ba99b2362b0f60cfdd4589b7c2c5a64d11ff8e78c2b65
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
last-modified: Thu, 08 Apr 2021 23:06:04 GMT
cache-control: max-age=2592000
expires: Sun, 19 May 2024 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QeB2HliH9oUCXtAlUn9Sf0lf1WEhqKQ5DAMWtGnic9CoDuQ7aBb9y%2Bon%2Fqh%2B%2FlwDiKJI5KtKpNRCHWxwo6LDVk9EcIL1HEMOPWqozlLXBObwziUbg%2FhnTA06S3L2VNrknhJENw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc29d3056a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/fbevents.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/fbevents.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hasha6109ea6f82e29b4a78f065b57f8d7da e2c012d270eaea4d105fa868a0155e132fab986c d187178a4d952a58a234c714932baf2dcfa023b00378e818e72b85dae18cf9d6
GET /en/ca/pay/index_files/fbevents.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:47 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uV7e%2B4DRGKBoUgz1hxCF7FN5vE6hUE9bXaKekBbb9Y3zV43kJYWlMyBz%2FoTqOX6WC01S2C1nlhXlsdqMFqf47EA1fKpSgH%2F%2BSeDih%2Bi2%2Brcmp2WKPp8u%2Btwfh7rmDHC6taf5hA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc28d2656a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/cpc-logo.svg | 104.21.3.126 | 200 OK | 938 B |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/cpc-logo.svg IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeSVG Scalable Vector Graphics image Hashcd50e3f21610522334fa8cc8e7677d1b 6afd2003a621efe894af41b229ae78c9dce7cad4 ec52aac943086b6ed844fcf8414153e5589df242bcecd6dd89113aa134d63252
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/cpc-logo.svg HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: image/svg+xml
last-modified: Thu, 08 Apr 2021 23:06:12 GMT
cache-control: public, max-age=10368000
expires: Sat, 17 Aug 2024 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ajMjTir2LfKR8YAZPuk%2FqQvHlecDc6BfJURtaKABGkaxJW8DlPmYqrB4cLxKphU1nZ2ka03iu493Pw4gdgyKHQufao3igJD%2B%2Fu4sg1WEvS6iV1ZnYV2ttddIAUOEQXKmghOJag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf8a0f56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/UserDefinedHTMLModule.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/UserDefinedHTMLModule.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash0345b18340ef07fd2b33b05ede2ae963 4a0755487ba080658f0916c89ba11c233d98fa83 ed1e7b4e52ac1293cfe488c58684e814d9d36668e5fd63213b08144de9edb089
GET /en/ca/pay/index_files/UserDefinedHTMLModule.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:43 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GpgnNLxXE9a2V7f1aSJ70KsTfS3hOiSNTHhfFMDANdRRLKCosIJKlcoZ82IZm005v332xTvHRbdRunnRcB4gpSm%2BX5aLscr9Jdc0dziNblLcNZjtQOTXB24jnZ3OwZrnmJ2IRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc24c9f56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/jquery.autocomplete.css | 104.21.3.126 | 200 OK | 853 B |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/jquery.autocomplete.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeASCII text, with very long lines (980), with no line terminators Hash364581ae060958335357118d90b09710 1838b8f4ccacffbadacfbd14fd0be7e7fc123294 7b9c36414ff2be8148e6f8aa2c075ee0e1281c0cded91042856e368c72fbfd20
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/jquery.autocomplete.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:08 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tZGfHTflJ3fbv4E8AOQU9344HrrVodR0TwgU2s%2F03jMJm3RR12c2TwGAkqj3b6arHKQW81krUA9i6XohnAton9imsbjm6jNWztDyThpGzIg5X0FV6GbVnAe5bh7F%2FeBwhhkdmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf89fd56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/foundation.equalizer.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/foundation.equalizer.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash5c6a697c882ea508e25cd60071aed1d5 20bf2e3b9ee1c26002075924ef24f06fa135ba57 52c297d20f7ac6caa5f9d8dd7d3afbce915b87a0b232df4bd4b96e0f0db374fb
