{"report_id":"5d66a2cf-d0f0-416c-a5fa-81324a4b897a","version":0,"status":"done","tags":[],"date":"2026-09-04T14:43:55Z","url":{"schema":"http","addr":"us-usps-xf.xyz/","fqdn":"us-usps-xf.xyz","domain":"us-usps-xf.xyz","tld":"xyz"},"ip":{"addr":"103.224.182.219","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ww38.us-usps-xf.xyz/","fqdn":"ww38.us-usps-xf.xyz","domain":"us-usps-xf.xyz","tld":"xyz"},"title":"us-usps-xf.xyz","dom":{"size":32862,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14498)","md5":"0f1a55afc9a189276afd654a2ec828a3","sha1":"e48b584f16052e906166fb4116fae13d09be3214","sha256":"549a258694ec778a49c360f2f9a49091b72a5d4a8ea8b8ecc842a85e8aca57ae","sha512":"8a6fe97978339a6bf5e3bda3810678ff68f75b586686d3e094ab0bdff825b5ffe330283276982be59c0cb2ae418a0d8384b280643c089baa1fbb0dbb2ccae101","ssdeep":"384:Da4IakirSeo5DpNJ/FssDY5/ICs65Ymc99vD/Mgbo2ej/uR5WFdzJCIo6YnbxWEL:WOSeo5XssDBClYT9NP6FdzkIGbxWEL","tlshash":"d7e21b3132f0257d525b416f71b9eb1cb1b5a271dd5e4870e0fc98186a8aee107b2fa8","dom_hash":"domhash7967b293cfc0038c184b3872f4ce5b8e","first_seen":"2026-09-04T14:43:58.797891Z","last_seen":"2026-09-04T14:43:58.797891Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"us-usps-xf.xyz/","fqdn":"us-usps-xf.xyz","domain":"us-usps-xf.xyz","tld":"xyz"},"ip":{"addr":"103.224.182.219","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T14:43:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":16}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"ww38.us-usps-xf.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"us-usps-xf.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"euob.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"realtimesearchresults.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"realtimesearchresults.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.consentmanager.net","ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2018-05-02","domain_rank":76668,"first_seen":"2021-02-08T22:33:57Z","last_seen":"2026-09-03T15:34:45.09759Z","alert_count":0,"request_count":3,"received_data":725511,"sent_data":1582,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"us-usps-xf.xyz","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-07-22","domain_rank":0,"first_seen":"2026-09-04T14:38:02.705799Z","last_seen":"2026-09-04T14:38:02.705799Z","alert_count":20,"request_count":4,"received_data":35932,"sent_data":2046,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"euob.northwavepoint.com","ip":{"addr":"13.249.8.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-04-16T09:06:21.216693Z","last_seen":"2026-09-03T23:18:58.832543Z","alert_count":1,"request_count":1,"received_data":141510,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]},{"fqdn":"yfdpco6.com","ip":{"addr":"208.91.196.46","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"domain_registered":"2025-03-20","domain_rank":0,"first_seen":"2026-09-03T23:04:48.711247Z","last_seen":"2026-09-03T23:04:48.711247Z","alert_count":0,"request_count":1,"received_data":27774,"sent_data":837,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ww38.us-usps-xf.xyz","ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"domain_registered":"2026-07-22","domain_rank":0,"first_seen":"2026-09-04T08:30:53.476962Z","last_seen":"2026-09-04T08:30:53.476962Z","alert_count":20,"request_count":4,"received_data":32672,"sent_data":2766,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]},{"fqdn":"s.cdn-fileserver.com","ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-08","domain_rank":1473336,"first_seen":"2025-04-11T18:11:28.393379Z","last_seen":"2026-08-31T14:03:31.701984Z","alert_count":3,"request_count":3,"received_data":39004,"sent_data":1735,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"obseu.northwavepoint.com","ip":{"addr":"34.251.101.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-04-16T09:06:21.210986Z","last_seen":"2026-09-03T23:18:58.958341Z","alert_count":7,"request_count":7,"received_data":7076,"sent_data":6253,"comment":"","tags":null,"fingerprints":null},{"fqdn":"l.cdn-fileserver.com","ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-08","domain_rank":962880,"first_seen":"2025-04-11T15:28:22.753596Z","last_seen":"2026-08-31T14:20:51.754794Z","alert_count":3,"request_count":3,"received_data":2720,"sent_data":10444,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"realtimesearchresults.com","ip":{"addr":"172.67.166.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-14","domain_rank":464056,"first_seen":"2025-03-28T05:14:07.92032Z","last_seen":"2026-08-29T14:08:30.941621Z","alert_count":2,"request_count":1,"received_data":73981,"sent_data":1532,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"d.delivery.consentmanager.net","ip":{"addr":"94.237.80.97","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"domain_registered":"2018-05-02","domain_rank":210318,"first_seen":"2021-07-25T16:27:48Z","last_seen":"2026-08-31T22:53:37.295534Z","alert_count":0,"request_count":6,"received_data":15544,"sent_data":5318,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=994\u0026%21Q=\u0026%21lAc=KeeV%2A%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_%2F\u0026%294I=\u0026%29I=-\u0026%29QABQ=\u0026%29bQ=\u0026%29bQH0=\u0026%2A%29QABQ=\u0026%2A%2ALQ=%7B%22%2A%2A22%22%3A%22wX%22%2C%22%2A%2A2eD%22%3A%22~D%2AI9%22%2C%22%2A%2AbV%22%3A%22%22%2C%22%2A%2A%2A2%22%3A%22d-%22%2C%22%2A%2A_bV%22%3A%22%22%7D\u0026%2A2=d-\u0026%2Ab_I=ffpCWnG3\u002622=wX\u00262AbQ=GCGpfp-3n\u00262K9~0=h%2AHCsb9e2\u00262K9~d=3TXfpR3Ct\u00262QH=XdCdp\u00262bQ=GzFn-td8P\u00262eVbQ=\u00264%29cLlbQ=H0\u002642e=TmBWw_m9SA_4IdW%2FcOrwOm_AI%2FSw_Omdd4O\u00264QH=\u00264Qe0=\u00264Qef=\u00264Qh~4b9=\u00264Vzq=\u00269eH=\u00269~IAA=f\u0026AIrqAL=KeeV%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_\u0026D%299s22sIWV=\u0026DQ%2AVA=\u0026DVLV=\u0026Hb=ftGGpdd--GnfdG3Gf0d\u0026I2AbQ=\u0026KeeV%2A=f\u0026L0eDVI=Q~hL4\u0026QI2~~~=\u0026Q~Ac=f\u0026SQVA=f\u0026SQVA29%2Ae=\u0026U%29bQ=ME+8T%28+uI%2Ae+i+0+5IHIL\u0026VbQ=GTX6fty7G\u0026b%2AbQ=-\u0026b9e2L=G7NUEtpNo%3AaFN%7CiIGN%3Ac3.1bq1qbY1JY%7CiwGN%3Aqbv1YJ1qq.13\u0026c%2A=\u0026e%2A2I=5fdC0\u0026hL4c=h9I\u0026hbQ=%2904Qd0IfidcGIiCGICiGpp%29idn4G-n%290Q-3c\u0026htmlsrc=1\u0026kkdd=H3%7C3%7CH%2AAn9\u0026l%2AKV=-\u0026lL%2AeV=-\u0026q%2AVI9c=-\u0026qSQ=C\u0026tpid=\u0026~%2AV4=-\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001788533008759032757816326975\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153607860816917616%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=OriD2QUIWzZDToaMPMtkyyQPYCaNoeZ9EHWbViG2KeILE5LR_Cf9aU6B-B35suAVb_-mJcIjdWM6V5zD0Y2kv1EK69DpQ6AwS4WEazeDsZHjn8Xx93aagnogBO4TKwV69fVjD1o5wNuh8XJPaSAkYqqNmcaknSZurg1s3Wu9iudFpvL0OMFRKGzcTndax4VftZVQAx70668%3D\u0026tchkpts=%7B%22prel2%22%3A1788533008990%7D\u0026stime=1788533008990\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252521lSg%252521%25252A%253DLwwn%25253A%25252F%25252FgtKgtntKA_CAxv%2526%25252Aewxnl%253D8p2%25252Ay%25261m%253DYfqq-RRIIq5YRqTqYeR%25262%25252Ay_%253D2Pl%25262m8%253D~ey8RelYKR_qlKDqlDKq--~KR5yqI5~e8IT_%252638n%252521%253DY%252638n%252521sPtw%253D%25268lsppp%253D%25268p%252521_%253DY%2526J%25252Atwn%253DI%2526JtLn%253DI%2526Lwwnt%253DY%2526Ppl%252521%252521%253DY%2526Pw1%253D%2526_t%253D%2526a~m8%253DOX%252B%252529ik%252BVltw%252BK%252Be%252B0l1l%25252A%2526d8%253D%2526dJ%252521_%253DLwwnt%25253A%25252F%25252FgtKgtntKA_CAxv%25252F%2526g38%253DD%2526gtnlP_%253DI%2526htmlsrc%253D1%2526kkdd%253D%25252AH%25257C3%25257CHA%25252A9n%2526ls%252521m8%253D%2526mPws%25252A%253DqEzaXf-zc%25253A%252528Wz%25257CKlqz%25253A_T4CmgCgmMC7M%25257CKHqz%25253Agm.CM7Cgg4CT%2526mtm8%253DI%2526nm8%253DqiUhYfrEq%2526ptny%253DI%2526s%252521m8%253DqDq-Y-IT5%2526s81%253DURDR-%2526sLPpR%253DTiUY-bTDf%2526sLPpe%253D2t1DNmPws%2526sm8%253DqFW5IfR%252529B%2526ss%253DHU%2526swnm8%253D%2526tmvl%253DYY-DA5qT%2526tpid%253D%2526ts%253DRI%2526tt%25252A8%253D%25257B%252522ttss%252522%25253A%252522HU%252522%25252C%252522ttswx%252522%25253A%252522pxtlP%252522%25252C%252522ttmn%252522%25253A%252522%252522%25252C%252522ttts%252522%25253A%252522RI%252522%25252C%252522ttvmn%252522%25253A%252522%252522%25257D%2526t~8%252521Z8%253D%2526wtsl%253D0YRDe%2526x8tn%252521%253D%2526xn%25252An%253D%2526x~PNssNlAn%253D%2526y81%253D%2526y82pymP%253D%2526y8wY%253D%2526y8we%253D%2526ynFg%253D%2526ysw%253Di6ZAHv6P3%252521vylRA%25252F_jSHj6v%252521l%25252F3Hvj6RRyj%2526y~_%25252AJm8%253D1e%2526~8%252521Z8%253D%2526~l%253DI%2526~m8%253D%2526~m81e%253D%2526~yl%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"172.67.166.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe43622b86a9293f7d94436142bdfdc6","sha1":"01ef22d8f3292bea2b0cfa63e49be5ee758899eb","sha256":"f06061820c8cc9e6d88231bddef898d9ce4a8326f6e00e30e0aca3f924ad3dd4","sha512":"a8cf2feaa0a396472300a52b5d37f123be2249d274c947da255ba4f99a644139d92e010b65461b9575a4e63cddb1e717a085282c435d182186b0e51885f654d5","ssdeep":"","tlshash":"3e70008880202a0000e0080c030323b0238080a88cc28000822ea0033080e030288a8a","size":24,"data":"","first_seen":"2025-03-08T00:25:13.703666Z","last_seen":"2026-09-04T18:02:51.897116Z","times_seen":217601,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=994\u0026%21Q=\u0026%21lAc=KeeV%2A%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_%2F\u0026%294I=\u0026%29I=-\u0026%29QABQ=\u0026%29bQ=\u0026%29bQH0=\u0026%2A%29QABQ=\u0026%2A%2ALQ=%7B%22%2A%2A22%22%3A%22wX%22%2C%22%2A%2A2eD%22%3A%22~D%2AI9%22%2C%22%2A%2AbV%22%3A%22%22%2C%22%2A%2A%2A2%22%3A%22d-%22%2C%22%2A%2A_bV%22%3A%22%22%7D\u0026%2A2=d-\u0026%2Ab_I=ffpCWnG3\u002622=wX\u00262AbQ=GCGpfp-3n\u00262K9~0=h%2AHCsb9e2\u00262K9~d=3TXfpR3Ct\u00262QH=XdCdp\u00262bQ=GzFn-td8P\u00262eVbQ=\u00264%29cLlbQ=H0\u002642e=TmBWw_m9SA_4IdW%2FcOrwOm_AI%2FSw_Omdd4O\u00264QH=\u00264Qe0=\u00264Qef=\u00264Qh~4b9=\u00264Vzq=\u00269eH=\u00269~IAA=f\u0026AIrqAL=KeeV%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_\u0026D%299s22sIWV=\u0026DQ%2AVA=\u0026DVLV=\u0026Hb=ftGGpdd--GnfdG3Gf0d\u0026I2AbQ=\u0026KeeV%2A=f\u0026L0eDVI=Q~hL4\u0026QI2~~~=\u0026Q~Ac=f\u0026SQVA=f\u0026SQVA29%2Ae=\u0026U%29bQ=ME+8T%28+uI%2Ae+i+0+5IHIL\u0026VbQ=GTX6fty7G\u0026b%2AbQ=-\u0026b9e2L=G7NUEtpNo%3AaFN%7CiIGN%3Ac3.1bq1qbY1JY%7CiwGN%3Aqbv1YJ1qq.13\u0026c%2A=\u0026e%2A2I=5fdC0\u0026hL4c=h9I\u0026hbQ=%2904Qd0IfidcGIiCGICiGpp%29idn4G-n%290Q-3c\u0026htmlsrc=1\u0026kkdd=H3%7C3%7CH%2AAn9\u0026l%2AKV=-\u0026lL%2AeV=-\u0026q%2AVI9c=-\u0026qSQ=C\u0026tpid=\u0026~%2AV4=-\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001788533008759032757816326975\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153607860816917616%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=OriD2QUIWzZDToaMPMtkyyQPYCaNoeZ9EHWbViG2KeILE5LR_Cf9aU6B-B35suAVb_-mJcIjdWM6V5zD0Y2kv1EK69DpQ6AwS4WEazeDsZHjn8Xx93aagnogBO4TKwV69fVjD1o5wNuh8XJPaSAkYqqNmcaknSZurg1s3Wu9iudFpvL0OMFRKGzcTndax4VftZVQAx70668%3D\u0026tchkpts=%7B%22prel2%22%3A1788533008990%7D\u0026stime=1788533008990\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252521lSg%252521%25252A%253DLwwn%25253A%25252F%25252FgtKgtntKA_CAxv%2526%25252Aewxnl%253D8p2%25252Ay%25261m%253DYfqq-RRIIq5YRqTqYeR%25262%25252Ay_%253D2Pl%25262m8%253D~ey8RelYKR_qlKDqlDKq--~KR5yqI5~e8IT_%252638n%252521%253DY%252638n%252521sPtw%253D%25268lsppp%253D%25268p%252521_%253DY%2526J%25252Atwn%253DI%2526JtLn%253DI%2526Lwwnt%253DY%2526Ppl%252521%252521%253DY%2526Pw1%253D%2526_t%253D%2526a~m8%253DOX%252B%252529ik%252BVltw%252BK%252Be%252B0l1l%25252A%2526d8%253D%2526dJ%252521_%253DLwwnt%25253A%25252F%25252FgtKgtntKA_CAxv%25252F%2526g38%253DD%2526gtnlP_%253DI%2526htmlsrc%253D1%2526kkdd%253D%25252AH%25257C3%25257CHA%25252A9n%2526ls%252521m8%253D%2526mPws%25252A%253DqEzaXf-zc%25253A%252528Wz%25257CKlqz%25253A_T4CmgCgmMC7M%25257CKHqz%25253Agm.CM7Cgg4CT%2526mtm8%253DI%2526nm8%253DqiUhYfrEq%2526ptny%253DI%2526s%252521m8%253DqDq-Y-IT5%2526s81%253DURDR-%2526sLPpR%253DTiUY-bTDf%2526sLPpe%253D2t1DNmPws%2526sm8%253DqFW5IfR%252529B%2526ss%253DHU%2526swnm8%253D%2526tmvl%253DYY-DA5qT%2526tpid%253D%2526ts%253DRI%2526tt%25252A8%253D%25257B%252522ttss%252522%25253A%252522HU%252522%25252C%252522ttswx%252522%25253A%252522pxtlP%252522%25252C%252522ttmn%252522%25253A%252522%252522%25252C%252522ttts%252522%25253A%252522RI%252522%25252C%252522ttvmn%252522%25253A%252522%252522%25257D%2526t~8%252521Z8%253D%2526wtsl%253D0YRDe%2526x8tn%252521%253D%2526xn%25252An%253D%2526x~PNssNlAn%253D%2526y81%253D%2526y82pymP%253D%2526y8wY%253D%2526y8we%253D%2526ynFg%253D%2526ysw%253Di6ZAHv6P3%252521vylRA%25252F_jSHj6v%252521l%25252F3Hvj6RRyj%2526y~_%25252AJm8%253D1e%2526~8%252521Z8%253D%2526~l%253DI%2526~m8%253D%2526~m81e%253D%2526~yl%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"172.67.166.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f6ea0400db20261648725906fd9135f","sha1":"a33b963e02c6cf7150a3fdbcc19fe13c59cd1f28","sha256":"2fd7f21b444b025002c1947c52294e6e0c1b16183bdc9c8ee005dc29d04e0138","sha512":"004b1e33457b28b7487c8cb04552ffef05726d7f55a87099c14ddf100f581afdbbbb5b2be73c990fc4df6270c51d2b9c605ae0f5dcd9ec83369d4d05c551a28b","ssdeep":"192:Mx180yKlAM+PBUvcergrqTI61xzDNHcuqEqeLwpkMXkSH3MMriSIFQ9Hfe2v6MLW:j0ylM+PBlXczFAsLukMXkSH3MMriSIFD","tlshash":"9bf11a4a54b889e544ac269cfc7c6d4d64c93d4e74c8340fde82ee90ae6f1f99e0114c","size":7896,"data":"","first_seen":"2026-09-04T14:43:58.831869Z","last_seen":"2026-09-04T14:43:58.831869Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=994\u0026%21Q=\u0026%21lAc=KeeV%2A%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_%2F\u0026%294I=\u0026%29I=-\u0026%29QABQ=\u0026%29bQ=\u0026%29bQH0=\u0026%2A%29QABQ=\u0026%2A%2ALQ=%7B%22%2A%2A22%22%3A%22wX%22%2C%22%2A%2A2eD%22%3A%22~D%2AI9%22%2C%22%2A%2AbV%22%3A%22%22%2C%22%2A%2A%2A2%22%3A%22d-%22%2C%22%2A%2A_bV%22%3A%22%22%7D\u0026%2A2=d-\u0026%2Ab_I=ffpCWnG3\u002622=wX\u00262AbQ=GCGpfp-3n\u00262K9~0=h%2AHCsb9e2\u00262K9~d=3TXfpR3Ct\u00262QH=XdCdp\u00262bQ=GzFn-td8P\u00262eVbQ=\u00264%29cLlbQ=H0\u002642e=TmBWw_m9SA_4IdW%2FcOrwOm_AI%2FSw_Omdd4O\u00264QH=\u00264Qe0=\u00264Qef=\u00264Qh~4b9=\u00264Vzq=\u00269eH=\u00269~IAA=f\u0026AIrqAL=KeeV%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_\u0026D%299s22sIWV=\u0026DQ%2AVA=\u0026DVLV=\u0026Hb=ftGGpdd--GnfdG3Gf0d\u0026I2AbQ=\u0026KeeV%2A=f\u0026L0eDVI=Q~hL4\u0026QI2~~~=\u0026Q~Ac=f\u0026SQVA=f\u0026SQVA29%2Ae=\u0026U%29bQ=ME+8T%28+uI%2Ae+i+0+5IHIL\u0026VbQ=GTX6fty7G\u0026b%2AbQ=-\u0026b9e2L=G7NUEtpNo%3AaFN%7CiIGN%3Ac3.1bq1qbY1JY%7CiwGN%3Aqbv1YJ1qq.13\u0026c%2A=\u0026e%2A2I=5fdC0\u0026hL4c=h9I\u0026hbQ=%2904Qd0IfidcGIiCGICiGpp%29idn4G-n%290Q-3c\u0026htmlsrc=1\u0026kkdd=H3%7C3%7CH%2AAn9\u0026l%2AKV=-\u0026lL%2AeV=-\u0026q%2AVI9c=-\u0026qSQ=C\u0026tpid=\u0026~%2AV4=-\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001788533008759032757816326975\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153607860816917616%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=OriD2QUIWzZDToaMPMtkyyQPYCaNoeZ9EHWbViG2KeILE5LR_Cf9aU6B-B35suAVb_-mJcIjdWM6V5zD0Y2kv1EK69DpQ6AwS4WEazeDsZHjn8Xx93aagnogBO4TKwV69fVjD1o5wNuh8XJPaSAkYqqNmcaknSZurg1s3Wu9iudFpvL0OMFRKGzcTndax4VftZVQAx70668%3D\u0026tchkpts=%7B%22prel2%22%3A1788533008990%7D\u0026stime=1788533008990\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252521lSg%252521%25252A%253DLwwn%25253A%25252F%25252FgtKgtntKA_CAxv%2526%25252Aewxnl%253D8p2%25252Ay%25261m%253DYfqq-RRIIq5YRqTqYeR%25262%25252Ay_%253D2Pl%25262m8%253D~ey8RelYKR_qlKDqlDKq--~KR5yqI5~e8IT_%252638n%252521%253DY%252638n%252521sPtw%253D%25268lsppp%253D%25268p%252521_%253DY%2526J%25252Atwn%253DI%2526JtLn%253DI%2526Lwwnt%253DY%2526Ppl%252521%252521%253DY%2526Pw1%253D%2526_t%253D%2526a~m8%253DOX%252B%252529ik%252BVltw%252BK%252Be%252B0l1l%25252A%2526d8%253D%2526dJ%252521_%253DLwwnt%25253A%25252F%25252FgtKgtntKA_CAxv%25252F%2526g38%253DD%2526gtnlP_%253DI%2526htmlsrc%253D1%2526kkdd%253D%25252AH%25257C3%25257CHA%25252A9n%2526ls%252521m8%253D%2526mPws%25252A%253DqEzaXf-zc%25253A%252528Wz%25257CKlqz%25253A_T4CmgCgmMC7M%25257CKHqz%25253Agm.CM7Cgg4CT%2526mtm8%253DI%2526nm8%253DqiUhYfrEq%2526ptny%253DI%2526s%252521m8%253DqDq-Y-IT5%2526s81%253DURDR-%2526sLPpR%253DTiUY-bTDf%2526sLPpe%253D2t1DNmPws%2526sm8%253DqFW5IfR%252529B%2526ss%253DHU%2526swnm8%253D%2526tmvl%253DYY-DA5qT%2526tpid%253D%2526ts%253DRI%2526tt%25252A8%253D%25257B%252522ttss%252522%25253A%252522HU%252522%25252C%252522ttswx%252522%25253A%252522pxtlP%252522%25252C%252522ttmn%252522%25253A%252522%252522%25252C%252522ttts%252522%25253A%252522RI%252522%25252C%252522ttvmn%252522%25253A%252522%252522%25257D%2526t~8%252521Z8%253D%2526wtsl%253D0YRDe%2526x8tn%252521%253D%2526xn%25252An%253D%2526x~PNssNlAn%253D%2526y81%253D%2526y82pymP%253D%2526y8wY%253D%2526y8we%253D%2526ynFg%253D%2526ysw%253Di6ZAHv6P3%252521vylRA%25252F_jSHj6v%252521l%25252F3Hvj6RRyj%2526y~_%25252AJm8%253D1e%2526~8%252521Z8%253D%2526~l%253DI%2526~m8%253D%2526~m81e%253D%2526~yl%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"172.67.166.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8260b8b50b0b8822220338f25a6c4831","sha1":"8cd6a2b9513eb7cbcc89cce8fa36259c7472777d","sha256":"8138c445178ceb182f675b727fc7b8ae4707e79bc285c8f810c37813dcde2a9b","sha512":"f94b2e8cfde9261e7cd310c1357d26074e74e6acdc48d4eb5b4d7ef973b4021ca2d336bc5c481b14353439c6324a2df0417b0882f0db831c85681ad091d84372","ssdeep":"","tlshash":"69f05c2c8fe710202576511d725ef3c0b058a09736e3c005f5ec42000f42a9ea77a2fc","size":468,"data":"","first_seen":"2026-09-04T14:38:06.335464Z","last_seen":"2026-09-04T14:43:58.834346Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=994\u0026%21Q=\u0026%21lAc=KeeV%2A%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_%2F\u0026%294I=\u0026%29I=-\u0026%29QABQ=\u0026%29bQ=\u0026%29bQH0=\u0026%2A%29QABQ=\u0026%2A%2ALQ=%7B%22%2A%2A22%22%3A%22wX%22%2C%22%2A%2A2eD%22%3A%22~D%2AI9%22%2C%22%2A%2AbV%22%3A%22%22%2C%22%2A%2A%2A2%22%3A%22d-%22%2C%22%2A%2A_bV%22%3A%22%22%7D\u0026%2A2=d-\u0026%2Ab_I=ffpCWnG3\u002622=wX\u00262AbQ=GCGpfp-3n\u00262K9~0=h%2AHCsb9e2\u00262K9~d=3TXfpR3Ct\u00262QH=XdCdp\u00262bQ=GzFn-td8P\u00262eVbQ=\u00264%29cLlbQ=H0\u002642e=TmBWw_m9SA_4IdW%2FcOrwOm_AI%2FSw_Omdd4O\u00264QH=\u00264Qe0=\u00264Qef=\u00264Qh~4b9=\u00264Vzq=\u00269eH=\u00269~IAA=f\u0026AIrqAL=KeeV%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_\u0026D%299s22sIWV=\u0026DQ%2AVA=\u0026DVLV=\u0026Hb=ftGGpdd--GnfdG3Gf0d\u0026I2AbQ=\u0026KeeV%2A=f\u0026L0eDVI=Q~hL4\u0026QI2~~~=\u0026Q~Ac=f\u0026SQVA=f\u0026SQVA29%2Ae=\u0026U%29bQ=ME+8T%28+uI%2Ae+i+0+5IHIL\u0026VbQ=GTX6fty7G\u0026b%2AbQ=-\u0026b9e2L=G7NUEtpNo%3AaFN%7CiIGN%3Ac3.1bq1qbY1JY%7CiwGN%3Aqbv1YJ1qq.13\u0026c%2A=\u0026e%2A2I=5fdC0\u0026hL4c=h9I\u0026hbQ=%2904Qd0IfidcGIiCGICiGpp%29idn4G-n%290Q-3c\u0026htmlsrc=1\u0026kkdd=H3%7C3%7CH%2AAn9\u0026l%2AKV=-\u0026lL%2AeV=-\u0026q%2AVI9c=-\u0026qSQ=C\u0026tpid=\u0026~%2AV4=-\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001788533008759032757816326975\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153607860816917616%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=OriD2QUIWzZDToaMPMtkyyQPYCaNoeZ9EHWbViG2KeILE5LR_Cf9aU6B-B35suAVb_-mJcIjdWM6V5zD0Y2kv1EK69DpQ6AwS4WEazeDsZHjn8Xx93aagnogBO4TKwV69fVjD1o5wNuh8XJPaSAkYqqNmcaknSZurg1s3Wu9iudFpvL0OMFRKGzcTndax4VftZVQAx70668%3D\u0026tchkpts=%7B%22prel2%22%3A1788533008990%7D\u0026stime=1788533008990\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252521lSg%252521%25252A%253DLwwn%25253A%25252F%25252FgtKgtntKA_CAxv%2526%25252Aewxnl%253D8p2%25252Ay%25261m%253DYfqq-RRIIq5YRqTqYeR%25262%25252Ay_%253D2Pl%25262m8%253D~ey8RelYKR_qlKDqlDKq--~KR5yqI5~e8IT_%252638n%252521%253DY%252638n%252521sPtw%253D%25268lsppp%253D%25268p%252521_%253DY%2526J%25252Atwn%253DI%2526JtLn%253DI%2526Lwwnt%253DY%2526Ppl%252521%252521%253DY%2526Pw1%253D%2526_t%253D%2526a~m8%253DOX%252B%252529ik%252BVltw%252BK%252Be%252B0l1l%25252A%2526d8%253D%2526dJ%252521_%253DLwwnt%25253A%25252F%25252FgtKgtntKA_CAxv%25252F%2526g38%253DD%2526gtnlP_%253DI%2526htmlsrc%253D1%2526kkdd%253D%25252AH%25257C3%25257CHA%25252A9n%2526ls%252521m8%253D%2526mPws%25252A%253DqEzaXf-zc%25253A%252528Wz%25257CKlqz%25253A_T4CmgCgmMC7M%25257CKHqz%25253Agm.CM7Cgg4CT%2526mtm8%253DI%2526nm8%253DqiUhYfrEq%2526ptny%253DI%2526s%252521m8%253DqDq-Y-IT5%2526s81%253DURDR-%2526sLPpR%253DTiUY-bTDf%2526sLPpe%253D2t1DNmPws%2526sm8%253DqFW5IfR%252529B%2526ss%253DHU%2526swnm8%253D%2526tmvl%253DYY-DA5qT%2526tpid%253D%2526ts%253DRI%2526tt%25252A8%253D%25257B%252522ttss%252522%25253A%252522HU%252522%25252C%252522ttswx%252522%25253A%252522pxtlP%252522%25252C%252522ttmn%252522%25253A%252522%252522%25252C%252522ttts%252522%25253A%252522RI%252522%25252C%252522ttvmn%252522%25253A%252522%252522%25257D%2526t~8%252521Z8%253D%2526wtsl%253D0YRDe%2526x8tn%252521%253D%2526xn%25252An%253D%2526x~PNssNlAn%253D%2526y81%253D%2526y82pymP%253D%2526y8wY%253D%2526y8we%253D%2526ynFg%253D%2526ysw%253Di6ZAHv6P3%252521vylRA%25252F_jSHj6v%252521l%25252F3Hvj6RRyj%2526y~_%25252AJm8%253D1e%2526~8%252521Z8%253D%2526~l%253DI%2526~m8%253D%2526~m81e%253D%2526~yl%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"172.67.166.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"22004252a5566c4fd63fe8f382aa74e6","sha1":"8859806a6235f62e0e2b897a7570aa0e6873c270","sha256":"e822119877fa548e2394a62fb122e3ea158f1404663e2b4701cc1446208a5f8e","sha512":"9401d675f86e9eba8543fe305cb6f055425411da2431d67ab0d734acde84e69cd1aea1970cb7aedd3c3cdff6a43ae1c7d7ce08a21a14076391d8285e0fcae5a2","ssdeep":"768:df+753UICPIxG2Z+v4U900aXautzJXzLn+8+jtLiDcxcRheHUtRaSYk+84PWT78U:Y75lCPaZbU9+KuOBtLiD5HZvP","tlshash":"a52308dd34c3745617a72066413f2d0bf17b16543a4e8c40e9b9eaa67c3ca5f8623e4e","size":49743,"data":"","first_seen":"2026-09-04T14:31:35.627464Z","last_seen":"2026-09-04T18:02:51.901077Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=994\u0026%21Q=\u0026%21lAc=KeeV%2A%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_%2F\u0026%294I=\u0026%29I=-\u0026%29QABQ=\u0026%29bQ=\u0026%29bQH0=\u0026%2A%29QABQ=\u0026%2A%2ALQ=%7B%22%2A%2A22%22%3A%22wX%22%2C%22%2A%2A2eD%22%3A%22~D%2AI9%22%2C%22%2A%2AbV%22%3A%22%22%2C%22%2A%2A%2A2%22%3A%22d-%22%2C%22%2A%2A_bV%22%3A%22%22%7D\u0026%2A2=d-\u0026%2Ab_I=ffpCWnG3\u002622=wX\u00262AbQ=GCGpfp-3n\u00262K9~0=h%2AHCsb9e2\u00262K9~d=3TXfpR3Ct\u00262QH=XdCdp\u00262bQ=GzFn-td8P\u00262eVbQ=\u00264%29cLlbQ=H0\u002642e=TmBWw_m9SA_4IdW%2FcOrwOm_AI%2FSw_Omdd4O\u00264QH=\u00264Qe0=\u00264Qef=\u00264Qh~4b9=\u00264Vzq=\u00269eH=\u00269~IAA=f\u0026AIrqAL=KeeV%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_\u0026D%299s22sIWV=\u0026DQ%2AVA=\u0026DVLV=\u0026Hb=ftGGpdd--GnfdG3Gf0d\u0026I2AbQ=\u0026KeeV%2A=f\u0026L0eDVI=Q~hL4\u0026QI2~~~=\u0026Q~Ac=f\u0026SQVA=f\u0026SQVA29%2Ae=\u0026U%29bQ=ME+8T%28+uI%2Ae+i+0+5IHIL\u0026VbQ=GTX6fty7G\u0026b%2AbQ=-\u0026b9e2L=G7NUEtpNo%3AaFN%7CiIGN%3Ac3.1bq1qbY1JY%7CiwGN%3Aqbv1YJ1qq.13\u0026c%2A=\u0026e%2A2I=5fdC0\u0026hL4c=h9I\u0026hbQ=%2904Qd0IfidcGIiCGICiGpp%29idn4G-n%290Q-3c\u0026htmlsrc=1\u0026kkdd=H3%7C3%7CH%2AAn9\u0026l%2AKV=-\u0026lL%2AeV=-\u0026q%2AVI9c=-\u0026qSQ=C\u0026tpid=\u0026~%2AV4=-\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001788533008759032757816326975\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153607860816917616%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=OriD2QUIWzZDToaMPMtkyyQPYCaNoeZ9EHWbViG2KeILE5LR_Cf9aU6B-B35suAVb_-mJcIjdWM6V5zD0Y2kv1EK69DpQ6AwS4WEazeDsZHjn8Xx93aagnogBO4TKwV69fVjD1o5wNuh8XJPaSAkYqqNmcaknSZurg1s3Wu9iudFpvL0OMFRKGzcTndax4VftZVQAx70668%3D\u0026tchkpts=%7B%22prel2%22%3A1788533008990%7D\u0026stime=1788533008990\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252521lSg%252521%25252A%253DLwwn%25253A%25252F%25252FgtKgtntKA_CAxv%2526%25252Aewxnl%253D8p2%25252Ay%25261m%253DYfqq-RRIIq5YRqTqYeR%25262%25252Ay_%253D2Pl%25262m8%253D~ey8RelYKR_qlKDqlDKq--~KR5yqI5~e8IT_%252638n%252521%253DY%252638n%252521sPtw%253D%25268lsppp%253D%25268p%252521_%253DY%2526J%25252Atwn%253DI%2526JtLn%253DI%2526Lwwnt%253DY%2526Ppl%252521%252521%253DY%2526Pw1%253D%2526_t%253D%2526a~m8%253DOX%252B%252529ik%252BVltw%252BK%252Be%252B0l1l%25252A%2526d8%253D%2526dJ%252521_%253DLwwnt%25253A%25252F%25252FgtKgtntKA_CAxv%25252F%2526g38%253DD%2526gtnlP_%253DI%2526htmlsrc%253D1%2526kkdd%253D%25252AH%25257C3%25257CHA%25252A9n%2526ls%252521m8%253D%2526mPws%25252A%253DqEzaXf-zc%25253A%252528Wz%25257CKlqz%25253A_T4CmgCgmMC7M%25257CKHqz%25253Agm.CM7Cgg4CT%2526mtm8%253DI%2526nm8%253DqiUhYfrEq%2526ptny%253DI%2526s%252521m8%253DqDq-Y-IT5%2526s81%253DURDR-%2526sLPpR%253DTiUY-bTDf%2526sLPpe%253D2t1DNmPws%2526sm8%253DqFW5IfR%252529B%2526ss%253DHU%2526swnm8%253D%2526tmvl%253DYY-DA5qT%2526tpid%253D%2526ts%253DRI%2526tt%25252A8%253D%25257B%252522ttss%252522%25253A%252522HU%252522%25252C%252522ttswx%252522%25253A%252522pxtlP%252522%25252C%252522ttmn%252522%25253A%252522%252522%25252C%252522ttts%252522%25253A%252522RI%252522%25252C%252522ttvmn%252522%25253A%252522%252522%25257D%2526t~8%252521Z8%253D%2526wtsl%253D0YRDe%2526x8tn%252521%253D%2526xn%25252An%253D%2526x~PNssNlAn%253D%2526y81%253D%2526y82pymP%253D%2526y8wY%253D%2526y8we%253D%2526ynFg%253D%2526ysw%253Di6ZAHv6P3%252521vylRA%25252F_jSHj6v%252521l%25252F3Hvj6RRyj%2526y~_%25252AJm8%253D1e%2526~8%252521Z8%253D%2526~l%253DI%2526~m8%253D%2526~m81e%253D%2526~yl%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"172.67.166.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d741a6d067d4a2836938896c055fece","sha1":"4b2f00c29584cc27399e305de82edd11fc57450a","sha256":"2621410136b4ef49dc3f48de1a7a5a7e0bb6ea1042bfafc4dbfa2e4c3c5b45ba","sha512":"788731c6c22699aa70bc3a4098beaebcde094e0bb5342a86cfcac3688f20cc0c5075cda2df5725272a23c9926c847bd7d3cf9406118086f0234b3a81416a8a55","ssdeep":"","tlshash":"20f0e5b694b3c8285b0f264273ffd684145043e45c05764df1ede49a03e1d4cc0d9ea6","size":475,"data":"","first_seen":"2026-05-25T14:47:36.054758Z","last_seen":"2026-09-04T16:31:30.255743Z","times_seen":26968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=994\u0026%21Q=\u0026%21lAc=KeeV%2A%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_%2F\u0026%294I=\u0026%29I=-\u0026%29QABQ=\u0026%29bQ=\u0026%29bQH0=\u0026%2A%29QABQ=\u0026%2A%2ALQ=%7B%22%2A%2A22%22%3A%22wX%22%2C%22%2A%2A2eD%22%3A%22~D%2AI9%22%2C%22%2A%2AbV%22%3A%22%22%2C%22%2A%2A%2A2%22%3A%22d-%22%2C%22%2A%2A_bV%22%3A%22%22%7D\u0026%2A2=d-\u0026%2Ab_I=ffpCWnG3\u002622=wX\u00262AbQ=GCGpfp-3n\u00262K9~0=h%2AHCsb9e2\u00262K9~d=3TXfpR3Ct\u00262QH=XdCdp\u00262bQ=GzFn-td8P\u00262eVbQ=\u00264%29cLlbQ=H0\u002642e=TmBWw_m9SA_4IdW%2FcOrwOm_AI%2FSw_Omdd4O\u00264QH=\u00264Qe0=\u00264Qef=\u00264Qh~4b9=\u00264Vzq=\u00269eH=\u00269~IAA=f\u0026AIrqAL=KeeV%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_\u0026D%299s22sIWV=\u0026DQ%2AVA=\u0026DVLV=\u0026Hb=ftGGpdd--GnfdG3Gf0d\u0026I2AbQ=\u0026KeeV%2A=f\u0026L0eDVI=Q~hL4\u0026QI2~~~=\u0026Q~Ac=f\u0026SQVA=f\u0026SQVA29%2Ae=\u0026U%29bQ=ME+8T%28+uI%2Ae+i+0+5IHIL\u0026VbQ=GTX6fty7G\u0026b%2AbQ=-\u0026b9e2L=G7NUEtpNo%3AaFN%7CiIGN%3Ac3.1bq1qbY1JY%7CiwGN%3Aqbv1YJ1qq.13\u0026c%2A=\u0026e%2A2I=5fdC0\u0026hL4c=h9I\u0026hbQ=%2904Qd0IfidcGIiCGICiGpp%29idn4G-n%290Q-3c\u0026htmlsrc=1\u0026kkdd=H3%7C3%7CH%2AAn9\u0026l%2AKV=-\u0026lL%2AeV=-\u0026q%2AVI9c=-\u0026qSQ=C\u0026tpid=\u0026~%2AV4=-\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001788533008759032757816326975\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153607860816917616%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=OriD2QUIWzZDToaMPMtkyyQPYCaNoeZ9EHWbViG2KeILE5LR_Cf9aU6B-B35suAVb_-mJcIjdWM6V5zD0Y2kv1EK69DpQ6AwS4WEazeDsZHjn8Xx93aagnogBO4TKwV69fVjD1o5wNuh8XJPaSAkYqqNmcaknSZurg1s3Wu9iudFpvL0OMFRKGzcTndax4VftZVQAx70668%3D\u0026tchkpts=%7B%22prel2%22%3A1788533008990%7D\u0026stime=1788533008990\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252521lSg%252521%25252A%253DLwwn%25253A%25252F%25252FgtKgtntKA_CAxv%2526%25252Aewxnl%253D8p2%25252Ay%25261m%253DYfqq-RRIIq5YRqTqYeR%25262%25252Ay_%253D2Pl%25262m8%253D~ey8RelYKR_qlKDqlDKq--~KR5yqI5~e8IT_%252638n%252521%253DY%252638n%252521sPtw%253D%25268lsppp%253D%25268p%252521_%253DY%2526J%25252Atwn%253DI%2526JtLn%253DI%2526Lwwnt%253DY%2526Ppl%252521%252521%253DY%2526Pw1%253D%2526_t%253D%2526a~m8%253DOX%252B%252529ik%252BVltw%252BK%252Be%252B0l1l%25252A%2526d8%253D%2526dJ%252521_%253DLwwnt%25253A%25252F%25252FgtKgtntKA_CAxv%25252F%2526g38%253DD%2526gtnlP_%253DI%2526htmlsrc%253D1%2526kkdd%253D%25252AH%25257C3%25257CHA%25252A9n%2526ls%252521m8%253D%2526mPws%25252A%253DqEzaXf-zc%25253A%252528Wz%25257CKlqz%25253A_T4CmgCgmMC7M%25257CKHqz%25253Agm.CM7Cgg4CT%2526mtm8%253DI%2526nm8%253DqiUhYfrEq%2526ptny%253DI%2526s%252521m8%253DqDq-Y-IT5%2526s81%253DURDR-%2526sLPpR%253DTiUY-bTDf%2526sLPpe%253D2t1DNmPws%2526sm8%253DqFW5IfR%252529B%2526ss%253DHU%2526swnm8%253D%2526tmvl%253DYY-DA5qT%2526tpid%253D%2526ts%253DRI%2526tt%25252A8%253D%25257B%252522ttss%252522%25253A%252522HU%252522%25252C%252522ttswx%252522%25253A%252522pxtlP%252522%25252C%252522ttmn%252522%25253A%252522%252522%25252C%252522ttts%252522%25253A%252522RI%252522%25252C%252522ttvmn%252522%25253A%252522%252522%25257D%2526t~8%252521Z8%253D%2526wtsl%253D0YRDe%2526x8tn%252521%253D%2526xn%25252An%253D%2526x~PNssNlAn%253D%2526y81%253D%2526y82pymP%253D%2526y8wY%253D%2526y8we%253D%2526ynFg%253D%2526ysw%253Di6ZAHv6P3%252521vylRA%25252F_jSHj6v%252521l%25252F3Hvj6RRyj%2526y~_%25252AJm8%253D1e%2526~8%252521Z8%253D%2526~l%253DI%2526~m8%253D%2526~m81e%253D%2526~yl%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"172.67.166.