GET /en/ca/pay/index_files/foundation.equalizer.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:44 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lhp5DfM0EBx4Gu0BZXjjAe5j7R0M10249eR0w3UrD%2BXuYSrW6ztvQwCFVHli7six3QBsYEcbxTBI13TmXJqL5KaAolGIoFUxJW47aD1db9mFnAzImsZPq3kG8b3PA10R9SEhFA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc24caa56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/cwc.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/cwc.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash61bb7b7e876b10312700940e322b1911 782fc4819955ac66c6341e61cc8e9f4753c566d3 e43f9550d9c0dbb6c398fff67457e37fa6535d1fbd36e27965e1ac2fbf891daa
GET /en/ca/pay/index_files/cwc.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:51 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O5ty1rbyxrjTQ3U4EA7qjiyx73BBD4ul39KI4XmDz%2FmCvKQQ5dy%2FE5NhwpA290GHq3ulKdssYMR46F8iJjNLh%2FWx%2Btm5euEwEIzIEyGVK%2BCcGCPupzk7ZrTcOxmwlzEgjrZ%2FoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc27cfb56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/EX69ea3e2d8d9a41d99a46ba219e259885-libraryCode_source.min.js | 0.0.0.0 | | 0 B |
URL GET latestuploads.net/en/ca/pay/index_files/EX69ea3e2d8d9a41d99a46ba219e259885-libraryCode_source.min.js IP0.0.0.0:0
Requested byhttps://latestuploads.net/en/ca/pay/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en/ca/pay/index_files/EX69ea3e2d8d9a41d99a46ba219e259885-libraryCode_source.min.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| latestuploads.net/en/ca/pay/index_files/stylesheet.css | 104.21.3.126 | 200 OK | 148 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/stylesheet.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
Size148 kB (148405 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en/ca/pay/index_files/stylesheet.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:14 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eq%2FfbrbPrHW5Xg4bhFrC1Hu3v%2FdmeYKPTfFhoA6zoUcWSaDrtFfff9F4Rb8PvQeEErN%2B3U5o25%2F6Ci%2BHC9y%2BiTk3wxbsBHKpG8AhZIdJ2fpdbMXgLCeQX4VVtsoT1DO%2FqjldcA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc11b8256a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/jCarousel.min.js | 104.21.3.126 | 404 Not Found | 51 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/jCarousel.min.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash3f866e970c6b3bcb9f0195f031a95980 c4a96745e41953c02676caef945efda0902f1415 ea72511636d0a730423934399af272f733c02ae339ec53c7967ec5ef7128bc39
GET /en/ca/pay/index_files/jCarousel.min.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:45 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=egIp9tr6%2B7X2kqwsLtcXYXea8kU1LUgrZIzd3I%2BXKySR1cyP19c%2FCTN1o0Gd4mJKorUZ1jDIrYjFWV9Vm%2BbcZvcupqtZX9hYS6OifhIoyp4s%2F0mXO2wR9walnF8GGYfyoi7D%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc26cd856a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.canadapost.ca/cpc/assets/cpc/img/icons/arrow-down.svg | 104.110.20.42 | 301 Moved Permanently | 185 B |
URL GET HTTP/1.1www.canadapost.ca/cpc/assets/cpc/img/icons/arrow-down.svg IP104.110.20.42:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerDigiCert Inc Subjectwww.canadapost.ca FingerprintE3:FC:14:7A:D5:BD:99:E6:02:72:3A:7C:D4:11:C2:B0:56:C6:E0:A5 ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cpc/assets/cpc/img/icons/arrow-down.svg HTTP/1.1
Host: www.canadapost.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/arrow-down.svg
Date: Fri, 19 Apr 2024 10:35:39 GMT
Connection: keep-alive