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2512b66a870043d21f052fab38983705","sha1":"1d0d87b571bdc394f9860dacac9122e1882bdac4","sha256":"b7812b25aff276969170564e47866cb3715e710e03684130422e1f7ff5f1d3b5","sha512":"d92b976bf673cd4717ce172333c1459b2b3b2597bf51322f377e978e18571441d37e4a8f511c15aa1281a2ead4cf629ce5b396a3670a0f650716d9e9c0ab39a3","ssdeep":"","tlshash":"bcb02b107d301042007b0043c874c4190532d8f3330085d45b013ded904e444204e74c","size":123,"data":"","first_seen":"2026-06-09T14:21:01.557679Z","last_seen":"2026-09-04T16:31:30.256402Z","times_seen":25497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.cdn-fileserver.com/bql.php?vgd_len=6203\u0026\u0026vgd_l2type=dmola\u0026fp=ls-hbhCOjusIj7icDEh73NYcQMtcHByGwKFjwyr9FAYjsMGnEVnt2zRunEtIfxv-rXiKMsYoCXTg6RIt_sbqvL5X1gjFAYct_qEzMLt7-iKaNJrVZmdabkyxo5mJZR9kqhe3QL_wyU8%3D\u0026cme=Avn8PFa-APhvrK2SMwXsDTof4yksOsa6ZzZlQv-v4Tqs_0jONHh_GqepuO8f0akgiVoxOa8h086PhSiXc3t4dJK-1rUyiPOo2ZquwIxQ8rYzobYzI9-Fun-5ib7SJdxtj2Fk3VhbPTLea6UIXPmDzvevVVdoyjNDUZkGtTrZypGweS0NEvelAieynI8sTB-xQuhMey4vvDqZVVE6-Lbheb7dknxdA_p63dbePjbjtskzvS2Zi_TDH3x2HPqkCVP-8RaF_InPujS1_C5Jo2_hcAGO-90bsWoohzzpiW7kzxY%3D%7C%7CWtJPvijWHRsfBv4nOZN-Vs0s0qvvEfG0%7CxDcVMoSqRIQVC5Dwi8YJ9bhEmBRacXnGUU3rL0EiR64%3D%7Cxrl5Md8q4-_wI34-zVnqf9tGTazdiA5BJ7x4vmZhSF0%3D%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7Cec-6tG-Oi6KTdp2bfLkkbyV2w5GKWEDRhpECXQynv5SA5s3GlL9UAGBrOBxCVDPmEQWS6H-EIAgJUIU0ARM3p0y8oaApHp3eJ183k9bnAgFJFwPn9Prix8CmNBF1Pe0tYSEiJtV-fLsedwl6zEn-ZpEpCI_HxsRpgRImGdG3qRIw9W0Y3QSpioKkDt6BAqYkRp80-Ny_gw5BltknR9r2vo5bc2tuc3_jZ7_fepPgIpFu406pq4CfH15ZGTQicXExg_qLf8iZK5oiZ8cjZkylqMg8Gw7tj4RU9YfoD5sNt0K4RJyblmcMy737BT8AubnXph38p-pjK_FBoDSwDCsBc1xiY6WgsUAgX0fVTDFxgEI5b33fvtk5YWa44r8wmjz8dlFuhp_CHMnKiUtxIkv9uua0VNOjpB6LFM6oMu6WwXhL5Vuy4RdyFyWLW0VkIQTNkpXf17yXRMoHBYJvbUR5sf2IhbJqbs7ySXz1Yx-oCk_ba287g9oHNmPo9mOUAwrutzFA4MYmLYdmTCQO1XD9iLV0YCJIKLqIU6scRMvnJT1w03QbQ0WeQ8ceW5ckLL0Fih1RLdJ_9cgwVdGUwJThZxNRJ-wM56FARawylbej8PTF9ZJ0kCw67E0aUpkviLcvAggMzYeVyB9PpH9QGh_IE2yX4qljm_381b12gBR4mbfQ1I50akvx4l8Qf_zbN57XTMyHFTwNGS-dWe5LalZk_vcBzIvDttRUBT_FMiO7sNJV9oKKcd2ZuV6ePTcyWEQM1W0KEjue2oKwsPZ1I5LqFohlzuX9oDZN9Eh7uvoAhHYc779hBhIOJXMeB-b024xEnVzJrVPJPBHjxVFZ2e7kVH7O4zukqq4GhPixPgn3or3AGqziyR7oTFFUN4br4p8oiyPCyOedYV8NDLuba8MzKKD41HL2vJlCW8D2e1bhzlGnVvPShGm49FdsCCTIGF5Dm7UA8f7Wu5_AnPunjIl35rmY9NEgbO-p1lKFlLc2lS_4BmymTypefnj79oT7arm1a6K7z0_4Ckjw5hSIcazA1a8wwT18F9cALR2lDkmzvn4%3D%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7C\u0026ctst=Default\u0026ksu=360\u0026fdkt=469\u0026vgde_kbbh=fuoyxQBuGUBO\u0026kwd[]=tracking+your+package\u0026kwt[]=469\u0026kbc[]=0880acb9392aac593b1bc0d9fd322e59.d2s\u0026kwp[]=1\u0026kid[]=172744264\u0026kbc2[]=clid_fz%3D10786%7Cclid_serp%3D10786%7Cakp%3D10%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.1662%7C23%3D3.0423%7C30%3D0.0001%7C7%3D0.0136%7C8%3D090408%7C13%3D0.0175%7C14%3D090411%7Ckus%3D0.4676%7Ckucs%3D0.5324%7Ckcucs%3D5.0000%7Ckcucs2%3D0.9097%7Ckssks%3D5.0000%7Crcid%3D67642%7Cclpr%3D0.842900%7Ccllvl%3D1%7Cm_p%3D38.2500%7Cokt%3D469%7Cbdkt%3D469\u0026ktd[]=79440959431536671710985060608\u0026kwd[]=Package+Tracking+USPS\u0026kwt[]=658\u0026kbc[]=5a5d0143e365e0d78b80648ec4131493.d2s\u0026kwp[]=2\u0026kid[]=135213569\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D10786%7Cclid_serp%3D10786%7Cakp%3D3%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.1662%7C23%3D11.4358%7C30%3D0.0001%7C7%3D0.0127%7C8%3D090408%7C13%3D0.0175%7C14%3D090411%7Ckus%3D0.6405%7Ckucs%3D0.4434%7Ckcucs%3D5.0000%7Ckcucs2%3D0.9097%7Ckssks%3D5.0000%7Crcid%3D67588%7Cclpr%3D0.953200%7Ccllvl%3D5%7Cm_p%3D46.1096%7Cokt%3D658%7Cbdkt%3D658\u0026ktd[]=79450630838089085144755736832\u0026kwd[]=live+usps+tracking\u0026kwt[]=469\u0026kbc[]=0880acb9392aac593b1bc0d9fd322e59.d2s\u0026kwp[]=3\u0026kid[]=366397376\u0026kbc2[]=clid_fz%3D-2%7Cclid_serp%3D-2%7Cakp%3D8%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.1662%7C23%3D11.4358%7C30%3D0.0001%7C7%3D0.0120%7C8%3D090408%7C13%3D0.0175%7C14%3D090411%7Ckus%3D0.6379%7Ckucs%3D0.3299%7Ckcucs%3D5.0000%7Ckcucs2%3D0.9097%7Ckssks%3D5.0000%7Crcid%3D174080%7Cclpr%3D1.000000%7Ccllvl%3D2%7Cm_p%3D56.8446%7Cokt%3D469%7Cbdkt%3D469\u0026ktd[]=79237833920825758226585747712\u0026kwd[]=USPS+Online+Tracking\u0026kwt[]=658\u0026kbc[]=5a5d0143e365e0d78b80648ec4131493.d2s\u0026kwp[]=4\u0026kid[]=29558317\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D10786%7Cclid_serp%3D10786%7Cakp%3D5%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.1662%7C23%3D11.4358%7C30%3D0.0001%7C7%3D0.0119%7C8%3D090408%7C13%3D0.0175%7C14%3D090411%7Ckus%3D0.5662%7Ckucs%3D0.4596%7Ckcucs%3D5.0000%7Ckcucs2%3D0.9097%7Ckssks%3D5.0000%7Crcid%3D174933%7Cclpr%3D1.000000%7Ccllvl%3D2%7Cm_p%3D56.5778%7Cokt%3D658%7Cbdkt%3D658\u0026ktd[]=79373250140905286737911484672\u0026kwd[]=Check+USPS+Tracking\u0026kwt[]=658\u0026kbc[]=5a5d0143e365e0d78b80648ec4131493.d2s\u0026kwp[]=5\u0026kid[]=358897472\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D22474%7Cclid_serp%3D10786%7Cakp%3D4%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.1662%7C23%3D11.4358%7C30%3D0.0001%7C7%3D0.0118%7C8%3D090408%7C13%3D0.0175%7C14%3D090411%7Ckus%3D0.5611%7Ckucs%3D0.4312%7Ckcucs%3D5.0000%7Ckcucs2%3D0.9097%7Ckssks%3D5.0000%7Crcid%3D168470%7Cclpr%3D1.000000%7Ccllvl%3D2%7Cm_p%3D54.9865%7Cokt%3D658%7Cbdkt%3D658\u0026ktd[]=79373250140905286737911484672\u0026v=1\u0026gdpr=1\u0026geo=59.56%7C11.4\u0026lper=100\u0026vgde_sa_ijp=%7B%227E8O%22%3A9%2C%22L77%22%3Ak1jQJ%2C%22E-jM8zd%22%3Ak1jQJ%7D\u0026lpid=\u0026tsid=1005\u0026hint=\u0026cc=NO\u0026wsip=170763400\u0026bca=0\u0026ugd=4\u0026vgde_setid=Nfu\u0026vgde_chost=LJ1j78YJQJ1LNwLJQxj7Q.NmY\u0026cid=8CU6073RK\u0026vi=1788533008613898123\u0026vsid=DefVid\u0026tdAdd[]=asnum%3D50304\u0026vgde_test_data_struct=%7B%22EO7E8O%22%3Au%7D\u0026vgd_adprefflag=00\u0026vgd_adpref_diff=1010\u0026vgd_fm_lang=EN\u0026vgd_implt=3\u0026vgd_cage=0\u0026vgd_tsce=L1342-S1342\u0026vgd_l3_sc=30\u0026vgd_refdomain=us-usps-xf.xyz\u0026vgd_pdtid=1\u0026vgd_oscar=1\u0026vgd_ctrlid=O_SERP\u0026vgd_nrrv=26000\u0026vgd_nrrmf=8301000480a\u0026vgd_nrrsf=scrr\u0026vgd_cty=mysen\u0026vgd_csovr=0\u0026vgd_intc_log=%7B%22impl_type%22%3A%22skp%22%2C%22xcip%22%3A%22195.64.118.0%22%2C%22xvip%22%3A%22208.91.196.46%22%7D\u0026vgd_ifrmode=14\u0026vgd_cmp_inj_fl=true\u0026sbdrId=\u0026verid=\u0026mprpslog=OriD2QUIWzZDToaMPMtkyyQPYCaNoeZ9EHWbViG2KeILE5LR_Cf9aU6B-B35suAVb_-mJcIjdWM6V5zD0Y2kv1EK69DpQ6AwS4WEazeDsZHjn8Xx93aagnogBO4TKwV69fVjD1o5wNuh8XJPaSAkYqqNmcaknSZurg1s3Wu9iudFpvL0OMFRKGzcTndax4VftZVQAx70668\u0026kbbq=%26asn%3D50304\u0026vgd_ppvi=2153607860816917616\u0026vgd_wlstp=0\u0026vgd_vstrid=DefVid\u0026vgd_scsver=3632\u0026vgd_himglg=K0P0-O0K0-S0\u0026vgd_cache_metadata=%7B%22kbb%22%3Atrue%7D\u0026vgd_cfud=251031\u0026vgd_optout=0\u0026vgd_l2shld=1\u0026vgd_akcip=195.64.118.0\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026vgd_och=0\u0026vgd_rensize=1280_926\u0026vgd_scr_h=1024\u0026vgd_scr_w=1280\u0026vgd_col_sch=l\u0026vgd_be=0\u0026vgd_nmerr=1\u0026tdAdd[]=uiparams%3D%3Brend_w%3A1280%3Brend_h%3A926\u0026vgd_sc=30\u0026hvsid=00001788533008759032757816326975\u0026rc=0\u0026rand=1788533009555\u0026acid=undefined\u0026matm=1788533009555\u0026vgde_ltimesrc=u\u0026vgde_ltime=XWA\u0026vgde_rtime=XhX\u0026vgde_etm=W\u0026vgde_timeObj=%7B%22juJ-JN%22%3Azxjj%2C%22jfjm1O%22%3AAhi%2C%22QNLLQ71L7%22%3AuWF%2C%22QNLLLJzOJL%22%3Au9%2C%22QNLLJ-JN%22%3AuW%7D\u0026vgd_lhl=2383\u0026vgd_sbSup=1\u0026vgd_nrrs=26000\u0026vgde_cdeplbl=1E8Mzm7M1e18j1GjJ\u0026vgd_end=1","fqdn":"l.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ba5e95642c652c708881ad3c9d8443f","sha1":"5bfcc33bb9cc897546c600206b03d1307bd63a94","sha256":"c787e9dd6dc8ea3c935f5f0f30e3b9e4a3e066b4619bb244f569883f8e318a24","sha512":"8c157fc41fd03bbd47633269b18effb652644e58284f8f85465b0ffba9b5a06544a03ed0655706c96edfa09a64f4f164f6bbc573ac5045000cae03c8b36d046f","ssdeep":"","tlshash":"7e600000000cc030030f0c00c3000300303000c000000c33000f30cc000000c00fc303","size":15,"data":"","first_seen":"2025-03-08T00:25:13.560069Z","last_seen":"2026-09-04T18:02:51.865847Z","times_seen":219711,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-usps-xf.xyz/js/fingerprint/iife.min.js","fqdn":"us-usps-xf.xyz","domain":"us-usps-xf.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"63f9fd621d1fbd53b7c5856e58c11ccd","sha1":"a46973c2fbdbfeb159e0d717a90f88307e274012","sha256":"c6bc28686490aba34a53ab3b709afa1fd73c21e60feb25608b09f23efe170089","sha512":"d4df433c7368ec078fbc473398a4ab21e6da20950ac4db34338623296887db40320b05b9bde6130e43d2b55c82b81a56b60bab0d6a4c97df54a0cb7a8f09325b","ssdeep":"384:XhQYTcHRx9vfQxcuK83ERxXYxMvtTpIBNwBUZXLew5gc+RW7+5ERNFaqE8E0QI+V:XSbHRTArOGSoyISuNwxJzZbPePKe9y","tlshash":"6cf207d8b2c3b02d227378ba497f6006b63abd55641c4803d57be5c178a4e5a813bfb8","size":34240,"data":"","first_seen":"2023-05-01T16:20:27Z","last_seen":"2026-09-04T16:31:30.242937Z","times_seen":73187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.us-usps-xf.xyz/","fqdn":"ww38.us-usps-xf.xyz","domain":"us-usps-xf.xyz","tld":"xyz"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"e5d8c139688b25ef77b263d88ea99150","sha1":"7abc9c61c4966543f66d150c0155bfac575f86a7","sha256":"53e5f34ac520035c7f124076d1e68c70a85c83cf68a339fa713b872b54126148","sha512":"1cd4eb192d987ea1b21f3b553eea3881c807f8bf4a5299982675d57314a0eaa084db1722c38d02eb73178660ecb1ca3667a795a512527f843f2526dc0a99dc20","ssdeep":"","tlshash":"7440000000003000033c0000000000c0000c00000000000000000c00030000000c0000","size":7,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-09-04T16:31:30.262137Z","times_seen":400324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.delivery.consentmanager.net/delivery/cmp.php?\u0026cdid=40679ccc92462\u0026h=https%3A%2F%2Fyfdpco6.com%2Fsk-park.php%3Fpid%3D9PO15V947%26dn%3Dus-usps-xf.xyz%26ua%3DMozilla%252F5.0%2B%2528Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%2529%2BGecko%252F20100101%2BFirefox%252F134.0%26ip%3D195.64.118.0%26xfip%3D195.64.118.0%26requrl%3Dhttp%253A%252F%252Fww38.us-usps-xf.xyz%252F%26reqref%3Dhttps%253A%252F%252Fus-usps-xf.xyz%252F%26al%3Den-US%252Cen%253Bq%253D0.9\u0026\u0026l=en\u0026o=1788533008981","fqdn":"d.delivery.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"94.237.80.97","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"f007cde2c0b63907fcbee875a9ab76f0","sha1":"9abb9b7142a76facef065404f76f38cf69ebc5c6","sha256":"81a081db98e1b60a39cde47fc311e04b4b1f16422c2ca0b33246ee0b272467cc","sha512":"78ab247f4555fabe3707dd8c74e56144de3dc22eaf37a014b34002b362a4f472ebd5957324ed9287319b6612c338af192c350c6d2f07909a0872f04ddabaff6f","ssdeep":"","tlshash":"49210f745d602850e23a0989b57ef36cb276153769c5d160588fb844de48e8fccdfee0","size":1387,"data":"","first_seen":"2026-09-04T14:43:58.827624Z","last_seen":"2026-09-04T14:43:58.827624Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.consentmanager.net/delivery/customdata/bV8xLndfMTc1Nzk1LnJfR0RQUi5sX2VuLmRfMzM2OTkueF82NC52LnAudF8zMzY5OS54dF8xMjMw.js","fqdn":"cdn.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"16c5173f7ab199034f8dbf62d8f0228f","sha1":"d4379ec5a1c366a585d5df5bf64e183385c74934","sha256":"4351466c49c7b64d5a19521aa40870080ef658a5e4fef6113ed7f0ec2d648290","sha512":"ddfbaf7c9e0ec91f93ef7299d500420feefd87aa080cdaf93d34175fe9a927ccabedf940ab4679d80a2acc5867e7b23f90d1e1bb099a18666beb1b10c0b24782","ssdeep":"1536:hsQ3sQxUKrn/SrK1ZtllRBdCCfQu3pPuuz+hioWax0RdWuiHBTVaqv:hsksi7lRBNQu3p2nhtW40LWuiD","tlshash":"b6340024c9a2791b42db08cdc987847e27dc72a1b5dcd5a674d24d2faab53883336337","size":232317,"data":"","first_seen":"2026-09-04T10:21:05.671793Z","last_seen":"2026-09-04T16:31:30.230683Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.us-usps-xf.xyz/","fqdn":"ww38.us-usps-xf.xyz","domain":"us-usps-xf.xyz","tld":"xyz"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9f8cda81e6368b5eb4e3952c07357f7","sha1":"57085c1dd3acf880b3134de090d4ddb6ce8e41ba","sha256":"f938c838abe845003e2984a772df1d83d21ca95b0f184f1c6feba877d94bbe5c","sha512":"7fa8978ef1b33946810c71f742612adbb98a82f4c905d2baafcfa265853be726b7fbce567f88fb3ed8a4ff4ffb0c097162b44bf1c3da20822fae5cca49cdf607","ssdeep":"192:sNveDaF9MgF/xAdn96deVdZS74DSDRLtC7Fdp7pJNaDIo9UYnbeZMj7n+EA8CXt:AvD/Mgbo2ej/uR5WFdzJCIo6YnbxWEAl","tlshash":"bb62747532ba28b983ce005f31bedb54f2a46174d82d0424e1eced1d7629e5196b2fb4","size":15112,"data":"","first_seen":"2026-08-10T09:53:56.651162Z","last_seen":"2026-09-04T18:02:51.908475Z","times_seen":2011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euob.northwavepoint.com/sxp/i/636f8b858f681acb7bfa6f583a96630a.js","fqdn":"euob.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"13.249.8.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3d62c462ee7bbd023f972f085ee6a57","sha1":"b6f95430586fcbb815ce654b6ef6dded3807d1a7","sha256":"87b4734c28427fc0c67a900195c808ba58a3caa1f0786158720ca88b52b04801","sha512":"eeb5dc40de57f3d3a1905efd7b256488830337d1b84514322b7c606e27f251178b6e68fedec94562213cd8b7aa1596d49334d5f913c282c8522a71514709fba7","ssdeep":"1536:kCzba9cWOb5lswi32Zb4v+hj0s+LonxRKRZxzcJE/QiolxXcjYt7alyw1iAkW28b:ra9cWH32pegm1aior7zAkW2//prrBQz5","tlshash":"2ed3d6ddf2e27025039324a5057f450ae27b5e513c4f8290d1bae994ac7ce8e953bfac","size":140987,"data":"","first_seen":"2026-08-18T15:08:18.806842Z","last_seen":"2026-09-04T16:31:30.235136Z","times_seen":856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.us-usps-xf.xyz/","fqdn":"ww38.us-usps-xf.xyz","domain":"us-usps-xf.xyz","tld":"xyz"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"6559111e4eae643ce013ce0821e91a02","sha1":"fa1086c9aa2cb2d14f5c13bceefe21511bcdae5a","sha256":"d72255f7e5ea4dfdf9821df800356367d0bc7df07ecd103bb660018cb1e4f400","sha512":"a6e3e096076dc152b69e95709dad8925c9c2799c23ad226b9ce7b6ee78936bea7300b66c92821ea0728ce7433d4f53787f27f5e7101f97e4d882be0a461fc051","ssdeep":"","tlshash":"407000000380020020c80233a200882af228003c00030200c008888800a808002080c2","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-09-04T16:31:30.262848Z","times_seen":400270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yfdpco6.com/sk-park.php?pid=9PO15V947\u0026dn=us-usps-xf.xyz\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.us-usps-xf.xyz%2F\u0026reqref=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026al=en-US%2Cen%3Bq%3D0.9","fqdn":"yfdpco6.com","domain":"yfdpco6.com","tld":"com"},"ip":{"addr":"208.91.196.46","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"introduction_type":"scriptElement","is_inline":true,"md5":"7474ccd76cf79979671d84ac94b8b0ce","sha1":"9a380b04551e25290de1a17ccdcfecd25de9852c","sha256":"24c7d316ef0ff9b682bd6aea6e1d8793c48f3d0c4bdd73f6325f55f028570d21","sha512":"114badbe7718cec32d5f7b45f9f987e1c9bf22d90b0691a57b5d3a4ff77fb1f58555582d99a83d4dbac026a0448f7fa4d8d3d53e89802221fcdc61d1c25d7391","ssdeep":"384:CjArYiGhmZSww0qTfBAOVgmAyhtbgtl+u/cj1IO/5/9SLT:5ZBsjBjrAyhtbgt4MiIO/5/9SLT","tlshash":"9262be1886f214265513703456bf620477764763568ced00bd8caa90ffaadb38efbbe4","size":14558,"data":"","first_seen":"2026-08-24T11:45:34.350286Z","last_seen":"2026-09-04T16:31:30.258564Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yfdpco6.com/sk-park.php?pid=9PO15V947\u0026dn=us-usps-xf.xyz\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.us-usps-xf.xyz%2F\u0026reqref=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026al=en-US%2Cen%3Bq%3D0.9","fqdn":"yfdpco6.com","domain":"yfdpco6.com","tld":"com"},"ip":{"addr":"208.91.196.46","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"introduction_type":"scriptElement","is_inline":true,"md5":"4bb25d87be6b856bea230d2ca030d852","sha1":"676c097c6e3aaaebadc8095abd5efff4f689b190","sha256":"b2b66b414914210c1d9f3593db5a0210c271be9e1e15e93e6f3364c7206a5bfc","sha512":"3fa8276276487c0cba49b486933b34538bdb217c50fbfb95dc1ed8a419fce54a6c56bd5b000fc03b1a14720c5fa36b3b089f375c321749684bab1ca662cc152f","ssdeep":"192:MIGrt85bvy0GaytjGEfm029LGAvcIGrt85bvy0GaytjGEfm02OyIhIQBrvtw40:M2VGltjcyAvc2VGltj9y0IULs","tlshash":"f9220a94137859105ace2ca1dfff7ecb58ed1d27bc2d201c8de8c484726daab0d166e5","size":10660,"data":"","first_seen":"2026-09-04T14:43:58.845938Z","last_seen":"2026-09-04T14:43:58.845938Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yfdpco6.com/sk-park.php?pid=9PO15V947\u0026dn=us-usps-xf.xyz\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.us-usps-xf.xyz%2F\u0026reqref=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026al=en-US%2Cen%3Bq%3D0.9","fqdn":"yfdpco6.com","domain":"yfdpco6.com","tld":"com"},"ip":{"addr":"208.91.196.46","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb7759eb69822cb6ed1516007c86ea25","sha1":"05b0ca90c5c7a92b51a12d51ebe992b4e681434c","sha256":"bf5138daafe2dd2f7bd11258a31c28eb93835962f1bbe9b624fae4923fef03d9","sha512":"138523d88633dad59fbac13f24d0b52d71d04c092bc7aa05d120cb18a6192b04f52a6414f05e55755b6e39db81e4bdf502cbd35914720b94081cb59a17155095","ssdeep":"","tlshash":"b411af9963754133012bb57bef8a43c4b071d08f3517ea05bf6c82649f5783d6e19e90","size":886,"data":"","first_seen":"2026-06-08T14:44:06.80999Z","last_seen":"2026-09-04T16:31:30.261423Z","times_seen":11115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=2\u0026__cmpfcc=1\u0026id=175795\u0026o=1788532986\u0026h=https%3A%2F%2Fyfdpco6.com%2Fsk-park.php%3Fpid%3D9PO15V947%26dn%3Dus-usps-xf.xyz%26ua%3DMozilla%252F5.0%2B%2528Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%2529%2BGecko%252F20100101%2BFirefox%252F134.0%26ip%3D195.64.118.0%26xfip%3D195.64.118.0%26requrl%3Dhttp%253A%252F%252Fww38.us-usps-xf.xyz%252F%26reqref%3Dhttps%253A%252F%252Fus-usps-xf.xyz%252F%26al%3Den-US%252Cen%253Bq%253D0.9\u0026\u0026l=en\u0026odw=0\u0026dlt=1\u0026l=en","fqdn":"d.delivery.