strict-transport-security: max-age=31536000; includeSubdomains; preload
|
|
| latestuploads.net/en/ca/pay/index_files/pubads_impl_2021040101.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/pubads_impl_2021040101.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash3794e4172b433059815fae0d9e21dd70 0e68c84571c25e5f9ed9da68133eb91bb1fe961b 1d3a49c44cee5ef16eead74532d34912380f82742eca64e2c8e33a277146f2c2
GET /en/ca/pay/index_files/pubads_impl_2021040101.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:44 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2tNGaZ9YPcnD%2FmWAVa0RaY6psO99YLF%2BLRdNEU8zyjhPOdZWUxUmuM67%2BaEq285VDSD685oovn2WUSEzwI6Pf000ksVEztJA0hhXx0J7IeclfGDL1WAfwHS6pjyhYdm316AGaw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc25cba56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/js(1) | 104.21.3.126 | 200 OK | 90 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/js(1) IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (2127) Hashf7dbefbdd69deab37fa1c2e07673f78a 6f4cc5415398f225cfaa070a491f713706b991c8 dc7d43d665ea2e41e24d9f45720f4e6eff16018ee4477997e6f3fda5c78dd918
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/js(1) HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
last-modified: Thu, 08 Apr 2021 23:06:06 GMT
cache-control: max-age=2592000
expires: Sun, 19 May 2024 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X4XbXCcFUJUF6t9ahmUvvGjYDygnRyfGnfxOX6ZYEZLJ3lTS1cn%2F7SmeN7APFDrMzrjwvOBC%2F7tsWQypoPFB3idUkXRkyu5RzGaV7QR4efn3dqS%2BGHnhu9Hx2A7Oeaz8CCj0dQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc28d1356a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/cwc.css | 104.21.3.126 | 200 OK | 196 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/cwc.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size196 kB (196015 bytes) Hash4241d06bdb450c0bd4308e9c7e2ab062 5fa44a2f9c93ca16ae4e108afbec96675a78fbb2 a61def1cd61dedd0cccbcefcf32bf6e718434265d41fe7a16ab367fed074e57b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/cwc.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:08 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xq54xy0sp%2FTUgFLsjmSuyDugnQjswcc4BClNgX2jCYxmBNamgOXrOkqxFDwRqAVlJf12rVYUI%2FG4augDJmXLfbIYPOMqE0aDmcnQ9%2BvYsSOu4lubLvoPrxsqVmlgj90TFZXxcA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf79ee56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/jfe/static/dist/c/mp.68f8d86dd01e19ae1c35.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/jfe/static/dist/c/mp.68f8d86dd01e19ae1c35.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hashfd4bb78c634717e14491f6b8ac8d9742 fb399fcd5664506cfd167416908646834044e364 46f498c027796b373d335db62768619122f4d3a19e89a904870601bb9404d607
GET /jfe/static/dist/c/mp.68f8d86dd01e19ae1c35.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:54 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lVxiPuQdjsDzYRnETg7rpu1Cb08PuFFH%2F7%2F4E7Sdz1RrGnN3lVAgwLe0PJZonkq2lrEDNHYiqV09CglrTxuG6RpoLqlCFStceguoxP9o1tnnvWUQ1ZDkThusOoSa0PoU2ZbUTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fcf398b56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| store.canadapost-postescanada.ca/home | 23.36.79.8 | 200 OK | 0 B |
URL GET HTTP/2store.canadapost-postescanada.ca/home IP23.36.79.8:443 ASN#20940 Akamai International B.V.
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerLet's Encrypt Subjecttp3.kibocommerce.com Fingerprint0C:9F:4E:78:6D:15:FC:72:1E:E1:32:8B:F4:88:93:C3:51:E1:8E:E9 ValidityWed, 27 Mar 2024 16:26:26 GMT - Tue, 25 Jun 2024 16:26:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /home HTTP/1.1
Host: store.canadapost-postescanada.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-encoding: br
access-control-allow-origin: https://store.canadapost-postescanada.ca