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"94.237.80.97","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"6afb8a4bbf5eaf5e7762a308539b4373","sha1":"a9e9393ddd94a36f2856a88cd8660b9b920c1d74","sha256":"fe9198485f1d89b2b68cc1bba7804d3fa99400b2b8035f81461c657e083fd178","sha512":"5b3b69afc37ee45eba79211e42c2f14d8ac95bf1edaf15e9cb2bebc2739f4618d9d85edb2381ad79af28c8ac179f185acda01fddb47eb9e2c69912d788dfab20","ssdeep":"192:wnjUGGAoAUCvSKzdv93bzDDNISbjWJ7guf96zzKPydlgN:ijTrUmzhNNIZg2NPkgN","tlshash":"4312b689efe4d47847d61ab5263f5216b9a8031f0ccc81c0c7855d1c166abbb7f43eaa","size":9884,"data":"","first_seen":"2026-09-04T14:43:58.814895Z","last_seen":"2026-09-04T14:43:58.814895Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.us-usps-xf.xyz/","fqdn":"ww38.us-usps-xf.xyz","domain":"us-usps-xf.xyz","tld":"xyz"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-09-04T16:31:30.263795Z","times_seen":433994,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.us-usps-xf.xyz/","fqdn":"ww38.us-usps-xf.xyz","domain":"us-usps-xf.xyz","tld":"xyz"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"889ca9e2c79a3ce7aaadbcdfd0ce4ef5","sha1":"b05c2c051bae71f80cb8c289e5a42d4f96d323fa","sha256":"6477acf082d26199b6ce8346b93149b1b999233d9fe76b0340ebf43317cf98f8","sha512":"122a494d50a5e8077cdda40e8d6edb442bb9d89fff078852aad7f84fe24f1c58fe693f0388ca6c9453d1b33036da0b9c4e9fb394a18268e254d306ffc2ca57a3","ssdeep":"","tlshash":"46a002d4b4ed8125564583390104d91cf936c934c0d5701873f0466ca6e700a53610b2","size":62,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-09-04T16:31:30.264488Z","times_seen":400314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.us-usps-xf.xyz/f56cf3d9-5c29-409e-881b-1c24189d22c6","fqdn":"ww38.us-usps-xf.xyz","domain":"us-usps-xf.xyz","tld":"xyz"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"","is_inline":false,"md5":"9fec4d79d575ea17355bea302bb757a1","sha1":"dd62a0d0329be8d93723d2877a1b6e2c4592c359","sha256":"f5a108106ef7963a4271073cb84357f7e69c6c72473b45239f8be80a2400b382","sha512":"baaa1922ed819f87f7bf6deb2cbfbf49d7e7050e23cf87d66bffefda960c5f146accef6956b7dccd0c35f327e878ee96e5be60dfa08f0ba644232c7ba9bc4c7e","ssdeep":"","tlshash":"6701700cf93c1ba4439b291b35cff508e03b4644bd8ba0b840aac4884eb5ec750237fa","size":779,"data":"","first_seen":"2026-09-04T14:43:58.850843Z","last_seen":"2026-09-04T14:43:58.850843Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1\u0026id=175795\u0026o=1788533020\u0026h=https%3A%2F%2Fyfdpco6.com%2Fsk-park.php%3Fpid%3D9PO15V947%26dn%3Dus-usps-xf.xyz%26ua%3DMozilla%252F5.0%2B%2528Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%2529%2BGecko%252F20100101%2BFirefox%252F134.0%26ip%3D195.64.118.0%26xfip%3D195.64.118.0%26requrl%3Dhttp%253A%252F%252Fww38.us-usps-xf.xyz%252F%26reqref%3Dhttps%253A%252F%252Fus-usps-xf.xyz%252F%26al%3Den-US%252Cen%253Bq%253D0.9\u0026\u0026l=en\u0026odw=0\u0026dlt=1\u0026l=en","fqdn":"d.delivery.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"94.237.80.97","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"b15ccc08ba886c9600652693d3d35f85","sha1":"da4130b5985dfea798ce471e5e177178bf8c07cc","sha256":"14e2018621d9fa8c7f2678d5e6d5cbe7a926a99e4e1229717f91473b6b0dc3f7","sha512":"132d36495f0e91fafbe845e1bb471475fa28598bacb0c07d89b6a1afe6fbb30c8b9fb9d4b8ba94132df2fd98732a3a6854a8ee3a92d46a3f036513ead56c560f","ssdeep":"","tlshash":"62210f745d602850e23a098ab57ef36cb276153769c5d160588fa844de49e8fccdfae0","size":1387,"data":"","first_seen":"2026-09-04T14:43:58.800742Z","last_seen":"2026-09-04T14:43:58.800742Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.consentmanager.net/delivery/js/cmp_en.min.js","fqdn":"cdn.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7416bc902671f9907df326bf5b751ccb","sha1":"6ce31d96ab87c5fb631bbc4c3ea1e90754fc2f59","sha256":"2b66954ebf380ccba584e9cbb09b825c8297664b659382dd3150fdc7ab805728","sha512":"75f00271bf50afcb1b62cb63d8357f2edcfbd5af5fca668f767900b57a391a1b2d934e361d235ad29c975e0aa37e18ae9c2ba6b9a1b1e24c624b9230a2981d38","ssdeep":"6144:AdsQ3BE1zDQHBOStezzq4vOaE56KYg5CH07Mn4hdZjINjbbylo+48KCVdhegvvwo:g6Vg5CH07M4hdoylRtvX","tlshash":"baa42756309321b41eeb49b4233f2b0579296b68680d509cfe70d4e46b96e8b7c73bf4","size":489232,"data":"","first_seen":"2026-09-03T09:39:49.154667Z","last_seen":"2026-09-04T16:31:30.241166Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ww38.us-usps-xf.xyz/703e65a5-23f6-4137-9f88-56249c59f50f/eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.GiwZFqzfMBFcdszMeC7Kc-Tet_QyLVfO7rRjvLUD_1nTFlDJ3GShTA.MKSiE-puQWJjq5V1aAMTuQ.eyJ0b2tlbiI6ImQ2ZjU5MzdhMDdhZmUxZWNjY2MzNjMyMTU3OGEzOGViZTc5YzU0OTciLCJ0IjoiNmE5YWQ5MGUiLCJzaWduYWxzIjpbInNvZnR3YXJlX3Jhc3Rlcml6ZXIiXX0.J--VqWK4EjlsFZUd6YpwBw","fqdn":"ww38.us-usps-xf.xyz","domain":"us-usps-xf.xyz","tld":"xyz"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ww38.us-usps-xf.xyz/","date":"2026-09-04T14:43:27.369Z","timestamp":1788533007369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww38.us-usps-xf.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 23:28:48 GMT","end":"Tue, 20 Oct 2026 23:28:47 GMT"},"fingerprint":{"sha1":"99:10:65:29:B8:F3:72:9D:8B:F4:16:E5:0F:A0:C2:B2:9C:49:8A:67","sha256":"8C:07:D2:DB:A8:AD:6E:12:FF:0B:28:DD:5B:7E:CF:BE:D2:A8:28:8F:2D:F1:5F:FC:08:90:DC:6C:5D:55:63:73"}}},"request":{"raw":"GET /703e65a5-23f6-4137-9f88-56249c59f50f/eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.GiwZFqzfMBFcdszMeC7Kc-Tet_QyLVfO7rRjvLUD_1nTFlDJ3GShTA.MKSiE-puQWJjq5V1aAMTuQ.eyJ0b2tlbiI6ImQ2ZjU5MzdhMDdhZmUxZWNjY2MzNjMyMTU3OGEzOGViZTc5YzU0OTciLCJ0IjoiNmE5YWQ5MGUiLCJzaWduYWxzIjpbInNvZnR3YXJlX3Jhc3Rlcml6ZXIiXX0.J--VqWK4EjlsFZUd6YpwBw HTTP/1.1\r\nHost: ww38.us-usps-xf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ww38.us-usps-xf.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ndate: Fri, 04 Sep 2026 14:43:27 GMT\r\nserver: Caddy\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":243,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"ww38.us-usps-xf.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.cdn-fileserver.com/__media__/pics/9000/09/593//arrrow.png","fqdn":"s.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=994\u0026%21Q=\u0026%21lAc=KeeV%2A%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_%2F\u0026%294I=\u0026%29I=-\u0026%29QABQ=\u0026%29bQ=\u0026%29bQH0=\u0026%2A%29QABQ=\u0026%2A%2ALQ=%7B%22%2A%2A22%22%3A%22wX%22%2C%22%2A%2A2eD%22%3A%22~D%2AI9%22%2C%22%2A%2AbV%22%3A%22%22%2C%22%2A%2A%2A2%22%3A%22d-%22%2C%22%2A%2A_bV%22%3A%22%22%7D\u0026%2A2=d-\u0026%2Ab_I=ffpCWnG3\u002622=wX\u00262AbQ=GCGpfp-3n\u00262K9~0=h%2AHCsb9e2\u00262K9~d=3TXfpR3Ct\u00262QH=XdCdp\u00262bQ=GzFn-td8P\u00262eVbQ=\u00264%29cLlbQ=H0\u002642e=TmBWw_m9SA_4IdW%2FcOrwOm_AI%2FSw_Omdd4O\u00264QH=\u00264Qe0=\u00264Qef=\u00264Qh~4b9=\u00264Vzq=\u00269eH=\u00269~IAA=f\u0026AIrqAL=KeeV%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_\u0026D%299s22sIWV=\u0026DQ%2AVA=\u0026DVLV=\u0026Hb=ftGGpdd--GnfdG3Gf0d\u0026I2AbQ=\u0026KeeV%2A=f\u0026L0eDVI=Q~hL4\u0026QI2~~~=\u0026Q~Ac=f\u0026SQVA=f\u0026SQVA29%2Ae=\u0026U%29bQ=ME+8T%28+uI%2Ae+i+0+5IHIL\u0026VbQ=GTX6fty7G\u0026b%2AbQ=-\u0026b9e2L=G7NUEtpNo%3AaFN%7CiIGN%3Ac3.1bq1qbY1JY%7CiwGN%3Aqbv1YJ1qq.13\u0026c%2A=\u0026e%2A2I=5fdC0\u0026hL4c=h9I\u0026hbQ=%2904Qd0IfidcGIiCGICiGpp%29idn4G-n%290Q-3c\u0026htmlsrc=1\u0026kkdd=H3%7C3%7CH%2AAn9\u0026l%2AKV=-\u0026lL%2AeV=-\u0026q%2AVI9c=-\u0026qSQ=C\u0026tpid=\u0026~%2AV4=-\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001788533008759032757816326975\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153607860816917616%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=OriD2QUIWzZDToaMPMtkyyQPYCaNoeZ9EHWbViG2KeILE5LR_Cf9aU6B-B35suAVb_-mJcIjdWM6V5zD0Y2kv1EK69DpQ6AwS4WEazeDsZHjn8Xx93aagnogBO4TKwV69fVjD1o5wNuh8XJPaSAkYqqNmcaknSZurg1s3Wu9iudFpvL0OMFRKGzcTndax4VftZVQAx70668%3D\u0026tchkpts=%7B%22prel2%22%3A1788533008990%7D\u0026stime=1788533008990\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252521lSg%252521%25252A%253DLwwn%25253A%25252F%25252FgtKgtntKA_CAxv%2526%25252Aewxnl%253D8p2%25252Ay%25261m%253DYfqq-RRIIq5YRqTqYeR%25262%25252Ay_%253D2Pl%25262m8%253D~ey8RelYKR_qlKDqlDKq--~KR5yqI5~e8IT_%252638n%252521%253DY%252638n%252521sPtw%253D%25268lsppp%253D%25268p%252521_%253DY%2526J%25252Atwn%253DI%2526JtLn%253DI%2526Lwwnt%253DY%2526Ppl%252521%252521%253DY%2526Pw1%253D%2526_t%253D%2526a~m8%253DOX%252B%252529ik%252BVltw%252BK%252Be%252B0l1l%25252A%2526d8%253D%2526dJ%252521_%253DLwwnt%25253A%25252F%25252FgtKgtntKA_CAxv%25252F%2526g38%253DD%2526gtnlP_%253DI%2526htmlsrc%253D1%2526kkdd%253D%25252AH%25257C3%25257CHA%25252A9n%2526ls%252521m8%253D%2526mPws%25252A%253DqEzaXf-zc%25253A%252528Wz%25257CKlqz%25253A_T4CmgCgmMC7M%25257CKHqz%25253Agm.CM7Cgg4CT%2526mtm8%253DI%2526nm8%253DqiUhYfrEq%2526ptny%253DI%2526s%252521m8%253DqDq-Y-IT5%2526s81%253DURDR-%2526sLPpR%253DTiUY-bTDf%2526sLPpe%253D2t1DNmPws%2526sm8%253DqFW5IfR%252529B%2526ss%253DHU%2526swnm8%253D%2526tmvl%253DYY-DA5qT%2526tpid%253D%2526ts%253DRI%2526tt%25252A8%253D%25257B%252522ttss%252522%25253A%252522HU%252522%25252C%252522ttswx%252522%25253A%252522pxtlP%252522%25252C%252522ttmn%252522%25253A%252522%252522%25252C%252522ttts%252522%25253A%252522RI%252522%25252C%252522ttvmn%252522%25253A%252522%252522%25257D%2526t~8%252521Z8%253D%2526wtsl%253D0YRDe%2526x8tn%252521%253D%2526xn%25252An%253D%2526x~PNssNlAn%253D%2526y81%253D%2526y82pymP%253D%2526y8wY%253D%2526y8we%253D%2526ynFg%253D%2526ysw%253Di6ZAHv6P3%252521vylRA%25252F_jSHj6v%252521l%25252F3Hvj6RRyj%2526y~_%25252AJm8%253D1e%2526~8%252521Z8%253D%2526~l%253DI%2526~m8%253D%2526~m81e%253D%2526~yl%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","date":"2026-09-04T14:43:29.361Z","timestamp":1788533009361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 19:29:19 GMT","end":"Thu, 22 Oct 2026 20:29:13 GMT"},"fingerprint":{"sha1":"90:47:F6:6B:6B:51:A2:68:C2:B7:73:31:7A:91:BC:57:76:65:26:8E","sha256":"20:B7:3C:50:10:4D:53:AB:B2:A7:A3:FF:C7:44:4E:88:6D:CC:A3:64:4C:D9:D9:F6:18:D3:0C:2A:6A:E9:61:25"}}},"request":{"raw":"GET /__media__/pics/9000/09/593//arrrow.png HTTP/1.1\r\nHost: s.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://realtimesearchresults.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nvia: 1.1 google\r\ndate: Fri, 04 Sep 2026 14:43:29 GMT\r\ncache-control: public, max-age=604800\r\nage: 153835\r\nlast-modified: Thu, 06 Mar 2025 13:05:37 GMT\r\netag: \"11b-62fac2985d568\"\r\ncontent-type: image/png\r\nx-cache-status: hit\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kFd8e6LjfI9QCkcZ2Xdw8LwwN3Dn2x%2FiqLv7lxGDlCFjfufuJVB3lY2Myqp7JQsCdYizcG9u3C5jbIevXfaUsA8m%2FUt%2F%2FzS%2F0eoGDXtduk5a%2BzSbV8CA92u0L1V9IcCOi6zZFim%2BVg%3D%3D\"}]}\r\ncf-ray: a35dc44c8e6b712b-OSL\r\ncontent-length: 283\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":1051,"mime_type":"image/png","magic":"PNG image data, 17 x 27, 8-bit colormap, non-interlaced","md5":"80d42c82a6c37da90210fd60a2f36128","sha1":"554ba7c84d2a27ecf3b1f29d03e62101936b54d8","sha256":"a1626e2d9160a0890a0a8d6e3af9e7095d68a24f9fb5ac8a166000c9a2581e10","sha512":"8ecb032c38176996ee637009833f3399f773b325e4f574fbbd26f93cdb82892c4143c5816543052b3a5123b89ef4b1aaca0407315aab879968085e61a20786b6","ssdeep":"","tlshash":"38d023cb5d512c3dd3615031445810799df2ad602c774182013eb4760f73545c658714","first_seen":"2023-04-06T17:33:21Z","last_seen":"2026-09-04T18:02:51.89302Z","times_seen":227554,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":6,"dns":6,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"34.251.101.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.us-usps-xf.xyz/","date":"2026-09-04T14:43:31.024Z","timestamp":1788533011024,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 17 Aug 2026 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EE:E8:EA:46:19:BB:CD:06:47:CD:BE:A5:CB:4D:D5:B1:10:DA:04:FB","sha256":"6F:F7:26:C1:10:8F:08:8A:9A:3F:1B:1D:C0:B2:22:FA:92:87:E8:8E:0B:BF:4D:70:D3:63:B0:64:7C:53:C5:9D"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2746\r\nOrigin: https://ww38.us-usps-xf.xyz\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.us-usps-xf.xyz/\r\nCookie: cg_uuid=dca731e105346292301336e3a10b7132\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2746,"data":"e=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\u0026cri=BJlqw0sZoV\u0026sf=0\u0026dc=\u0026cp=3\u0026gtm=-\u0026gac=-\u0026uvid=d6f5937a07afe1ecccc36321578a38ebe79c5497\u0026tb=1%7C7%2C62\u0026gi=17%2C2575\u0026ich=0\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=62\u0026ti=3011\u0026mo=0\u0026pn=5524\u0026spn=2513\u0026sck=88298e881ab6e60c137ccd3edcf05eda.K6JRZRobf4ukO0fy%3AhP6U5%2BTtIsJ0FKJhM%2BfWb4tQI16nJiTP8DkM2KzaijNEoFKHtGQJJ4Yvhlzhh2IUSza9ofFoGNxqginIIevbCrh5cF4S%2BDsUifYb4hz9oo7CF3TmuEeI9pwZh3Oh6QpjBaNrbPhIiB%2BxM5dzX2MIJVa083iHLBrEhXOzEZ2dewJo9V%2BGGp6Rwik6mh63n3buBrGLBzm%2FEX5M5jAUsk58z9RoXpnFLSVbFwoG38WE%2FqFdSehr%2FbepYgShVOuRKGvRkF4rLSkYv%2BP2bbwU%2F5rnoIeJ33iAotm8WwvHAZjp7lOJ21oF8katk0nWqrrnMhbUUaQADrpqYViUs1979YUIhGFoMIz9exo4WpWCTtxyBH%2FZnJlGz5Z5%2FUqyzWU3mnxiPAX1AcB1FH8HoV%2BIYlUADPzHfmHLWRkRbEQKjzDsOhlxKYwpEJ%2FznbDpjYjcd5AI0dHUuTdV06hzFJ%2FCeoMdM1C81dvnlw%3D%3D%3AkWpQ3QffvQQomscRS68TUg%3D%3D\u0026fp=1626\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0\u0026snt=1"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.us-usps-xf.xyz\r\ncontent-type: application/json\r\ndate: Fri, 04 Sep 2026 14:43:31 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":3646,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"34.251.101.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.us-usps-xf.xyz/","date":"2026-09-04T14:43:29.018Z","timestamp":1788533009018,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 17 Aug 2026 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EE:E8:EA:46:19:BB:CD:06:47:CD:BE:A5:CB:4D:D5:B1:10:DA:04:FB","sha256":"6F:F7:26:C1:10:8F:08:8A:9A:3F:1B:1D:C0:B2:22:FA:92:87:E8:8E:0B:BF:4D:70:D3:63:B0:64:7C:53:C5:9D"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 3626\r\nOrigin: https://ww38.us-usps-xf.xyz\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.us-usps-xf.xyz/\r\nCookie: cg_uuid=dca731e105346292301336e3a10b7132\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3626,"data":"e=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\u0026cri=BJlqw0sZoV\u0026sf=0\u0026dc=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%2FCR4eCR5vCR4eSUIJHh4JGWgJHm8JHh5ETwkeHgkfbRQJHm8JHh5bS1oJHh4JH20JHh5hSV9NCR4eCR5vCR4eW0teCR4eCR9tCR4eQEBaQVxFXEkJHm8JHhxDXgkeHF9FQUVATV4JHh4JHm8JHh5OcwkeHgkfbR0YGQkbaAoUGxgRCRtuCR4eXwkeHgkfbR8JHm8JHh5ZWlxNCR4eCR9tHAkebwkeHk5zCR4eCR9tHQkbaA%3D%3D\u0026cp=1\u0026gtm=-\u0026gac=-\u0026uvid=d6f5937a07afe1ecccc36321578a38ebe79c5497\u0026tb=1%7C7%2C62\u0026gi=17%2C2575\u0026ich=1\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=62\u0026ti=1005\u0026mo=0\u0026pn=3518\u0026spn=2513\u0026sck=88298e881ab6e60c137ccd3edcf05eda.K6JRZRobf4ukO0fy%3AhP6U5%2BTtIsJ0FKJhM%2BfWb4tQI16nJiTP8DkM2KzaijNEoFKHtGQJJ4Yvhlzhh2IUSza9ofFoGNxqginIIevbCrh5cF4S%2BDsUifYb4hz9oo7CF3TmuEeI9pwZh3Oh6QpjBaNrbPhIiB%2BxM5dzX2MIJVa083iHLBrEhXOzEZ2dewJo9V%2BGGp6Rwik6mh63n3buBrGLBzm%2FEX5M5jAUsk58z9RoXpnFLSVbFwoG38WE%2FqFdSehr%2FbepYgShVOuRKGvRkF4rLSkYv%2BP2bbwU%2F5rnoIeJ33iAotm8WwvHAZjp7lOJ21oF8katk0nWqrrnMhbUUaQADrpqYViUs1979YUIhGFoMIz9exo4WpWCTtxyBH%2FZnJlGz5Z5%2FUqyzWU3mnxiPAX1AcB1FH8HoV%2BIYlUADPzHfmHLWRkRbEQKjzDsOhlxKYwpEJ%2FznbDpjYjcd5AI0dHUuTdV06hzFJ%2FCeoMdM1C81dvnlw%3D%3D%3AkWpQ3QffvQQomscRS68TUg%3D%3D\u0026fp=1626\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.us-usps-xf.xyz\r\ncontent-type: application/json\r\ndate: Fri, 04 Sep 2026 14:43:29 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":4526,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1\u0026id=175795\u0026o=1788533020\u0026h=https%3A%2F%2Fyfdpco6.com%2Fsk-park.php%3Fpid%3D9PO15V947%26dn%3Dus-usps-xf.xyz%26ua%3DMozilla%252F5.0%2B%2528Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%2529%2BGecko%252F20100101%2BFirefox%252F134.0%26ip%3D195.64.118.0%26xfip%3D195.64.118.0%26requrl%3Dhttp%253A%252F%252Fww38.us-usps-xf.xyz%252F%26reqref%3Dhttps%253A%252F%252Fus-usps-xf.xyz%252F%26al%3Den-US%252Cen%253Bq%253D0.9\u0026\u0026l=en\u0026odw=0\u0026dlt=1\u0026l=en","fqdn":"d.delivery.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"94.237.80.97","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yfdpco6.com/sk-park.php?pid=9PO15V947\u0026dn=us-usps-xf.xyz\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.us-usps-xf.xyz%2F\u0026reqref=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-09-04T14:43:29.144Z","timestamp":1788533009144,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.delivery.consentmanager.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FD:3D:5F:67:04:BA:73:77:A7:4B:D6:EB:58:C2:FC:D4:01:EE:58:64","sha256":"95:14:00:DA:64:95:A5:B3:BD:95:40:8F:E7:45:6C:68:21:88:41:0E:BA:77:8C:C4:50:5C:15:69:2E:02:AB:ED"}}},"request":{"raw":"GET /delivery/cmp.php?__cmpcc=1\u0026id=175795\u0026o=1788533020\u0026h=https%3A%2F%2Fyfdpco6.com%2Fsk-park.php%3Fpid%3D9PO15V947%26dn%3Dus-usps-xf.xyz%26ua%3DMozilla%252F5.0%2B%2528Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%2529%2BGecko%252F20100101%2BFirefox%252F134.0%26ip%3D195.64.118.0%26xfip%3D195.64.118.0%26requrl%3Dhttp%253A%252F%252Fww38.us-usps-xf.xyz%252F%26reqref%3Dhttps%253A%252F%252Fus-usps-xf.xyz%252F%26al%3Den-US%252Cen%253Bq%253D0.9\u0026\u0026l=en\u0026odw=0\u0026dlt=1\u0026l=en HTTP/1.1\r\nHost: d.delivery.consentmanager.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco6.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Fri, 04 Sep 2026 14:43:06 GMT\r\nserver: Apache/2.4.68 (Debian)\r\ncache-control: no-store, no-cache, must-revalidate\r\nedge-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 01 Dec 1994 16:00:00 GMT\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Fri, 04 Sep 2026 14:43:06 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 782\r\ncontent-type: text/javascript; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":1387,"size_decoded":1267,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (618)","md5":"b15ccc08ba886c9600652693d3d35f85","sha1":"da4130b5985dfea798ce471e5e177178bf8c07cc","sha256":"14e2018621d9fa8c7f2678d5e6d5cbe7a926a99e4e1229717f91473b6b0dc3f7","sha512":"132d36495f0e91fafbe845e1bb471475fa28598bacb0c07d89b6a1afe6fbb30c8b9fb9d4b8ba94132df2fd98732a3a6854a8ee3a92d46a3f036513ead56c560f","ssdeep":"","tlshash":"62210f745d602850e23a098ab57ef36cb276153769c5d160588fa844de49e8fccdfae0","first_seen":"2026-09-04T14:43:58.800742Z","last_seen":"2026-09-04T14:43:58.800742Z","times_seen":1,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.consentmanager.net/delivery/customdata/bV8xLndfMTc1Nzk1LnJfR0RQUi5sX2VuLmRfMzM2OTkueF82NC52LnAudF8zMzY5OS54dF8xMjMw.js","fqdn":"cdn.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yfdpco6.com/sk-park.php?pid=9PO15V947\u0026dn=us-usps-xf.xyz\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.us-usps-xf.xyz%2F\u0026reqref=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-09-04T14:43:29.252Z","timestamp":1788533009252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.consentmanager.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"70:78:AC:EC:58:46:BE:A4:98:C0:29:71:CD:B8:DF:DC:99:05:84:92","sha256":"C2:1B:99:0D:17:3A:3D:5F:E6:6A:EB:55:36:3C:68:1B:B8:23:97:D8:7A:8A:A5:4B:F6:CE:FA:AA:0B:0F:15:AC"}}},"request":{"raw":"GET /delivery/customdata/bV8xLndfMTc1Nzk1LnJfR0RQUi5sX2VuLmRfMzM2OTkueF82NC52LnAudF8zMzY5OS54dF8xMjMw.js HTTP/1.1\r\nHost: cdn.consentmanager.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco6.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 14:43:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nexpires: Fri, 04 Sep 2026 14:58:37 GMT\r\ncache-control: public, max-age=3600\r\nedge-control: public, max-age=3600\r\nlast-modified: Fri, 04 Sep 2026 13:58:37 GMT\r\nx-77-nzt: k9jZMAJjzNjfdJg17WmT24JsqF9SPUFk38cD03p41wZQoUBY0Rd+1dCRLNZJpHJRoUkwHYI\r\nx-77-nzt-ray: 2a494a1559e78c7836d99a6a7ad4940f\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-age: 2677\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":232317,"size_decoded":48313,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (42801)","md5":"16c5173f7ab199034f8dbf62d8f0228f","sha1":"d4379ec5a1c366a585d5df5bf64e183385c74934","sha256":"4351466c49c7b64d5a19521aa40870080ef658a5e4fef6113ed7f0ec2d648290","sha512":"ddfbaf7c9e0ec91f93ef7299d500420feefd87aa080cdaf93d34175fe9a927ccabedf940ab4679d80a2acc5867e7b23f90d1e1bb099a18666beb1b10c0b24782","ssdeep":"1536:hsQ3sQxUKrn/SrK1ZtllRBdCCfQu3pPuuz+hioWax0RdWuiHBTVaqv:hsksi7lRBNQu3p2nhtW40LWuiD","tlshash":"b6340024c9a2791b42db08cdc987847e27dc72a1b5dcd5a674d24d2faab53883336337","first_seen":"2026-09-04T10:21:05.671793Z","last_seen":"2026-09-04T16:31:30.230683Z","times_seen":34,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":2,"send":0,"wait":1,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.cdn-fileserver.com/bql.php?vgd_len=6203\u0026\u0026vgd_l2type=dmola\u0026fp=ls-hbhCOjusIj7icDEh73NYcQMtcHByGwKFjwyr9FAYjsMGnEVnt2zRunEtIfxv-rXiKMsYoCXTg6RIt_sbqvL5X1gjFAYct_qEzMLt7-iKaNJrVZmdabkyxo5mJZR9kqhe3QL_wyU8%3D\u0026cme=Avn8PFa-APhvrK2SMwXsDTof4yksOsa6ZzZlQv-v4Tqs_0jONHh_GqepuO8f0akgiVoxOa8h086PhSiXc3t4dJK-1rUyiPOo2ZquwIxQ8rYzobYzI9-Fun-5ib7SJdxtj2Fk3VhbPTLea6UIXPmDzvevVVdoyjNDUZkGtTrZypGweS0NEvelAieynI8sTB-xQuhMey4vvDqZVVE6-Lbheb7dknxdA_p63dbePjbjtskzvS2Zi_TDH3x2HPqkCVP-8RaF_InPujS1_C5Jo2_hcAGO-90bsWoohzzpiW7kzxY%3D%7C%7CWtJPvijWHRsfBv4nOZN-Vs0s0qvvEfG0%7CxDcVMoSqRIQVC5Dwi8YJ9bhEmBRacXnGUU3rL0EiR64%3D%7Cxrl5Md8q4-_wI34-zVnqf9tGTazdiA5BJ7x4vmZhSF0%3D%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7Cec-6tG-Oi6KTdp2bfLkkbyV2w5GKWEDRhpECXQynv5SA5s3GlL9UAGBrOBxCVDPmEQWS6H-EIAgJUIU0ARM3p0y8oaApHp3eJ183k9bnAgFJFwPn9Prix8CmNBF1Pe0tYSEiJtV-fLsedwl6zEn-ZpEpCI_HxsRpgRImGdG3qRIw9W0Y3QSpioKkDt6BAqYkRp80-Ny_gw5BltknR9r2vo5bc2tuc3_jZ7_fepPgIpFu406pq4CfH15ZGTQicXExg_qLf8iZK5oiZ8cjZkylqMg8Gw7tj4RU9YfoD5sNt0K4RJyblmcMy737BT8AubnXph38p-pjK_FBoDSwDCsBc1xiY6WgsUAgX0fVTDFxgEI5b33fvtk5YWa44r8wmjz8dlFuhp_CHMnKiUtxIkv9uua0VNOjpB6LFM6oMu6WwXhL5Vuy4RdyFyWLW0VkIQTNkpXf17yXRMoHBYJvbUR5sf2IhbJqbs7ySXz1Yx-oCk_ba287g9oHNmPo9mOUAwrutzFA4MYmLYdmTCQO1XD9iLV0YCJIKLqIU6scRMvnJT1w03QbQ0WeQ8ceW5ckLL0Fih1RLdJ_9cgwVdGUwJThZxNRJ-wM56FARawylbej8PTF9ZJ0kCw67E0aUpkviLcvAggMzYeVyB9PpH9QGh_IE2yX4qljm_381b12gBR4mbfQ1I50akvx4l8Qf_zbN57XTMyHFTwNGS-dWe5LalZk_vcBzIvDttRUBT_FMiO7sNJV9oKKcd2ZuV6ePTcyWEQM1W0KEjue2oKwsPZ1I5LqFohlzuX9oDZN9Eh7uvoAhHYc779hBhIOJXMeB-b024xEnVzJrVPJPBHjxVFZ2e7kVH7O4zukqq4GhPixPgn3or3AGqziyR7oTFFUN4br4p8oiyPCyOedYV8NDLuba8MzKKD41HL2vJlCW8D2e1bhzlGnVvPShGm49FdsCCTIGF5Dm7UA8f7Wu5_AnPunjIl35rmY9NEgbO-p1lKFlLc2lS_4BmymTypefnj79oT7arm1a6K7z0_4Ckjw5hSIcazA1a8wwT18F9cALR2lDkmzvn4%3D%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7C\u0026ctst=Default\u0026ksu=360\u0026fdkt=469\u0026vgde_kbbh=fuoyxQBuGUBO\u0026kwd[]=tracking+your+package\u0026kwt[]=469\u0026kbc[]=0880acb9392aac593b1bc0d9fd322e59.d2s\u0026kwp[]=1\u0026kid[]=172744264\u0026kbc2[]=clid_fz%3D10786%7Cclid_serp%3D10786%7Cakp%3D10%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.1662%7C23%3D3.0423%7C30%3D0.0001%7C7%3D0.0136%7C8%3D090408%7C13%3D0.0175%7C14%3D090411%7Ckus%3D0.4676%7Ckucs%3D0.5324%7Ckcucs%3D5.0000%7Ckcucs2%3D0.9097%7Ckssks%3D5.0000%7Crcid%3D67642%7Cclpr%3D0.842900%7Ccllvl%3D1%7Cm_p%3D38.2500%7Cokt%3D469%7Cbdkt%3D469\u0026ktd[]=79440959431536671710985060608\u0026kwd[]=Package+Tracking+USPS\u0026kwt[]=658\u0026kbc[]=5a5d0143e365e0d78b80648ec4131493.d2s\u0026kwp[]=2\u0026kid[]=135213569\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D10786%7Cclid_serp%3D10786%7Cakp%3D3%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.1662%7C23%3D11.4358%7C30%3D0.0001%7C7%3D0.0127%7C8%3D090408%7C13%3D0.0175%7C14%3D090411%7Ckus%3D0.6405%7Ckucs%3D0.4434%7Ckcucs%3D5.0000%7Ckcucs2%3D0.9097%7Ckssks%3D5.0000%7Crcid%3D67588%7Cclpr%3D0.953200%7Ccllvl%3D5%7Cm_p%3D46.1096%7Cokt%3D658%7Cbdkt%3D658\u0026ktd[]=79450630838089085144755736832\u0026kwd[]=live+usps+tracking\u0026kwt[]=469\u0026kbc[]=0880acb9392aac593b1bc0d9fd322e59.d2s\u0026kwp[]=3\u0026kid[]=366397376\u0026kbc2[]=clid_fz%3D-2%7Cclid_serp%3D-2%7Cakp%3D8%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.1662%7C23%3D11.4358%7C30%3D0.0001%7C7%3D0.0120%7C8%3D090408%7C13%3D0.0175%7C14%3D090411%7Ckus%3D0.6379%7Ckucs%3D0.3299%7Ckcucs%3D5.0000%7Ckcucs2%3D0.9097%7Ckssks%3D5.0000%7Crcid%3D174080%7Cclpr%3D1.000000%7Ccllvl%3D2%7Cm_p%3D56.8446%7Cokt%3D469%7Cbdkt%3D469\u0026ktd[]=79237833920825758226585747712\u0026kwd[]=USPS+Online+Tracking\u0026kwt[]=658\u0026kbc[]=5a5d0143e365e0d78b80648ec4131493.d2s\u0026kwp[]=4\u0026kid[]=29558317\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D10786%7Cclid_serp%3D10786%7Cakp%3D5%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.1662%7C23%3D11.4358%7C30%3D0.0001%7C7%3D0.0119%7C8%3D090408%7C13%3D0.0175%7C14%3D090411%7Ckus%3D0.5662%7Ckucs%3D0.4596%7Ckcucs%3D5.0000%7Ckcucs2%3D0.9097%7Ckssks%3D5.0000%7Crcid%3D174933%7Cclpr%3D1.000000%7Ccllvl%3D2%7Cm_p%3D56.5778%7Cokt%3D658%7Cbdkt%3D658\u0026ktd[]=79373250140905286737911484672\u0026kwd[]=Check+USPS+Tracking\u0026kwt[]=658\u0026kbc[]=5a5d0143e365e0d78b80648ec4131493.d2s\u0026kwp[]=5\u0026kid[]=358897472\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D22474%7Cclid_serp%3D10786%7Cakp%3D4%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.1662%7C23%3D11.4358%7C30%3D0.0001%7C7%3D0.0118%7C8%3D090408%7C13%3D0.0175%7C14%3D090411%7Ckus%3D0.5611%7Ckucs%3D0.4312%7Ckcucs%3D5.0000%7Ckcucs2%3D0.9097%7Ckssks%3D5.0000%7Crcid%3D168470%7Cclpr%3D1.000000%7Ccllvl%3D2%7Cm_p%3D54.9865%7Cokt%3D658%7Cbdkt%3D658\u0026ktd[]=79373250140905286737911484672\u0026v=1\u0026gdpr=1\u0026geo=59.56%7C11.4\u0026lper=100\u0026vgde_sa_ijp=%7B%227E8O%22%3A9%2C%22L77%22%3Ak1jQJ%2C%22E-jM8zd%22%3Ak1jQJ%7D\u0026lpid=\u0026tsid=1005\u0026hint=\u0026cc=NO\u0026wsip=170763400\u0026bca=0\u0026ugd=4\u0026vgde_setid=Nfu\u0026vgde_chost=LJ1j78YJQJ1LNwLJQxj7Q.NmY\u0026cid=8CU6073RK\u0026vi=1788533008613898123\u0026vsid=DefVid\u0026tdAdd[]=asnum%3D50304\u0026vgde_test_data_struct=%7B%22EO7E8O%22%3Au%7D\u0026vgd_adprefflag=00\u0026vgd_adpref_diff=1010\u0026vgd_fm_lang=EN\u0026vgd_implt=3\u0026vgd_cage=0\u0026vgd_tsce=L1342-S1342\u0026vgd_l3_sc=30\u0026vgd_refdomain=us-usps-xf.xyz\u0026vgd_pdtid=1\u0026vgd_oscar=1\u0026vgd_ctrlid=O_SERP\u0026vgd_nrrv=26000\u0026vgd_nrrmf=8301000480a\u0026vgd_nrrsf=scrr\u0026vgd_cty=mysen\u0026vgd_csovr=0\u0026vgd_intc_log=%7B%22impl_type%22%3A%22skp%22%2C%22xcip%22%3A%22195.64.118.0%22%2C%22xvip%22%3A%22208.91.196.46%22%7D\u0026vgd_ifrmode=14\u0026vgd_cmp_inj_fl=true\u0026sbdrId=\u0026verid=\u0026mprpslog=OriD2QUIWzZDToaMPMtkyyQPYCaNoeZ9EHWbViG2KeILE5LR_Cf9aU6B-B35suAVb_-mJcIjdWM6V5zD0Y2kv1EK69DpQ6AwS4WEazeDsZHjn8Xx93aagnogBO4TKwV69fVjD1o5wNuh8XJPaSAkYqqNmcaknSZurg1s3Wu9iudFpvL0OMFRKGzcTndax4VftZVQAx70668\u0026kbbq=%26asn%3D50304\u0026vgd_ppvi=2153607860816917616\u0026vgd_wlstp=0\u0026vgd_vstrid=DefVid\u0026vgd_scsver=3632\u0026vgd_himglg=K0P0-O0K0-S0\u0026vgd_cache_metadata=%7B%22kbb%22%3Atrue%7D\u0026vgd_cfud=251031\u0026vgd_optout=0\u0026vgd_l2shld=1\u0026vgd_akcip=195.64.118.0\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026vgd_och=0\u0026vgd_rensize=1280_926\u0026vgd_scr_h=1024\u0026vgd_scr_w=1280\u0026vgd_col_sch=l\u0026vgd_be=0\u0026vgd_nmerr=1\u0026tdAdd[]=uiparams%3D%3Brend_w%3A1280%3Brend_h%3A926\u0026vgd_sc=30\u0026hvsid=00001788533008759032757816326975\u0026rc=0\u0026rand=1788533009555\u0026acid=undefined\u0026matm=1788533009555\u0026vgde_ltimesrc=u\u0026vgde_ltime=XWA\u0026vgde_rtime=XhX\u0026vgde_etm=W\u0026vgde_timeObj=%7B%22juJ-JN%22%3Azxjj%2C%22jfjm1O%22%3AAhi%2C%22QNLLQ71L7%22%3AuWF%2C%22QNLLLJzOJL%22%3Au9%2C%22QNLLJ-JN%22%3AuW%7D\u0026vgd_lhl=2383\u0026vgd_sbSup=1\u0026vgd_nrrs=26000\u0026vgde_cdeplbl=1E8Mzm7M1e18j1GjJ\u0026vgd_end=1","fqdn":"l.