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-vol-correlation: 9f5133c2c40d43e58df23273822e6fa5
content-length: 9553
expires: Fri, 19 Apr 2024 10:35:53 GMT
cache-control: max-age=0, no-cache
pragma: no-cache
date: Fri, 19 Apr 2024 10:35:53 GMT
set-cookie: sb-sf-at-prod-s=at=dcl1H08wWJid9r%2FBHozezkgzXjIQQ3dg%2BoUOFlNSDFTsaigMsiZWZ%2FEJdomf97lXDMjWlHpR1fozReTuSUq%2BldnzCMBht7YoJS1a0kvjaWr4H4I%2F7CfZQKQL5VesktGe0lvnXgtL%2BqJLcEgc%2FQLE9vKJb4nrzSVyu4VfE3t6H04tIdH%2B%2BbzPcu%2B0wxjyguHK62T%2FpFcAR1yAJ1avciJaXuphS2xOMbv8L8o69E4hDZKF7BmxlI5OcF%2BBp8fJRx1FQDk4e1r%2B9ghT%2FhyWzsH1CYsMDWYwh9mRSUAKvl%2BqNs3W6rTAr7FFFmItja0t%2B02cn%2BbVjk5JeU4%2FfFScBIZpFw%3D%3D&dt=2024-04-19T10%3A35%3A53.4038568Z; path=/; httponly
sb-sf-at-prod=at=dcl1H08wWJid9r%2FBHozezkgzXjIQQ3dg%2BoUOFlNSDFTsaigMsiZWZ%2FEJdomf97lXDMjWlHpR1fozReTuSUq%2BldnzCMBht7YoJS1a0kvjaWr4H4I%2F7CfZQKQL5VesktGe0lvnXgtL%2BqJLcEgc%2FQLE9vKJb4nrzSVyu4VfE3t6H04tIdH%2B%2BbzPcu%2B0wxjyguHK62T%2FpFcAR1yAJ1avciJaXuphS2xOMbv8L8o69E4hDZKF7BmxlI5OcF%2BBp8fJRx1FQDk4e1r%2B9ghT%2FhyWzsH1CYsMDWYwh9mRSUAKvl%2BqNs3W6rTAr7FFFmItja0t%2B02cn%2BbVjk5JeU4%2FfFScBIZpFw%3D%3D; expires=Tue, 19 Apr 2044 10:35:53 GMT; path=/; httponly
_mzvr=XOjWoBi93kC169YTAqjTjQ; expires=Sat, 19 Apr 2025 10:35:53 GMT; path=/; httponly
_mzvs=nn; path=/; httponly
_mzvt=dPlA4wLbSEi6kSzNubsf7w; expires=Fri, 19 Apr 2024 11:05:53 GMT; path=/; httponly
_mzPc=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; path=/
ak_bmsc=E20514A298DFCF2A219661D1ADDC6101~000000000000000000000000000000~YAAQBE8kF7YlPOyOAQAAqE3t9RcIZ0URA+uwQ8wKW3J/D6w4bPQstsb4PxZLrK9IP9JgZSvLqqEbmFuwwsgVkbk0beTz53o8fqkR8b7K2fUtmigEOEuU5s6ZADKKR557O9bcOsZUmcqXrZY2kno90j8cs6S2pP/gXU0dqtX2Ox36+Jkuxm2VvzSHfg7KM8LqPfi3KcXKyB9Hlq0dpLMAxyKz9kwrjYW/VgHuvzWj6H9zqTw0zj/LGPDMhcD5p0tUzR3VOh0946W/osxtl3J3Ql3Sb0DqS7iObBHD0qzuN+x1jODlEij2Pg8MQ9UQAAWCFwlz7bD8l6ldpswgoK//xaCOPK/UFLFsFVJ6xLD8x00DAQn8nRR5//EKh5yH2Ss9L+3Nyn6E5mKDRwTCU+ylEAx9TVMuF3v1tA==; Domain=.canadapost-postescanada.ca; Path=/; Expires=Fri, 19 Apr 2024 12:35:52 GMT; Max-Age=7199
bm_mi=4B465DD98E8A5812B79936059E35C6AC~YAAQBE8kF7clPOyOAQAAqE3t9ReMIoeX2eFjx7QE+xc/yVWiduTi2i/ohjm+JnRKXpz2o5u7uridzKP82u9J+Jdfd/lsN1yzvnhvpMEaW0aQXFAaqDi+IKEyuZeP/2AshakoB48i457r6P0sxxFpOVU56AJHPcmM0mP/zpWKnRFSYHSlZSvLghnWCAm//RHlA0Z8zxu2lBJg0Ae1vwnLKJsXCAZowBlE51PDP1fqeQXI1JwQ0hiAoof19HTCLRPkDy5URFnnjXVwkjTs2AjbjE+OzJy3xL8ta6Nlb21/Kk6dj4DPEPPuelNxI957FhPowsHKM8Z7YuLUv76Tc5K2AFI=~1; Domain=.canadapost-postescanada.ca; Path=/; Expires=Fri, 19 Apr 2024 10:35:53 GMT; Max-Age=0; Secure
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload
X-Firefox-Spdy: h2
|
|
| latestuploads.net/en/ca/pay/index_files/function.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/function.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash0bf61c977083e74ba06f6f61f0293cb0 1a881d5007d73a9ba2cf41257981127ec59007ae b3330ede177b6e64c18e39824fd5592e3536e736a5d976798d127d4244eb5be4
GET /en/ca/pay/index_files/function.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:44 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jq4mgv%2BPkj5JBM%2FpMFg2Empan5dXrm8NMUAoQkPsdKPJQtK%2BQ4fJXFGB1I8SufRbRn4YtWnYqH80%2Fmyi6RNayK3VY67PW0Xl77cvqiB4I6hi1Lp19a%2Fjag4NpKlw4tUJ0blyPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc26ce356a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/prototype.213678de24c47bc84650.js.download | 104.21.3.126 | 200 OK | 93 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/prototype.213678de24c47bc84650.js.download IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash213678de24c47bc846508f32e964fee4 7aff333b1094030577c4323f6f448331ac6f2d07 9095350ff52f4d175f3ad644277a5a237d8489e7f586b69eef2b2268811a716b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/prototype.213678de24c47bc84650.js.download HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:14 GMT