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=994\u0026%21Q=\u0026%21lAc=KeeV%2A%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_%2F\u0026%294I=\u0026%29I=-\u0026%29QABQ=\u0026%29bQ=\u0026%29bQH0=\u0026%2A%29QABQ=\u0026%2A%2ALQ=%7B%22%2A%2A22%22%3A%22wX%22%2C%22%2A%2A2eD%22%3A%22~D%2AI9%22%2C%22%2A%2AbV%22%3A%22%22%2C%22%2A%2A%2A2%22%3A%22d-%22%2C%22%2A%2A_bV%22%3A%22%22%7D\u0026%2A2=d-\u0026%2Ab_I=ffpCWnG3\u002622=wX\u00262AbQ=GCGpfp-3n\u00262K9~0=h%2AHCsb9e2\u00262K9~d=3TXfpR3Ct\u00262QH=XdCdp\u00262bQ=GzFn-td8P\u00262eVbQ=\u00264%29cLlbQ=H0\u002642e=TmBWw_m9SA_4IdW%2FcOrwOm_AI%2FSw_Omdd4O\u00264QH=\u00264Qe0=\u00264Qef=\u00264Qh~4b9=\u00264Vzq=\u00269eH=\u00269~IAA=f\u0026AIrqAL=KeeV%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_\u0026D%299s22sIWV=\u0026DQ%2AVA=\u0026DVLV=\u0026Hb=ftGGpdd--GnfdG3Gf0d\u0026I2AbQ=\u0026KeeV%2A=f\u0026L0eDVI=Q~hL4\u0026QI2~~~=\u0026Q~Ac=f\u0026SQVA=f\u0026SQVA29%2Ae=\u0026U%29bQ=ME+8T%28+uI%2Ae+i+0+5IHIL\u0026VbQ=GTX6fty7G\u0026b%2AbQ=-\u0026b9e2L=G7NUEtpNo%3AaFN%7CiIGN%3Ac3.1bq1qbY1JY%7CiwGN%3Aqbv1YJ1qq.13\u0026c%2A=\u0026e%2A2I=5fdC0\u0026hL4c=h9I\u0026hbQ=%2904Qd0IfidcGIiCGICiGpp%29idn4G-n%290Q-3c\u0026htmlsrc=1\u0026kkdd=H3%7C3%7CH%2AAn9\u0026l%2AKV=-\u0026lL%2AeV=-\u0026q%2AVI9c=-\u0026qSQ=C\u0026tpid=\u0026~%2AV4=-\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001788533008759032757816326975\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153607860816917616%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=OriD2QUIWzZDToaMPMtkyyQPYCaNoeZ9EHWbViG2KeILE5LR_Cf9aU6B-B35suAVb_-mJcIjdWM6V5zD0Y2kv1EK69DpQ6AwS4WEazeDsZHjn8Xx93aagnogBO4TKwV69fVjD1o5wNuh8XJPaSAkYqqNmcaknSZurg1s3Wu9iudFpvL0OMFRKGzcTndax4VftZVQAx70668%3D\u0026tchkpts=%7B%22prel2%22%3A1788533008990%7D\u0026stime=1788533008990\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252521lSg%252521%25252A%253DLwwn%25253A%25252F%25252FgtKgtntKA_CAxv%2526%25252Aewxnl%253D8p2%25252Ay%25261m%253DYfqq-RRIIq5YRqTqYeR%25262%25252Ay_%253D2Pl%25262m8%253D~ey8RelYKR_qlKDqlDKq--~KR5yqI5~e8IT_%252638n%252521%253DY%252638n%252521sPtw%253D%25268lsppp%253D%25268p%252521_%253DY%2526J%25252Atwn%253DI%2526JtLn%253DI%2526Lwwnt%253DY%2526Ppl%252521%252521%253DY%2526Pw1%253D%2526_t%253D%2526a~m8%253DOX%252B%252529ik%252BVltw%252BK%252Be%252B0l1l%25252A%2526d8%253D%2526dJ%252521_%253DLwwnt%25253A%25252F%25252FgtKgtntKA_CAxv%25252F%2526g38%253DD%2526gtnlP_%253DI%2526htmlsrc%253D1%2526kkdd%253D%25252AH%25257C3%25257CHA%25252A9n%2526ls%252521m8%253D%2526mPws%25252A%253DqEzaXf-zc%25253A%252528Wz%25257CKlqz%25253A_T4CmgCgmMC7M%25257CKHqz%25253Agm.CM7Cgg4CT%2526mtm8%253DI%2526nm8%253DqiUhYfrEq%2526ptny%253DI%2526s%252521m8%253DqDq-Y-IT5%2526s81%253DURDR-%2526sLPpR%253DTiUY-bTDf%2526sLPpe%253D2t1DNmPws%2526sm8%253DqFW5IfR%252529B%2526ss%253DHU%2526swnm8%253D%2526tmvl%253DYY-DA5qT%2526tpid%253D%2526ts%253DRI%2526tt%25252A8%253D%25257B%252522ttss%252522%25253A%252522HU%252522%25252C%252522ttswx%252522%25253A%252522pxtlP%252522%25252C%252522ttmn%252522%25253A%252522%252522%25252C%252522ttts%252522%25253A%252522RI%252522%25252C%252522ttvmn%252522%25253A%252522%252522%25257D%2526t~8%252521Z8%253D%2526wtsl%253D0YRDe%2526x8tn%252521%253D%2526xn%25252An%253D%2526x~PNssNlAn%253D%2526y81%253D%2526y82pymP%253D%2526y8wY%253D%2526y8we%253D%2526ynFg%253D%2526ysw%253Di6ZAHv6P3%252521vylRA%25252F_jSHj6v%252521l%25252F3Hvj6RRyj%2526y~_%25252AJm8%253D1e%2526~8%252521Z8%253D%2526~l%253DI%2526~m8%253D%2526~m81e%253D%2526~yl%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","date":"2026-09-04T14:43:29.578Z","timestamp":1788533009578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 19:29:19 GMT","end":"Thu, 22 Oct 2026 20:29:13 GMT"},"fingerprint":{"sha1":"90:47:F6:6B:6B:51:A2:68:C2:B7:73:31:7A:91:BC:57:76:65:26:8E","sha256":"20:B7:3C:50:10:4D:53:AB:B2:A7:A3:FF:C7:44:4E:88:6D:CC:A3:64:4C:D9:D9:F6:18:D3:0C:2A:6A:E9:61:25"}}},"request":{"raw":"GET /bql.php?vgd_len=6203\u0026\u0026vgd_l2type=dmola\u0026fp=ls-hbhCOjusIj7icDEh73NYcQMtcHByGwKFjwyr9FAYjsMGnEVnt2zRunEtIfxv-rXiKMsYoCXTg6RIt_sbqvL5X1gjFAYct_qEzMLt7-iKaNJrVZmdabkyxo5mJZR9kqhe3QL_wyU8%3D\u0026cme=Avn8PFa-APhvrK2SMwXsDTof4yksOsa6ZzZlQv-v4Tqs_0jONHh_GqepuO8f0akgiVoxOa8h086PhSiXc3t4dJK-1rUyiPOo2ZquwIxQ8rYzobYzI9-Fun-5ib7SJdxtj2Fk3VhbPTLea6UIXPmDzvevVVdoyjNDUZkGtTrZypGweS0NEvelAieynI8sTB-xQuhMey4vvDqZVVE6-Lbheb7dknxdA_p63dbePjbjtskzvS2Zi_TDH3x2HPqkCVP-8RaF_InPujS1_C5Jo2_hcAGO-90bsWoohzzpiW7kzxY%3D%7C%7CWtJPvijWHRsfBv4nOZN-Vs0s0qvvEfG0%7CxDcVMoSqRIQVC5Dwi8YJ9bhEmBRacXnGUU3rL0EiR64%3D%7Cxrl5Md8q4-_wI34-zVnqf9tGTazdiA5BJ7x4vmZhSF0%3D%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7Cec-6tG-Oi6KTdp2bfLkkbyV2w5GKWEDRhpECXQynv5SA5s3GlL9UAGBrOBxCVDPmEQWS6H-EIAgJUIU0ARM3p0y8oaApHp3eJ183k9bnAgFJFwPn9Prix8CmNBF1Pe0tYSEiJtV-fLsedwl6zEn-ZpEpCI_HxsRpgRImGdG3qRIw9W0Y3QSpioKkDt6BAqYkRp80-Ny_gw5BltknR9r2vo5bc2tuc3_jZ7_fepPgIpFu406pq4CfH15ZGTQicXExg_qLf8iZK5oiZ8cjZkylqMg8Gw7tj4RU9YfoD5sNt0K4RJyblmcMy737BT8AubnXph38p-pjK_FBoDSwDCsBc1xiY6WgsUAgX0fVTDFxgEI5b33fvtk5YWa44r8wmjz8dlFuhp_CHMnKiUtxIkv9uua0VNOjpB6LFM6oMu6WwXhL5Vuy4RdyFyWLW0VkIQTNkpXf17yXRMoHBYJvbUR5sf2IhbJqbs7ySXz1Yx-oCk_ba287g9oHNmPo9mOUAwrutzFA4MYmLYdmTCQO1XD9iLV0YCJIKLqIU6scRMvnJT1w03QbQ0WeQ8ceW5ckLL0Fih1RLdJ_9cgwVdGUwJThZxNRJ-wM56FARawylbej8PTF9ZJ0kCw67E0aUpkviLcvAggMzYeVyB9PpH9QGh_IE2yX4qljm_381b12gBR4mbfQ1I50akvx4l8Qf_zbN57XTMyHFTwNGS-dWe5LalZk_vcBzIvDttRUBT_FMiO7sNJV9oKKcd2ZuV6ePTcyWEQM1W0KEjue2oKwsPZ1I5LqFohlzuX9oDZN9Eh7uvoAhHYc779hBhIOJXMeB-b024xEnVzJrVPJPBHjxVFZ2e7kVH7O4zukqq4GhPixPgn3or3AGqziyR7oTFFUN4br4p8oiyPCyOedYV8NDLuba8MzKKD41HL2vJlCW8D2e1bhzlGnVvPShGm49FdsCCTIGF5Dm7UA8f7Wu5_AnPunjIl35rmY9NEgbO-p1lKFlLc2lS_4BmymTypefnj79oT7arm1a6K7z0_4Ckjw5hSIcazA1a8wwT18F9cALR2lDkmzvn4%3D%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7C\u0026ctst=Default\u0026ksu=360\u0026fdkt=469\u0026vgde_kbbh=fuoyxQBuGUBO\u0026kwd[]=tracking+your+package\u0026kwt[]=469\u0026kbc[]=0880acb9392aac593b1bc0d9fd322e59.d2s\u0026kwp[]=1\u0026kid[]=172744264\u0026kbc2[]=clid_fz%3D10786%7Cclid_serp%3D10786%7Cakp%3D10%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.1662%7C23%3D3.0423%7C30%3D0.0001%7C7%3D0.0136%7C8%3D090408%7C13%3D0.0175%7C14%3D090411%7Ckus%3D0.4676%7Ckucs%3D0.5324%7Ckcucs%3D5.0000%7Ckcucs2%3D0.9097%7Ckssks%3D5.0000%7Crcid%3D67642%7Cclpr%3D0.842900%7Ccllvl%3D1%7Cm_p%3D38.2500%7Cokt%3D469%7Cbdkt%3D469\u0026ktd[]=79440959431536671710985060608\u0026kwd[]=Package+Tracking+USPS\u0026kwt[]=658\u0026kbc[]=5a5d0143e365e0d78b80648ec4131493.d2s\u0026kwp[]=2\u0026kid[]=135213569\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D10786%7Cclid_serp%3D10786%7Cakp%3D3%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.1662%7C23%3D11.4358%7C30%3D0.0001%7C7%3D0.0127%7C8%3D090408%7C13%3D0.0175%7C14%3D090411%7Ckus%3D0.6405%7Ckucs%3D0.4434%7Ckcucs%3D5.0000%7Ckcucs2%3D0.9097%7Ckssks%3D5.0000%7Crcid%3D67588%7Cclpr%3D0.953200%7Ccllvl%3D5%7Cm_p%3D46.1096%7Cokt%3D658%7Cbdkt%3D658\u0026ktd[]=79450630838089085144755736832\u0026kwd[]=live+usps+tracking\u0026kwt[]=469\u0026kbc[]=0880acb9392aac593b1bc0d9fd322e59.d2s\u0026kwp[]=3\u0026kid[]=366397376\u0026kbc2[]=clid_fz%3D-2%7Cclid_serp%3D-2%7Cakp%3D8%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.1662%7C23%3D11.4358%7C30%3D0.0001%7C7%3D0.0120%7C8%3D090408%7C13%3D0.0175%7C14%3D090411%7Ckus%3D0.6379%7Ckucs%3D0.3299%7Ckcucs%3D5.0000%7Ckcucs2%3D0.9097%7Ckssks%3D5.0000%7Crcid%3D174080%7Cclpr%3D1.000000%7Ccllvl%3D2%7Cm_p%3D56.8446%7Cokt%3D469%7Cbdkt%3D469\u0026ktd[]=79237833920825758226585747712\u0026kwd[]=USPS+Online+Tracking\u0026kwt[]=658\u0026kbc[]=5a5d0143e365e0d78b80648ec4131493.d2s\u0026kwp[]=4\u0026kid[]=29558317\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D10786%7Cclid_serp%3D10786%7Cakp%3D5%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.1662%7C23%3D11.4358%7C30%3D0.0001%7C7%3D0.0119%7C8%3D090408%7C13%3D0.0175%7C14%3D090411%7Ckus%3D0.5662%7Ckucs%3D0.4596%7Ckcucs%3D5.0000%7Ckcucs2%3D0.9097%7Ckssks%3D5.0000%7Crcid%3D174933%7Cclpr%3D1.000000%7Ccllvl%3D2%7Cm_p%3D56.5778%7Cokt%3D658%7Cbdkt%3D658\u0026ktd[]=79373250140905286737911484672\u0026kwd[]=Check+USPS+Tracking\u0026kwt[]=658\u0026kbc[]=5a5d0143e365e0d78b80648ec4131493.d2s\u0026kwp[]=5\u0026kid[]=358897472\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D22474%7Cclid_serp%3D10786%7Cakp%3D4%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.1662%7C23%3D11.4358%7C30%3D0.0001%7C7%3D0.0118%7C8%3D090408%7C13%3D0.0175%7C14%3D090411%7Ckus%3D0.5611%7Ckucs%3D0.4312%7Ckcucs%3D5.0000%7Ckcucs2%3D0.9097%7Ckssks%3D5.0000%7Crcid%3D168470%7Cclpr%3D1.000000%7Ccllvl%3D2%7Cm_p%3D54.9865%7Cokt%3D658%7Cbdkt%3D658\u0026ktd[]=79373250140905286737911484672\u0026v=1\u0026gdpr=1\u0026geo=59.56%7C11.4\u0026lper=100\u0026vgde_sa_ijp=%7B%227E8O%22%3A9%2C%22L77%22%3Ak1jQJ%2C%22E-jM8zd%22%3Ak1jQJ%7D\u0026lpid=\u0026tsid=1005\u0026hint=\u0026cc=NO\u0026wsip=170763400\u0026bca=0\u0026ugd=4\u0026vgde_setid=Nfu\u0026vgde_chost=LJ1j78YJQJ1LNwLJQxj7Q.NmY\u0026cid=8CU6073RK\u0026vi=1788533008613898123\u0026vsid=DefVid\u0026tdAdd[]=asnum%3D50304\u0026vgde_test_data_struct=%7B%22EO7E8O%22%3Au%7D\u0026vgd_adprefflag=00\u0026vgd_adpref_diff=1010\u0026vgd_fm_lang=EN\u0026vgd_implt=3\u0026vgd_cage=0\u0026vgd_tsce=L1342-S1342\u0026vgd_l3_sc=30\u0026vgd_refdomain=us-usps-xf.xyz\u0026vgd_pdtid=1\u0026vgd_oscar=1\u0026vgd_ctrlid=O_SERP\u0026vgd_nrrv=26000\u0026vgd_nrrmf=8301000480a\u0026vgd_nrrsf=scrr\u0026vgd_cty=mysen\u0026vgd_csovr=0\u0026vgd_intc_log=%7B%22impl_type%22%3A%22skp%22%2C%22xcip%22%3A%22195.64.118.0%22%2C%22xvip%22%3A%22208.91.196.46%22%7D\u0026vgd_ifrmode=14\u0026vgd_cmp_inj_fl=true\u0026sbdrId=\u0026verid=\u0026mprpslog=OriD2QUIWzZDToaMPMtkyyQPYCaNoeZ9EHWbViG2KeILE5LR_Cf9aU6B-B35suAVb_-mJcIjdWM6V5zD0Y2kv1EK69DpQ6AwS4WEazeDsZHjn8Xx93aagnogBO4TKwV69fVjD1o5wNuh8XJPaSAkYqqNmcaknSZurg1s3Wu9iudFpvL0OMFRKGzcTndax4VftZVQAx70668\u0026kbbq=%26asn%3D50304\u0026vgd_ppvi=2153607860816917616\u0026vgd_wlstp=0\u0026vgd_vstrid=DefVid\u0026vgd_scsver=3632\u0026vgd_himglg=K0P0-O0K0-S0\u0026vgd_cache_metadata=%7B%22kbb%22%3Atrue%7D\u0026vgd_cfud=251031\u0026vgd_optout=0\u0026vgd_l2shld=1\u0026vgd_akcip=195.64.118.0\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026vgd_och=0\u0026vgd_rensize=1280_926\u0026vgd_scr_h=1024\u0026vgd_scr_w=1280\u0026vgd_col_sch=l\u0026vgd_be=0\u0026vgd_nmerr=1\u0026tdAdd[]=uiparams%3D%3Brend_w%3A1280%3Brend_h%3A926\u0026vgd_sc=30\u0026hvsid=00001788533008759032757816326975\u0026rc=0\u0026rand=1788533009555\u0026acid=undefined\u0026matm=1788533009555\u0026vgde_ltimesrc=u\u0026vgde_ltime=XWA\u0026vgde_rtime=XhX\u0026vgde_etm=W\u0026vgde_timeObj=%7B%22juJ-JN%22%3Azxjj%2C%22jfjm1O%22%3AAhi%2C%22QNLLQ71L7%22%3AuWF%2C%22QNLLLJzOJL%22%3Au9%2C%22QNLLJ-JN%22%3AuW%7D\u0026vgd_lhl=2383\u0026vgd_sbSup=1\u0026vgd_nrrs=26000\u0026vgde_cdeplbl=1E8Mzm7M1e18j1GjJ\u0026vgd_end=1 HTTP/1.1\r\nHost: l.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://realtimesearchresults.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0, no-cache, no-store\r\ncontent-type: text/javascript\r\nexpires: Thu, 03 Sep 2026 14:43:29 GMT\r\npragma: no-cache\r\ntiming-allow-origin: *\r\ndate: Fri, 04 Sep 2026 14:43:29 GMT\r\nserver-timing: cfExtPri\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dBk7vF%2FCHK%2FvYe38sTCH%2FlCIzm0R6lPaVnNwsywkEUozvN2vFmn7ymn9vVro0zxQCaOwmaT9ckQoGDADsLlAQcbq2WuNH7N%2B3AZ7%2Bubvrbb%2FaCmCJm9NbaJVQ2tOsZG51iaA%2Fg9CxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35dc44dee84712b-OSL\r\ncontent-length: 15\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":924,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"2ba5e95642c652c708881ad3c9d8443f","sha1":"5bfcc33bb9cc897546c600206b03d1307bd63a94","sha256":"c787e9dd6dc8ea3c935f5f0f30e3b9e4a3e066b4619bb244f569883f8e318a24","sha512":"8c157fc41fd03bbd47633269b18effb652644e58284f8f85465b0ffba9b5a06544a03ed0655706c96edfa09a64f4f164f6bbc573ac5045000cae03c8b36d046f","ssdeep":"","tlshash":"7e600000000cc030030f0c00c3000300303000c000000c33000f30cc000000c00fc303","first_seen":"2025-03-08T00:25:13.560069Z","last_seen":"2026-09-04T18:02:51.865847Z","times_seen":219711,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d.delivery.consentmanager.net/delivery/info/?id=175795\u0026did=2\u0026cfdid=2\u0026t=pv.d_d1.ce.cer.d_dnsx\u0026h=https%3A%2F%2Fyfdpco6.com%2Fsk-park.php\u0026o=1788533015642\u0026l=EN\u0026lv=97099\u0026d=2\u0026ct=14\u0026e=\u0026e2=\u0026e3=\u0026i=\u0026sv=1230\u0026dv=64\u0026","fqdn":"d.delivery.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"94.237.80.97","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yfdpco6.com/sk-park.php?pid=9PO15V947\u0026dn=us-usps-xf.xyz\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.us-usps-xf.xyz%2F\u0026reqref=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-09-04T14:43:35.660Z","timestamp":1788533015660,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.delivery.consentmanager.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FD:3D:5F:67:04:BA:73:77:A7:4B:D6:EB:58:C2:FC:D4:01:EE:58:64","sha256":"95:14:00:DA:64:95:A5:B3:BD:95:40:8F:E7:45:6C:68:21:88:41:0E:BA:77:8C:C4:50:5C:15:69:2E:02:AB:ED"}}},"request":{"raw":"GET /delivery/info/?id=175795\u0026did=2\u0026cfdid=2\u0026t=pv.d_d1.ce.cer.d_dnsx\u0026h=https%3A%2F%2Fyfdpco6.com%2Fsk-park.php\u0026o=1788533015642\u0026l=EN\u0026lv=97099\u0026d=2\u0026ct=14\u0026e=\u0026e2=\u0026e3=\u0026i=\u0026sv=1230\u0026dv=64\u0026 HTTP/1.1\r\nHost: d.delivery.consentmanager.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco6.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Fri, 04 Sep 2026 14:40:30 GMT\r\nserver: Apache/2.4.68 (Debian)\r\ncache-control: no-store, no-cache, must-revalidate\r\nedge-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 01 Dec 1994 16:00:00 GMT\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Fri, 04 Sep 2026 14:40:30 GMT\r\ntransfer-encoding: chunked\r\ncontent-type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":43,"size_decoded":467,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"6f81c41597d3f5a336f458822cc0c32a","sha1":"8cd77a54b38f1fb376b45af2eaab8f5982523b8d","sha256":"5704a2e9f2f7ce43a79f9b407f1aedcfd50223cbe8bd2f71ff8c5c819e469cbc","sha512":"edb4841fa021f06b664c4f09378f6572177ceb8518b976c0b1571e2346fa116097d4979d31bd9ab7e841b68795922a07d451583620a2f31e3e54a867f91d7c95","ssdeep":"","tlshash":"b7900023ea888023c2a2c0300a0803003b88b8300238032e80bc30a8ec3a3a20c02000","first_seen":"2023-04-06T20:54:09Z","last_seen":"2026-09-04T18:02:51.867069Z","times_seen":55695,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":37,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-usps-xf.xyz/favicon.ico","fqdn":"us-usps-xf.xyz","domain":"us-usps-xf.xyz","tld":"xyz"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://us-usps-xf.xyz/","date":"2026-09-04T14:43:25.217Z","timestamp":1788533005217,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: us-usps-xf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-usps-xf.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"us-usps-xf.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euob.northwavepoint.com/sxp/i/636f8b858f681acb7bfa6f583a96630a.js","fqdn":"euob.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"13.249.8.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww38.us-usps-xf.xyz/","date":"2026-09-04T14:43:27.359Z","timestamp":1788533007359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 29 Jan 2026 00:00:00 GMT","end":"Sat, 27 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"CC:B5:FD:45:6E:B8:DC:24:11:6A:30:38:E9:1D:FB:81:45:2E:FA:8D","sha256":"32:3C:54:8F:1C:33:6B:BE:0F:39:18:D6:DB:E7:61:78:95:9A:27:61:E7:33:FF:DA:F0:5E:F5:B4:82:D5:5E:A7"}}},"request":{"raw":"GET /sxp/i/636f8b858f681acb7bfa6f583a96630a.js HTTP/1.1\r\nHost: euob.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.us-usps-xf.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 52861\r\ncontent-encoding: gzip\r\nserver: Caddy\r\ncache-control: max-age=43200\r\ndate: Fri, 04 Sep 2026 13:58:58 GMT\r\nexpires: Sat, 05 Sep 2026 01:58:58 GMT\r\netag: \"226bb-tvlUMFhvy7gVzmVLbvbd7TgH0ac\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e70b9fa9699195d491ed105585ca129a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: S1wEuPgp6MAyw_j51-krfRCIe3qg-gRPr0RMAWugg5A-mgW8YfnuPg==\r\nage: 2669\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":140987,"size_decoded":53384,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"d3d62c462ee7bbd023f972f085ee6a57","sha1":"b6f95430586fcbb815ce654b6ef6dded3807d1a7","sha256":"87b4734c28427fc0c67a900195c808ba58a3caa1f0786158720ca88b52b04801","sha512":"eeb5dc40de57f3d3a1905efd7b256488830337d1b84514322b7c606e27f251178b6e68fedec94562213cd8b7aa1596d49334d5f913c282c8522a71514709fba7","ssdeep":"1536:kCzba9cWOb5lswi32Zb4v+hj0s+LonxRKRZxzcJE/QiolxXcjYt7alyw1iAkW28b:ra9cWH32pegm1aior7zAkW2//prrBQz5","tlshash":"2ed3d6ddf2e27025039324a5057f450ae27b5e513c4f8290d1bae994ac7ce8e953bfac","first_seen":"2026-08-18T15:08:18.806842Z","last_seen":"2026-09-04T16:31:30.235136Z","times_seen":856,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":15,"connect":9,"send":0,"wait":23,"receive":26,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"euob.