cache-control: max-age=31536000
expires: Sat, 19 Apr 2025 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8umf9htz6UZUhenHK75HA65PK7Rf2ugPCSXglLu1NrU3Vko1N2JVOUrWxsuw7GyUuXhKulZWft7caXa0ahtmgtc37Xp2muqtxqIw4Ic3B28OVkNST%2BEMCwoEjMaW2OsnB14VMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc30dc856a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/aaron.css | 104.21.3.126 | 200 OK | 37 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/aaron.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeASCII text, with very long lines (561), with CRLF line terminators Hash829127fee345135c814992bc1a0a178c 00a33938a92f4f37641039ced1484ff4702d5783 5de5bf760b612ecdf32e402fb1328bf7600938244fce9a093dc6f62ec5e784a7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/aaron.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:08 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2j6KD5wxACSK9ivakl732Uh36qR3jkSkjbac1%2BbNxsjXptOTht6KNzOyzO2UpeRFFV%2F0luw8qfwcA95GfM8w09T5p51ZiHio40hffJKLeJvWQzM35W4W9zwvVwJzj7JIcTfHGg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf79f356a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/uwt.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/uwt.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hashcb101918f944b6e30abb258e82827ef5 3bd0f40548e4dd4ee32ff4f26eaa015091f8697e c2bf2db342655a4803abb86bbf3fe0c0b4965bf928242cf1e3172ecb5c9d77aa
GET /en/ca/pay/index_files/uwt.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:41 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OZiNMh9eVEAWWFy833VcBQE2F3l%2Fqauwuk1UASuS1IUYMdWIv5JLDppH0hODmfsAYj7AHIy%2BVoihPL5q0gArmFfo%2FnKcD%2FkCgHfTP7ZZpjHDD%2BVgMyYybeiZjdbtlapEpbaekg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc29d2a56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/cp_print.css | 104.21.3.126 | 200 OK | 3.1 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/cp_print.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeASCII text, with very long lines (3328), with no line terminators Hashdb8219ddb5bfd650a812fd9607ae6e7a bcddc6cb3aea42017f7feb0f093d2bf7d20cfe0d 4742da0ebdfbd98e240aa2350807f3b5a4c6b7c6a07d39edcc4401fa4d47b9f2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/cp_print.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:08 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H%2FAhVvLcGBVBA2d6KuSKbPIIMrzHPXnoXtflDdTo%2FPlXA8fHc%2FTLdNe3fTqyb8dVfUyXs19%2B6%2BVedH8KWQ0Bzin09Yj%2B3fYfeU8WOZggKFEe35xipPIjb%2F9PMEO07zChd2BQKg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc29d3c56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/vpo.css | 104.21.3.126 | 200 OK | 43 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/vpo.css IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeASCII text, with very long lines (303), with CRLF line terminators Hash172013ff6ecd2335be03949b6fc226f6 7e98f2ff2ee73539029e23c4373b8cb1dd46b821 fd23dbcbd7fdda3343291256d3339bdd3adeafe6049d9ef7f7a2937409bac4d6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/vpo.css HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:08 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1yVVjVcShS9R9G3hxz2WPEtxGSxTcIkCg9IcoTdai%2F8Z8pPihIPFFjd0QuKvw6G2Vq6RZxhMygiN4TW6ZSUfmf9EwfGr0eamcTPMOQKM%2BUW9XY1NpDisMDUI4uDgWzfZ9Y00bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf79ed56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/lib/js/Acc_Carding.js | 104.21.3.126 | 200 OK | 1.5 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/lib/js/Acc_Carding.