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yfdpco6.com/sk-park.php?pid=9PO15V947\u0026dn=us-usps-xf.xyz\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.us-usps-xf.xyz%2F\u0026reqref=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026al=en-US%2Cen%3Bq%3D0.9","fqdn":"yfdpco6.com","domain":"yfdpco6.com","tld":"com"},"ip":{"addr":"208.91.196.46","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww38.us-usps-xf.xyz/","date":"2026-09-04T14:43:27.529Z","timestamp":1788533007529,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yfdpco6.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 11:39:08 GMT","end":"Fri, 16 Oct 2026 11:39:07 GMT"},"fingerprint":{"sha1":"40:7A:38:7D:B7:F7:09:B7:98:B9:A7:76:D7:2E:D2:D5:B5:80:2F:1E","sha256":"51:A5:74:F5:89:49:A7:C8:6D:80:0A:D3:D5:EA:F3:46:14:B8:4E:21:71:BD:CC:DF:A3:5A:3F:BD:9F:74:A9:CE"}}},"request":{"raw":"GET /sk-park.php?pid=9PO15V947\u0026dn=us-usps-xf.xyz\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.us-usps-xf.xyz%2F\u0026reqref=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026al=en-US%2Cen%3Bq%3D0.9 HTTP/1.1\r\nHost: yfdpco6.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.us-usps-xf.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Fri, 04 Sep 2026 14:43:17 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-sc-h: 21-rw69\r\nvia: 1.1 google\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27516,"size_decoded":9077,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (11420)","md5":"081e1e102ff0fabfa65e94ae7257929f","sha1":"fe04611997c3dc515549a4330091c36091584bf4","sha256":"bbe7d8abc494800277f276b89643fa9b0e532ea31cb7727009c31579a01a4c19","sha512":"af6fcbc7ccd671eb8882b362a8c47d4fe3700e58f4b4330a416afb925daf25f9bf10ef2e3700ae04637762959b77d8c31957741b1052cc928b650d75c44505c6","ssdeep":"768:wZBsjBjrAyhtbgt4MiIO/5/9SLJz2VGltL2VGltcQZ:cMMlz2VGlF2VGlGm","tlshash":"07c2925842f50421555334309ebf6e4976b94a23654cec08bd8c9980bfaedb78efb7e0","first_seen":"2026-09-04T14:43:58.805566Z","last_seen":"2026-09-04T14:43:58.805566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1382,"timings":{"blocked":-1,"dns":143,"connect":130,"send":0,"wait":851,"receive":0,"ssl":258},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.delivery.consentmanager.net/delivery/consent.php?id=175795\u0026p=3\u0026v=2\u0026ccc=aCQqDHrsgAAAAAA\u0026c=CQqBGQAQqBGQAAfcDCENCvFgAAAAAAAAAAigAAAZOgLAA4AGaAZ8BHgCVQHbAQUAjSBIgCUYEyQKpAVgArmBXwC1YFvAL2AYCAxABjADJwAA.IMztR_G__bXlv-bb36btkeYxf9_hr7sQxBgbIsm4FzLvW7JwG32EbJEyatiIKmRIAu3DBIQNtHBjURUChKIAVrzDsaE2U4TtKJ-BkiHMZYytQCExvm4tjeQCZ4ur_90d0mR-t6dr-2dzy27hnn3K9fuS1UJydKYetHfv-ZhOS-_IU9_x-_4v4_MbpEm0eSVv9tUtt4zc64vv6dpuxt-Tyff6f__f73fS7X__e__33_8qX3_r76-___3__v___ff_________9__-________4A\u0026l=EN\u0026lv=97099\u0026d=2\u0026ct=0\u0026e=\u0026h=https%3A%2F%2Fyfdpco6.com%2Fsk-park.php\u0026e2=\u0026e3=\u0026i=\u0026sv=1230\u0026dv=64\u0026cookieallowed=1\u0026reg=1\u0026rk=GDPR\u0026usps=1---","fqdn":"d.delivery.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"94.237.80.97","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yfdpco6.com/sk-park.php?pid=9PO15V947\u0026dn=us-usps-xf.xyz\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.us-usps-xf.xyz%2F\u0026reqref=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-09-04T14:43:35.646Z","timestamp":1788533015646,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.delivery.consentmanager.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FD:3D:5F:67:04:BA:73:77:A7:4B:D6:EB:58:C2:FC:D4:01:EE:58:64","sha256":"95:14:00:DA:64:95:A5:B3:BD:95:40:8F:E7:45:6C:68:21:88:41:0E:BA:77:8C:C4:50:5C:15:69:2E:02:AB:ED"}}},"request":{"raw":"GET /delivery/consent.php?id=175795\u0026p=3\u0026v=2\u0026ccc=aCQqDHrsgAAAAAA\u0026c=CQqBGQAQqBGQAAfcDCENCvFgAAAAAAAAAAigAAAZOgLAA4AGaAZ8BHgCVQHbAQUAjSBIgCUYEyQKpAVgArmBXwC1YFvAL2AYCAxABjADJwAA.IMztR_G__bXlv-bb36btkeYxf9_hr7sQxBgbIsm4FzLvW7JwG32EbJEyatiIKmRIAu3DBIQNtHBjURUChKIAVrzDsaE2U4TtKJ-BkiHMZYytQCExvm4tjeQCZ4ur_90d0mR-t6dr-2dzy27hnn3K9fuS1UJydKYetHfv-ZhOS-_IU9_x-_4v4_MbpEm0eSVv9tUtt4zc64vv6dpuxt-Tyff6f__f73fS7X__e__33_8qX3_r76-___3__v___ff_________9__-________4A\u0026l=EN\u0026lv=97099\u0026d=2\u0026ct=0\u0026e=\u0026h=https%3A%2F%2Fyfdpco6.com%2Fsk-park.php\u0026e2=\u0026e3=\u0026i=\u0026sv=1230\u0026dv=64\u0026cookieallowed=1\u0026reg=1\u0026rk=GDPR\u0026usps=1--- HTTP/1.1\r\nHost: d.delivery.consentmanager.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco6.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Fri, 04 Sep 2026 14:43:04 GMT\r\nserver: Apache/2.4.68 (Debian)\r\ncache-control: no-store, no-cache, must-revalidate\r\nedge-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 01 Dec 1994 16:00:00 GMT\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-cf: 0\r\nx-ct: 3\r\nx-r: GDPR\r\nlast-modified: Fri, 04 Sep 2026 14:43:04 GMT\r\ntransfer-encoding: chunked\r\ncontent-type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":43,"size_decoded":496,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"6f81c41597d3f5a336f458822cc0c32a","sha1":"8cd77a54b38f1fb376b45af2eaab8f5982523b8d","sha256":"5704a2e9f2f7ce43a79f9b407f1aedcfd50223cbe8bd2f71ff8c5c819e469cbc","sha512":"edb4841fa021f06b664c4f09378f6572177ceb8518b976c0b1571e2346fa116097d4979d31bd9ab7e841b68795922a07d451583620a2f31e3e54a867f91d7c95","ssdeep":"","tlshash":"b7900023ea888023c2a2c0300a0803003b88b8300238032e80bc30a8ec3a3a20c02000","first_seen":"2023-04-06T20:54:09Z","last_seen":"2026-09-04T18:02:51.867069Z","times_seen":55695,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-usps-xf.xyz/js/fingerprint/iife.min.js","fqdn":"us-usps-xf.xyz","domain":"us-usps-xf.xyz","tld":"xyz"},"ip":{"addr":"103.224.182.219","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://us-usps-xf.xyz/","date":"2026-09-04T14:43:24.393Z","timestamp":1788533004393,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"termiche.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 01:04:40 GMT","end":"Sat, 21 Nov 2026 01:04:39 GMT"},"fingerprint":{"sha1":"D3:82:94:F1:E2:C9:82:01:CE:FD:61:2E:11:AA:24:1C:B8:BC:AA:2D","sha256":"F8:9B:CB:12:4E:8C:25:B0:73:DF:55:4E:EA:0D:C1:68:07:17:CF:38:D8:56:CE:D8:3E:7D:D7:59:F0:66:97:EB"}}},"request":{"raw":"GET /js/fingerprint/iife.min.js HTTP/1.1\r\nHost: us-usps-xf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://us-usps-xf.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Fri, 04 Sep 2026 14:43:24 GMT\r\nserver: Apache\r\nlast-modified: Fri, 04 Sep 2026 04:18:47 GMT\r\netag: \"85c0-65aa09091b7c0\"\r\naccept-ranges: bytes\r\ncontent-length: 34240\r\ncontent-type: text/javascript\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":34240,"size_decoded":34481,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33896), with CRLF line terminators","md5":"63f9fd621d1fbd53b7c5856e58c11ccd","sha1":"a46973c2fbdbfeb159e0d717a90f88307e274012","sha256":"c6bc28686490aba34a53ab3b709afa1fd73c21e60feb25608b09f23efe170089","sha512":"d4df433c7368ec078fbc473398a4ab21e6da20950ac4db34338623296887db40320b05b9bde6130e43d2b55c82b81a56b60bab0d6a4c97df54a0cb7a8f09325b","ssdeep":"384:XhQYTcHRx9vfQxcuK83ERxXYxMvtTpIBNwBUZXLew5gc+RW7+5ERNFaqE8E0QI+V:XSbHRTArOGSoyISuNwxJzZbPePKe9y","tlshash":"6cf207d8b2c3b02d227378ba497f6006b63abd55641c4803d57be5c178a4e5a813bfb8","first_seen":"2023-05-01T16:20:27Z","last_seen":"2026-09-04T16:31:30.242937Z","times_seen":73187,"resource_available":true,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":185,"send":0,"wait":202,"receive":200,"ssl":207},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"us-usps-xf.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww38.us-usps-xf.xyz/favicon.ico","fqdn":"ww38.us-usps-xf.xyz","domain":"us-usps-xf.xyz","tld":"xyz"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww38.us-usps-xf.xyz/","date":"2026-09-04T14:43:27.504Z","timestamp":1788533007504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww38.us-usps-xf.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 23:28:48 GMT","end":"Tue, 20 Oct 2026 23:28:47 GMT"},"fingerprint":{"sha1":"99:10:65:29:B8:F3:72:9D:8B:F4:16:E5:0F:A0:C2:B2:9C:49:8A:67","sha256":"8C:07:D2:DB:A8:AD:6E:12:FF:0B:28:DD:5B:7E:CF:BE:D2:A8:28:8F:2D:F1:5F:FC:08:90:DC:6C:5D:55:63:73"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ww38.us-usps-xf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.us-usps-xf.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Fri, 04 Sep 2026 14:43:27 GMT\r\netag: \"dfu820j7awxu0\"\r\nlast-modified: Wed, 21 Jan 2026 11:14:12 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":309,"mime_type":"image/vnd.microsoft.icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"ww38.us-usps-xf.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"34.251.101.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.us-usps-xf.xyz/","date":"2026-09-04T14:43:33.029Z","timestamp":1788533013029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 17 Aug 2026 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EE:E8:EA:46:19:BB:CD:06:47:CD:BE:A5:CB:4D:D5:B1:10:DA:04:FB","sha256":"6F:F7:26:C1:10:8F:08:8A:9A:3F:1B:1D:C0:B2:22:FA:92:87:E8:8E:0B:BF:4D:70:D3:63:B0:64:7C:53:C5:9D"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2746\r\nOrigin: https://ww38.us-usps-xf.xyz\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.us-usps-xf.xyz/\r\nCookie: cg_uuid=dca731e105346292301336e3a10b7132\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2746,"data":"e=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\u0026cri=BJlqw0sZoV\u0026sf=0\u0026dc=\u0026cp=5\u0026gtm=-\u0026gac=-\u0026uvid=d6f5937a07afe1ecccc36321578a38ebe79c5497\u0026tb=1%7C7%2C62\u0026gi=17%2C2575\u0026ich=0\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=62\u0026ti=5016\u0026mo=0\u0026pn=7530\u0026spn=2513\u0026sck=88298e881ab6e60c137ccd3edcf05eda.K6JRZRobf4ukO0fy%3AhP6U5%2BTtIsJ0FKJhM%2BfWb4tQI16nJiTP8DkM2KzaijNEoFKHtGQJJ4Yvhlzhh2IUSza9ofFoGNxqginIIevbCrh5cF4S%2BDsUifYb4hz9oo7CF3TmuEeI9pwZh3Oh6QpjBaNrbPhIiB%2BxM5dzX2MIJVa083iHLBrEhXOzEZ2dewJo9V%2BGGp6Rwik6mh63n3buBrGLBzm%2FEX5M5jAUsk58z9RoXpnFLSVbFwoG38WE%2FqFdSehr%2FbepYgShVOuRKGvRkF4rLSkYv%2BP2bbwU%2F5rnoIeJ33iAotm8WwvHAZjp7lOJ21oF8katk0nWqrrnMhbUUaQADrpqYViUs1979YUIhGFoMIz9exo4WpWCTtxyBH%2FZnJlGz5Z5%2FUqyzWU3mnxiPAX1AcB1FH8HoV%2BIYlUADPzHfmHLWRkRbEQKjzDsOhlxKYwpEJ%2FznbDpjYjcd5AI0dHUuTdV06hzFJ%2FCeoMdM1C81dvnlw%3D%3D%3AkWpQ3QffvQQomscRS68TUg%3D%3D\u0026fp=1626\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0\u0026snt=1"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.us-usps-xf.xyz\r\ncontent-type: application/json\r\ndate: Fri, 04 Sep 2026 14:43:33 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":3646,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww38.us-usps-xf.xyz/","fqdn":"ww38.us-usps-xf.xyz","domain":"us-usps-xf.xyz","tld":"xyz"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T14:43:26.156Z","timestamp":1788533006156,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww38.us-usps-xf.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 23:28:48 GMT","end":"Tue, 20 Oct 2026 23:28:47 GMT"},"fingerprint":{"sha1":"99:10:65:29:B8:F3:72:9D:8B:F4:16:E5:0F:A0:C2:B2:9C:49:8A:67","sha256":"8C:07:D2:DB:A8:AD:6E:12:FF:0B:28:DD:5B:7E:CF:BE:D2:A8:28:8F:2D:F1:5F:FC:08:90:DC:6C:5D:55:63:73"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ww38.us-usps-xf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://us-usps-xf.xyz/\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":8443\"; ma=2592000\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 04 Sep 2026 14:43:26 GMT\r\nserver: Caddy\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":31808,"size_decoded":31984,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14498)","md5":"afc6989d6e2a2062d967b5abd84a337d","sha1":"2bff504497778795204f5261ab5c6943b8ae5f08","sha256":"fcbdbd6b5f725725aabd78fe6f4eaedd23b9cf78589ed34a4b9e8d83f06784ce","sha512":"d79790c29cf57d8cda065661c59bfce0b92a5379f5f038a18c8c1a3fb61368f1a10741b98ef8b5dfc78f55bdf5397dd1ca1f1d87b1b7254ec1c23a61d4a044a3","ssdeep":"384:5a4IakirSeo5DpNJ/FssDY+s65Ymc99vD/Mgbo2ej/uR5WFdzJCIo6YnbxWEA1:UOSeo5XssDplYT9NP6FdzkIGbxWEQ","tlshash":"89e21a3132f1257d525b416f72beeb1cb164a270d95e4864e0fc9c1c6a86ee107b2f64","first_seen":"2026-09-04T14:43:58.809093Z","last_seen":"2026-09-04T14:43:58.809093Z","times_seen":1,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":0,"dns":231,"connect":102,"send":0,"wait":116,"receive":0,"ssl":346},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"ww38.us-usps-xf.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.consentmanager.net/delivery/js/cmp_en.min.js","fqdn":"cdn.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yfdpco6.com/sk-park.php?pid=9PO15V947\u0026dn=us-usps-xf.xyz\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.us-usps-xf.xyz%2F\u0026reqref=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-09-04T14:43:28.986Z","timestamp":1788533008986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.consentmanager.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"70:78:AC:EC:58:46:BE:A4:98:C0:29:71:CD:B8:DF:DC:99:05:84:92","sha256":"C2:1B:99:0D:17:3A:3D:5F:E6:6A:EB:55:36:3C:68:1B:B8:23:97:D8:7A:8A:A5:4B:F6:CE:FA:AA:0B:0F:15:AC"}}},"request":{"raw":"GET /delivery/js/cmp_en.min.js HTTP/1.1\r\nHost: cdn.consentmanager.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco6.