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (1578), with no line terminators Hashc18622b83278a68cc2ded90a1335118c a59b364db1ab57d436bfe5985893116ee5e48064 97df62f581d7ecaa461320b30126410217263d391d66ac8ce8ff04d044d1aad8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/lib/js/Acc_Carding.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Sun, 11 Apr 2021 07:20:24 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w%2FLIwXU021lvpymjphI3l1QUTgi4vF2esUOLWEnBzqKzYhxME5J%2FczE1JzBmmKRWfPa1VnK2tp02C1ZVcphvWS%2Fwz84EsAw5l3ZODPYAMJ4f27JQARwknmWROIgqX7aUp9CF%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc28d0a56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/prototype.213678de24c47bc84650.js.download | 104.21.3.126 | 200 OK | 93 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/prototype.213678de24c47bc84650.js.download IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash213678de24c47bc846508f32e964fee4 7aff333b1094030577c4323f6f448331ac6f2d07 9095350ff52f4d175f3ad644277a5a237d8489e7f586b69eef2b2268811a716b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/prototype.213678de24c47bc84650.js.download HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:41 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:14 GMT
cache-control: max-age=31536000
expires: Sat, 19 Apr 2025 10:35:40 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PCNrZ6o6yKW5C0lqNHeOXmGdLFNcukBK9tUoTyhGq1iH%2F7PJaUxWxe3TwJP3hpPDRN1Vy7xrltG6VkSaiFghd7FG8TT0Oaa8%2FWnc8EGPjvHqUL%2FVy71p2VDSDTCaxwq69tbCKg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc32de156a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/lib/js/jquery.mask.min.js | 104.21.3.126 | 200 OK | 8.2 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/lib/js/jquery.mask.min.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (8408), with no line terminators Hash2df11a850b2c383a5496827dc24a5bbb 1370b2368a82d53aa7d22e77f1d3571e94ea5aa6 41fda6e25714b894305cc1c72f0ed1375b919a79cd1889a06bb20dd7b80c5229
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/lib/js/jquery.mask.min.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:47 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 24 May 2018 18:53:56 GMT
cache-control: public, max-age=31536000
expires: Sat, 19 Apr 2025 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rMWCS2Ys8LF8gnOGllQHDOiIFQAlY4nGi81C2v8UhpGIau0DGT75yK2Q8ImZS3SyIxAfe9qG9UJ4IzF3BDsDj09mSkwdzPJAQWHhlzceluJZaKqXJQD%2BElbxEA3XMWsOX7MPpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3ff55d2f56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/saved_resource(1) | 104.21.3.126 | 200 OK | 62 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/saved_resource(1) IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (61038) Hashc113dd0d5e80ed67d5a62a54b7cf86dd 064306dcf59a114df2265e2caf298a113ffc86db 03fc69968cf2c297f3006f23bd13c7c3344af5a73a64ea16b37a21512b962a6b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/saved_resource(1) HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
last-modified: Thu, 08 Apr 2021 23:06:12 GMT
cache-control: max-age=2592000
expires: Sun, 19 May 2024 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=srIEwtxGQWrkyM1D%2F%2BSL8dxmmXmHc0YtbODUhejM%2Bs0ctxzkhIbZVXUqP5zsh%2B4vTGkbZGhoDnO5Ki51ToqMmlfjyfu%2FSWYoSxFJK7c5RTLAgEUnOWSDFfhtyvvGX0xJ1a8iPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc24ca556a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/saved_resource | 104.21.3.126 | 200 OK | 62 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/saved_resource IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (61038) Hashc113dd0d5e80ed67d5a62a54b7cf86dd 064306dcf59a114df2265e2caf298a113ffc86db 03fc69968cf2c297f3006f23bd13c7c3344af5a73a64ea16b37a21512b962a6b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/saved_resource HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
last-modified: Thu, 08 Apr 2021 23:06:12 GMT
cache-control: max-age=2592000
expires: Sun, 19 May 2024 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p6q55A%2FVZSJ6Wwye%2BTM5ERPwH7lhRgHZshz0Bu9UGhEBM3DcYEAV39gm0hw48de4IDaNY328UHopyZTL2Ls5p5r2RB1DbNEdy674hsIvyutr6CxHjLe3QPgnGV4P7k3kUc%2BkHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc24ca756a2-OSL
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/db.21026c4133e1c59eaf45.js.download | 104.21.3.126 | 200 OK | 2.7 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/db.21026c4133e1c59eaf45.js.download IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (2769), with no line terminators Hashf465df7704cea2dabf664fca22c360ca 5d0817c96d387bda792b9d4e0369af553098e64a 25dc364c395ea83b9b9907ec1466c562c0bff680890a9437cdf044574d7cee1b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/db.21026c4133e1c59eaf45.js.download HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:40 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:14 GMT
cache-control: max-age=31536000
expires: Sat, 19 Apr 2025 10:35:40 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aDHXQ%2FLcP9UQL%2BPnPhdfi3mW8e7PkRu0wjHXZnmoF5egz2%2FX8my%2F9yGB3Q6PP5dHZKRhWtJDWt5qgmtUL9SmsNQxqyF4czH%2FWLC2pUm2zHZnrtUABT0iLV6gSX3c3GRT5hrUEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc31dd556a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/gov-canada-logo.svg | 104.21.3.126 | 200 OK | 14 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/gov-canada-logo.svg IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeSVG Scalable Vector Graphics image Hash629fbca11397080efcc19aae5dc90f80 fa32a7429c248ae0156705a960509f8a14b46a1a 6a50626ef34e5da6014662089f0775c6187d23e5c22379da71203848eac50ee3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/gov-canada-logo.svg HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: image/svg+xml
last-modified: Thu, 08 Apr 2021 23:06:12 GMT
cache-control: public, max-age=10368000
expires: Sat, 17 Aug 2024 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=egjrupyzrFGFiAeU5mml9NuAeOw6C7FovuFi%2Btp%2BmngMM7DNvmcTiKDLe0HwyuP5g8m2eW3RnNnAT2TNDtOGRsgY%2FClIeukbOBgN8D%2B4bTAaWooPmVM7vKj5dzd4plWZ0hTtqw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf9a1f56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.canadapost.ca/cpc/assets/cpc/img/icons/toolbar-cg/feedback.svg | 104.110.20.42 | 301 Moved Permanently | 724 B |
URL GET HTTP/1.1www.canadapost.ca/cpc/assets/cpc/img/icons/toolbar-cg/feedback.svg IP104.110.20.42:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerDigiCert Inc Subjectwww.canadapost.ca FingerprintE3:FC:14:7A:D5:BD:99:E6:02:72:3A:7C:D4:11:C2:B0:56:C6:E0:A5 ValidityTue, 19 Mar 2024 00:00:00 GMT - Tue, 18 Mar 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cpc/assets/cpc/img/icons/toolbar-cg/feedback.svg HTTP/1.1
Host: www.canadapost.ca
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://www.canadapost-postescanada.ca/cpc/assets/cpc/img/icons/toolbar-cg/feedback.svg
Date: Fri, 19 Apr 2024 10:35:39 GMT
Connection: keep-alive
strict-transport-security: max-age=31536000; includeSubdomains; preload
|
|
| latestuploads.net/en/ca/pay/index_files/jquery.smartbanner.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/jquery.smartbanner.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash08085e180c4feb356d6e397a03e6b97c 00c3d663e521f055f0827b82629c83fff3190365 983bd47578c004acbcbb96a16cbc4026038947c9daf09f17c846ffd7a463c8bb
GET /en/ca/pay/index_files/jquery.smartbanner.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:43 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EREsVfbpUhqqsE1ynWgbdN82mwgVBs55PXbdcB2WUpFJeM%2Bi3WyaUsIca%2BtRGb7WHAdsOx2YP1gEYPG3dWHOFwEn7nUTdqmuuKH254Lr2T4h1zNgtyafKQKWTDM%2BgbGCky3iDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc25cbf56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/google-dfp.js | 104.21.3.126 | 404 Not Found | 48 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/google-dfp.js IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeHTML document, ASCII text, with very long lines (9462), with CRLF, LF line terminators Hash5f7ef66f59f8c098b850344ebe231b19 b3ed13a2ad4f7daa9d4c91cc915a55d8cf9b0160 3461839321e945aef1264a60634549f30589a4e2e5cb186909f0d7f22d314909
GET /en/ca/pay/index_files/google-dfp.js HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 19 Apr 2024 10:35:43 GMT
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://latestuploads.net/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E8v9Nx5Bh2S5XCuBjQD%2FQD2Eq6NjTahy5MO622pDHteiE%2F3LiQGjQTQ86o02hcUuA%2FdL8ZqW3Bz2GvRFjpFhmIXOdBBCxvWst1rGTd1jWvA6tVNkv5JNaTLelH9%2FWKEnKcwX3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc26ccf56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/cpc-main-logo.svg | 104.21.3.126 | 200 OK | 12 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/cpc-main-logo.svg IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/ CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeSVG Scalable Vector Graphics image Hash54d184ae43730a823c8e6c896a882d78 95e39617a22a4e9e70443159830fb56170853ac1 e467e89a41e68909313eef448847f3446650158fb5d046295fea70fd7d776b87
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/cpc-main-logo.svg HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:38 GMT
content-type: image/svg+xml
last-modified: Thu, 08 Apr 2021 23:06:12 GMT
cache-control: public, max-age=10368000
expires: Sat, 17 Aug 2024 10:35:38 GMT
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8ox%2FUEYuzGwKEVtxBix2pavA8%2FCwdrtN83kOJnzra5xofUX9Zt8%2FDHkIrSwYFHzDiqui2YUas1yVADk%2FaYVOqqhV6%2FNSilhfwl0jS9ZRYQuTh49E0UXwkahXJP01vBTx%2B8v0sg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fbf8a0956a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| latestuploads.net/en/ca/pay/index_files/jsApi.8da1775e8131fb08b25b.js.download | 104.21.3.126 | 200 OK | 14 kB |
URL GET HTTP/3latestuploads.net/en/ca/pay/index_files/jsApi.8da1775e8131fb08b25b.js.download IP104.21.3.126:443
Requested byhttps://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html CertificateIssuerGoogle Trust Services LLC Subjectlatestuploads.net Fingerprint3F:05:4E:A6:22:92:83:B3:B1:2B:43:75:74:ED:78:3B:4D:68:2A:31 ValidityFri, 05 Apr 2024 20:17:41 GMT - Thu, 04 Jul 2024 20:17:40 GMT
File typeJavaScript source, ASCII text, with very long lines (14066), with no line terminators Hash8da1775e8131fb08b25b4797288456ec 8e5f01a257a0fac6d33486411d6d3b0602025246 9cb6997fba02986945ff79d03c0eb1b8afb0d8a06c4cf46c2015608d48915056
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Canada Post |
GET /en/ca/pay/index_files/jsApi.8da1775e8131fb08b25b.js.download HTTP/1.1
Host: latestuploads.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://latestuploads.net/en/ca/pay/index_files/SV_71iOFlig0vNugpn.html
Cookie: PHPSESSID=fd9d8f3df143290f0465fbb3e12f5ca2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 10:35:39 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 08 Apr 2021 23:06:14 GMT
cache-control: max-age=31536000
expires: Sat, 19 Apr 2025 10:35:39 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JrGe%2FnHorcx%2FckAyPtYAsOZYVoMrfC%2FJ5BYBu0Y4HUiqXEannQvCr9fDZnjQKFuCMv73F%2B6FZX9X4t3kAfbLcWI5mpSiTTKLPsGIu5vS7HXM9ORA38GxnCocCzkw2RvpG2eurg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876c3fc31dd056a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|