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 14:43:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Thu, 03 Sep 2026 09:20:12 GMT\r\netag: W/\"77710-65a90a8adefaa\"\r\ncache-control: max-age=86400\r\nexpires: Fri, 04 Sep 2026 09:22:13 GMT\r\nedge-control: max-age=86400\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-77-nzt: k7246zRJ5VvYG+yP2eET3KpRA0z91B3sk+/h2hB7GjlPzU9dSJBSCv2MIygC2NoV6w\r\nx-77-nzt-ray: 2a494a1559e78c783cd99a6ab84c6215\r\nage: 3807\r\nx-77-cache: HIT\r\nx-77-age: 19281\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":489232,"size_decoded":110324,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7416bc902671f9907df326bf5b751ccb","sha1":"6ce31d96ab87c5fb631bbc4c3ea1e90754fc2f59","sha256":"2b66954ebf380ccba584e9cbb09b825c8297664b659382dd3150fdc7ab805728","sha512":"75f00271bf50afcb1b62cb63d8357f2edcfbd5af5fca668f767900b57a391a1b2d934e361d235ad29c975e0aa37e18ae9c2ba6b9a1b1e24c624b9230a2981d38","ssdeep":"6144:AdsQ3BE1zDQHBOStezzq4vOaE56KYg5CH07Mn4hdZjINjbbylo+48KCVdhegvvwo:g6Vg5CH07M4hdoylRtvX","tlshash":"baa42756309321b41eeb49b4233f2b0579296b68680d509cfe70d4e46b96e8b7c73bf4","first_seen":"2026-09-03T09:39:49.154667Z","last_seen":"2026-09-04T16:31:30.241166Z","times_seen":109,"resource_available":true,"data":null}},"time_used":6375,"timings":{"blocked":0,"dns":6,"connect":1,"send":0,"wait":2,"receive":0,"ssl":6365},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=994\u0026%21Q=\u0026%21lAc=KeeV%2A%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_%2F\u0026%294I=\u0026%29I=-\u0026%29QABQ=\u0026%29bQ=\u0026%29bQH0=\u0026%2A%29QABQ=\u0026%2A%2ALQ=%7B%22%2A%2A22%22%3A%22wX%22%2C%22%2A%2A2eD%22%3A%22~D%2AI9%22%2C%22%2A%2AbV%22%3A%22%22%2C%22%2A%2A%2A2%22%3A%22d-%22%2C%22%2A%2A_bV%22%3A%22%22%7D\u0026%2A2=d-\u0026%2Ab_I=ffpCWnG3\u002622=wX\u00262AbQ=GCGpfp-3n\u00262K9~0=h%2AHCsb9e2\u00262K9~d=3TXfpR3Ct\u00262QH=XdCdp\u00262bQ=GzFn-td8P\u00262eVbQ=\u00264%29cLlbQ=H0\u002642e=TmBWw_m9SA_4IdW%2FcOrwOm_AI%2FSw_Omdd4O\u00264QH=\u00264Qe0=\u00264Qef=\u00264Qh~4b9=\u00264Vzq=\u00269eH=\u00269~IAA=f\u0026AIrqAL=KeeV%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_\u0026D%299s22sIWV=\u0026DQ%2AVA=\u0026DVLV=\u0026Hb=ftGGpdd--GnfdG3Gf0d\u0026I2AbQ=\u0026KeeV%2A=f\u0026L0eDVI=Q~hL4\u0026QI2~~~=\u0026Q~Ac=f\u0026SQVA=f\u0026SQVA29%2Ae=\u0026U%29bQ=ME+8T%28+uI%2Ae+i+0+5IHIL\u0026VbQ=GTX6fty7G\u0026b%2AbQ=-\u0026b9e2L=G7NUEtpNo%3AaFN%7CiIGN%3Ac3.1bq1qbY1JY%7CiwGN%3Aqbv1YJ1qq.13\u0026c%2A=\u0026e%2A2I=5fdC0\u0026hL4c=h9I\u0026hbQ=%2904Qd0IfidcGIiCGICiGpp%29idn4G-n%290Q-3c\u0026htmlsrc=1\u0026kkdd=H3%7C3%7CH%2AAn9\u0026l%2AKV=-\u0026lL%2AeV=-\u0026q%2AVI9c=-\u0026qSQ=C\u0026tpid=\u0026~%2AV4=-\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001788533008759032757816326975\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153607860816917616%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=OriD2QUIWzZDToaMPMtkyyQPYCaNoeZ9EHWbViG2KeILE5LR_Cf9aU6B-B35suAVb_-mJcIjdWM6V5zD0Y2kv1EK69DpQ6AwS4WEazeDsZHjn8Xx93aagnogBO4TKwV69fVjD1o5wNuh8XJPaSAkYqqNmcaknSZurg1s3Wu9iudFpvL0OMFRKGzcTndax4VftZVQAx70668%3D\u0026tchkpts=%7B%22prel2%22%3A1788533008990%7D\u0026stime=1788533008990\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252521lSg%252521%25252A%253DLwwn%25253A%25252F%25252FgtKgtntKA_CAxv%2526%25252Aewxnl%253D8p2%25252Ay%25261m%253DYfqq-RRIIq5YRqTqYeR%25262%25252Ay_%253D2Pl%25262m8%253D~ey8RelYKR_qlKDqlDKq--~KR5yqI5~e8IT_%252638n%252521%253DY%252638n%252521sPtw%253D%25268lsppp%253D%25268p%252521_%253DY%2526J%25252Atwn%253DI%2526JtLn%253DI%2526Lwwnt%253DY%2526Ppl%252521%252521%253DY%2526Pw1%253D%2526_t%253D%2526a~m8%253DOX%252B%252529ik%252BVltw%252BK%252Be%252B0l1l%25252A%2526d8%253D%2526dJ%252521_%253DLwwnt%25253A%25252F%25252FgtKgtntKA_CAxv%25252F%2526g38%253DD%2526gtnlP_%253DI%2526htmlsrc%253D1%2526kkdd%253D%25252AH%25257C3%25257CHA%25252A9n%2526ls%252521m8%253D%2526mPws%25252A%253DqEzaXf-zc%25253A%252528Wz%25257CKlqz%25253A_T4CmgCgmMC7M%25257CKHqz%25253Agm.CM7Cgg4CT%2526mtm8%253DI%2526nm8%253DqiUhYfrEq%2526ptny%253DI%2526s%252521m8%253DqDq-Y-IT5%2526s81%253DURDR-%2526sLPpR%253DTiUY-bTDf%2526sLPpe%253D2t1DNmPws%2526sm8%253DqFW5IfR%252529B%2526ss%253DHU%2526swnm8%253D%2526tmvl%253DYY-DA5qT%2526tpid%253D%2526ts%253DRI%2526tt%25252A8%253D%25257B%252522ttss%252522%25253A%252522HU%252522%25252C%252522ttswx%252522%25253A%252522pxtlP%252522%25252C%252522ttmn%252522%25253A%252522%252522%25252C%252522ttts%252522%25253A%252522RI%252522%25252C%252522ttvmn%252522%25253A%252522%252522%25257D%2526t~8%252521Z8%253D%2526wtsl%253D0YRDe%2526x8tn%252521%253D%2526xn%25252An%253D%2526x~PNssNlAn%253D%2526y81%253D%2526y82pymP%253D%2526y8wY%253D%2526y8we%253D%2526ynFg%253D%2526ysw%253Di6ZAHv6P3%252521vylRA%25252F_jSHj6v%252521l%25252F3Hvj6RRyj%2526y~_%25252AJm8%253D1e%2526~8%252521Z8%253D%2526~l%253DI%2526~m8%253D%2526~m81e%253D%2526~yl%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"172.67.166.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://yfdpco6.com/sk-park.php?pid=9PO15V947\u0026dn=us-usps-xf.xyz\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.us-usps-xf.xyz%2F\u0026reqref=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-09-04T14:43:28.997Z","timestamp":1788533008997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realtimesearchresults.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 13:02:15 GMT","end":"Mon, 30 Nov 2026 13:02:14 GMT"},"fingerprint":{"sha1":"7F:DE:6A:DA:A3:AA:BB:E4:18:F8:BE:CF:AD:99:5D:CD:4A:30:D2:EA","sha256":"1D:53:F2:A7:93:03:A6:AC:20:D4:C5:D9:6A:A4:BC:5E:2A:E4:17:1A:07:5E:DD:8E:77:35:F8:1C:BC:67:CC:D9"}}},"request":{"raw":"GET /sr/754870121/SAFEFRAME.html?ule=994\u0026%21Q=\u0026%21lAc=KeeV%2A%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_%2F\u0026%294I=\u0026%29I=-\u0026%29QABQ=\u0026%29bQ=\u0026%29bQH0=\u0026%2A%29QABQ=\u0026%2A%2ALQ=%7B%22%2A%2A22%22%3A%22wX%22%2C%22%2A%2A2eD%22%3A%22~D%2AI9%22%2C%22%2A%2AbV%22%3A%22%22%2C%22%2A%2A%2A2%22%3A%22d-%22%2C%22%2A%2A_bV%22%3A%22%22%7D\u0026%2A2=d-\u0026%2Ab_I=ffpCWnG3\u002622=wX\u00262AbQ=GCGpfp-3n\u00262K9~0=h%2AHCsb9e2\u00262K9~d=3TXfpR3Ct\u00262QH=XdCdp\u00262bQ=GzFn-td8P\u00262eVbQ=\u00264%29cLlbQ=H0\u002642e=TmBWw_m9SA_4IdW%2FcOrwOm_AI%2FSw_Omdd4O\u00264QH=\u00264Qe0=\u00264Qef=\u00264Qh~4b9=\u00264Vzq=\u00269eH=\u00269~IAA=f\u0026AIrqAL=KeeV%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_\u0026D%299s22sIWV=\u0026DQ%2AVA=\u0026DVLV=\u0026Hb=ftGGpdd--GnfdG3Gf0d\u0026I2AbQ=\u0026KeeV%2A=f\u0026L0eDVI=Q~hL4\u0026QI2~~~=\u0026Q~Ac=f\u0026SQVA=f\u0026SQVA29%2Ae=\u0026U%29bQ=ME+8T%28+uI%2Ae+i+0+5IHIL\u0026VbQ=GTX6fty7G\u0026b%2AbQ=-\u0026b9e2L=G7NUEtpNo%3AaFN%7CiIGN%3Ac3.1bq1qbY1JY%7CiwGN%3Aqbv1YJ1qq.13\u0026c%2A=\u0026e%2A2I=5fdC0\u0026hL4c=h9I\u0026hbQ=%2904Qd0IfidcGIiCGICiGpp%29idn4G-n%290Q-3c\u0026htmlsrc=1\u0026kkdd=H3%7C3%7CH%2AAn9\u0026l%2AKV=-\u0026lL%2AeV=-\u0026q%2AVI9c=-\u0026qSQ=C\u0026tpid=\u0026~%2AV4=-\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1 HTTP/1.1\r\nHost: realtimesearchresults.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco6.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:43:29 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncache-control: no-store, max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G0a8My%2BG5Nnin8ziWFVwbOEn8PO9wWZk0k4Zc2I9IB3hWD2UbEoB23aWcJz0lAU3qCIdPCWDXSKUhgsLdb3F67sHIs%2Bn5bKx9eEvItQCuYNK3Q3IqtAyM%2FsrSs0fMBNRaB9rzFJRxSOLEMMV\"}]}\r\nlink: \u003chttps://scripts.clarity.ms/0.8.54/clarity.js\u003e; rel=prefetch, \u003chttps://msadsscale.microsoft.com/bingads/telemetryJS.js\u003e; rel=prefetch, \u003chttps://www.clarity.ms\u003e; rel=dns-prefetch, \u003chttps://s.yimg.com/ds/scripts/selectTier-p1.1.0.js\u003e; rel=prefetch\r\nx-sc-h: 21-jxuq\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35dc44a5ef1b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73050,"size_decoded":28170,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (42946), with CRLF, LF line terminators","md5":"9ddf3e6d50dd312f043e75522790bd1c","sha1":"8ea5b3cfada01395a8cf8fdfedd8783458811933","sha256":"46d7184a483c68c0aff02b22a014882777f5042211bf6b698a8dec31f4b348e5","sha512":"c4ab55aebbfe54d82314e7a574f21887aa10fb84f4ff699d06291c17642830658e1ffd1ebd80e5571677c81092b2d4b399433a61a15f107928d3d768d6dadd2e","ssdeep":"1536:SKLsukMUSH3MMriSIFQ9Hfe2v6I1fqmn5PNTiqc775lCPaZbU9+KuOBtLiD5HZvo:SEsukMUSH3MMriSIFQ9Hfek6I1fqmnnd","tlshash":"226329dd34c27435177720a1a13f2e0ef2aa1556358d8840e5f9e6a23d7ca9f8a23e4d","first_seen":"2026-09-04T14:43:58.812136Z","last_seen":"2026-09-04T14:43:58.812136Z","times_seen":1,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":0,"dns":7,"connect":15,"send":0,"wait":253,"receive":265,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"realtimesearchresults.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"realtimesearchresults.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=2\u0026__cmpfcc=1\u0026id=175795\u0026o=1788532986\u0026h=https%3A%2F%2Fyfdpco6.com%2Fsk-park.php%3Fpid%3D9PO15V947%26dn%3Dus-usps-xf.xyz%26ua%3DMozilla%252F5.0%2B%2528Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%2529%2BGecko%252F20100101%2BFirefox%252F134.0%26ip%3D195.64.118.0%26xfip%3D195.64.118.0%26requrl%3Dhttp%253A%252F%252Fww38.us-usps-xf.xyz%252F%26reqref%3Dhttps%253A%252F%252Fus-usps-xf.xyz%252F%26al%3Den-US%252Cen%253Bq%253D0.9\u0026\u0026l=en\u0026odw=0\u0026dlt=1\u0026l=en","fqdn":"d.delivery.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"94.237.80.97","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yfdpco6.com/sk-park.php?pid=9PO15V947\u0026dn=us-usps-xf.xyz\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.us-usps-xf.xyz%2F\u0026reqref=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-09-04T14:43:29.190Z","timestamp":1788533009190,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.delivery.consentmanager.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FD:3D:5F:67:04:BA:73:77:A7:4B:D6:EB:58:C2:FC:D4:01:EE:58:64","sha256":"95:14:00:DA:64:95:A5:B3:BD:95:40:8F:E7:45:6C:68:21:88:41:0E:BA:77:8C:C4:50:5C:15:69:2E:02:AB:ED"}}},"request":{"raw":"GET /delivery/cmp.php?__cmpcc=2\u0026__cmpfcc=1\u0026id=175795\u0026o=1788532986\u0026h=https%3A%2F%2Fyfdpco6.com%2Fsk-park.php%3Fpid%3D9PO15V947%26dn%3Dus-usps-xf.xyz%26ua%3DMozilla%252F5.0%2B%2528Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%2529%2BGecko%252F20100101%2BFirefox%252F134.0%26ip%3D195.64.118.0%26xfip%3D195.64.118.0%26requrl%3Dhttp%253A%252F%252Fww38.us-usps-xf.xyz%252F%26reqref%3Dhttps%253A%252F%252Fus-usps-xf.xyz%252F%26al%3Den-US%252Cen%253Bq%253D0.9\u0026\u0026l=en\u0026odw=0\u0026dlt=1\u0026l=en HTTP/1.1\r\nHost: d.delivery.consentmanager.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco6.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Fri, 04 Sep 2026 14:43:06 GMT\r\nserver: Apache/2.4.68 (Debian)\r\ncache-control: no-store, no-cache, must-revalidate\r\nedge-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 01 Dec 1994 16:00:00 GMT\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Fri, 04 Sep 2026 14:43:06 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 3789\r\ncontent-type: text/javascript; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":9884,"size_decoded":4275,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5907)","md5":"6afb8a4bbf5eaf5e7762a308539b4373","sha1":"a9e9393ddd94a36f2856a88cd8660b9b920c1d74","sha256":"fe9198485f1d89b2b68cc1bba7804d3fa99400b2b8035f81461c657e083fd178","sha512":"5b3b69afc37ee45eba79211e42c2f14d8ac95bf1edaf15e9cb2bebc2739f4618d9d85edb2381ad79af28c8ac179f185acda01fddb47eb9e2c69912d788dfab20","ssdeep":"192:wnjUGGAoAUCvSKzdv93bzDDNISbjWJ7guf96zzKPydlgN:ijTrUmzhNNIZg2NPkgN","tlshash":"4312b689efe4d47847d61ab5263f5216b9a8031f0ccc81c0c7855d1c166abbb7f43eaa","first_seen":"2026-09-04T14:43:58.814895Z","last_seen":"2026-09-04T14:43:58.814895Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.cdn-fileserver.com/__media__/fonts/montserrat_regular/montserrat_regular.woff2","fqdn":"s.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=994\u0026%21Q=\u0026%21lAc=KeeV%2A%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_%2F\u0026%294I=\u0026%29I=-\u0026%29QABQ=\u0026%29bQ=\u0026%29bQH0=\u0026%2A%29QABQ=\u0026%2A%2ALQ=%7B%22%2A%2A22%22%3A%22wX%22%2C%22%2A%2A2eD%22%3A%22~D%2AI9%22%2C%22%2A%2AbV%22%3A%22%22%2C%22%2A%2A%2A2%22%3A%22d-%22%2C%22%2A%2A_bV%22%3A%22%22%7D\u0026%2A2=d-\u0026%2Ab_I=ffpCWnG3\u002622=wX\u00262AbQ=GCGpfp-3n\u00262K9~0=h%2AHCsb9e2\u00262K9~d=3TXfpR3Ct\u00262QH=XdCdp\u00262bQ=GzFn-td8P\u00262eVbQ=\u00264%29cLlbQ=H0\u002642e=TmBWw_m9SA_4IdW%2FcOrwOm_AI%2FSw_Omdd4O\u00264QH=\u00264Qe0=\u00264Qef=\u00264Qh~4b9=\u00264Vzq=\u00269eH=\u00269~IAA=f\u0026AIrqAL=KeeV%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_\u0026D%299s22sIWV=\u0026DQ%2AVA=\u0026DVLV=\u0026Hb=ftGGpdd--GnfdG3Gf0d\u0026I2AbQ=\u0026KeeV%2A=f\u0026L0eDVI=Q~hL4\u0026QI2~~~=\u0026Q~Ac=f\u0026SQVA=f\u0026SQVA29%2Ae=\u0026U%29bQ=ME+8T%28+uI%2Ae+i+0+5IHIL\u0026VbQ=GTX6fty7G\u0026b%2AbQ=-\u0026b9e2L=G7NUEtpNo%3AaFN%7CiIGN%3Ac3.1bq1qbY1JY%7CiwGN%3Aqbv1YJ1qq.13\u0026c%2A=\u0026e%2A2I=5fdC0\u0026hL4c=h9I\u0026hbQ=%2904Qd0IfidcGIiCGICiGpp%29idn4G-n%290Q-3c\u0026htmlsrc=1\u0026kkdd=H3%7C3%7CH%2AAn9\u0026l%2AKV=-\u0026lL%2AeV=-\u0026q%2AVI9c=-\u0026qSQ=C\u0026tpid=\u0026~%2AV4=-\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001788533008759032757816326975\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153607860816917616%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=OriD2QUIWzZDToaMPMtkyyQPYCaNoeZ9EHWbViG2KeILE5LR_Cf9aU6B-B35suAVb_-mJcIjdWM6V5zD0Y2kv1EK69DpQ6AwS4WEazeDsZHjn8Xx93aagnogBO4TKwV69fVjD1o5wNuh8XJPaSAkYqqNmcaknSZurg1s3Wu9iudFpvL0OMFRKGzcTndax4VftZVQAx70668%3D\u0026tchkpts=%7B%22prel2%22%3A1788533008990%7D\u0026stime=1788533008990\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252521lSg%252521%25252A%253DLwwn%25253A%25252F%25252FgtKgtntKA_CAxv%2526%25252Aewxnl%253D8p2%25252Ay%25261m%253DYfqq-RRIIq5YRqTqYeR%25262%25252Ay_%253D2Pl%25262m8%253D~ey8RelYKR_qlKDqlDKq--~KR5yqI5~e8IT_%252638n%252521%253DY%252638n%252521sPtw%253D%25268lsppp%253D%25268p%252521_%253DY%2526J%25252Atwn%253DI%2526JtLn%253DI%2526Lwwnt%253DY%2526Ppl%252521%252521%253DY%2526Pw1%253D%2526_t%253D%2526a~m8%253DOX%252B%252529ik%252BVltw%252BK%252Be%252B0l1l%25252A%2526d8%253D%2526dJ%252521_%253DLwwnt%25253A%25252F%25252FgtKgtntKA_CAxv%25252F%2526g38%253DD%2526gtnlP_%253DI%2526htmlsrc%253D1%2526kkdd%253D%25252AH%25257C3%25257CHA%25252A9n%2526ls%252521m8%253D%2526mPws%25252A%253DqEzaXf-zc%25253A%252528Wz%25257CKlqz%25253A_T4CmgCgmMC7M%25257CKHqz%25253Agm.CM7Cgg4CT%2526mtm8%253DI%2526nm8%253DqiUhYfrEq%2526ptny%253DI%2526s%252521m8%253DqDq-Y-IT5%2526s81%253DURDR-%2526sLPpR%253DTiUY-bTDf%2526sLPpe%253D2t1DNmPws%2526sm8%253DqFW5IfR%252529B%2526ss%253DHU%2526swnm8%253D%2526tmvl%253DYY-DA5qT%2526tpid%253D%2526ts%253DRI%2526tt%25252A8%253D%25257B%252522ttss%252522%25253A%252522HU%252522%25252C%252522ttswx%252522%25253A%252522pxtlP%252522%25252C%252522ttmn%252522%25253A%252522%252522%25252C%252522ttts%252522%25253A%252522RI%252522%25252C%252522ttvmn%252522%25253A%252522%252522%25257D%2526t~8%252521Z8%253D%2526wtsl%253D0YRDe%2526x8tn%252521%253D%2526xn%25252An%253D%2526x~PNssNlAn%253D%2526y81%253D%2526y82pymP%253D%2526y8wY%253D%2526y8we%253D%2526ynFg%253D%2526ysw%253Di6ZAHv6P3%252521vylRA%25252F_jSHj6v%252521l%25252F3Hvj6RRyj%2526y~_%25252AJm8%253D1e%2526~8%252521Z8%253D%2526~l%253DI%2526~m8%253D%2526~m81e%253D%2526~yl%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","date":"2026-09-04T14:43:29.411Z","timestamp":1788533009411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 19:29:19 GMT","end":"Thu, 22 Oct 2026 20:29:13 GMT"},"fingerprint":{"sha1":"90:47:F6:6B:6B:51:A2:68:C2:B7:73:31:7A:91:BC:57:76:65:26:8E","sha256":"20:B7:3C:50:10:4D:53:AB:B2:A7:A3:FF:C7:44:4E:88:6D:CC:A3:64:4C:D9:D9:F6:18:D3:0C:2A:6A:E9:61:25"}}},"request":{"raw":"GET /__media__/fonts/montserrat_regular/montserrat_regular.woff2 HTTP/1.1\r\nHost: s.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://realtimesearchresults.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://realtimesearchresults.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\nedge-control: downstream-ttl=1d\r\nvia: 1.1 google\r\ndate: Fri, 04 Sep 2026 14:43:29 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 28 Jul 2026 12:57:37 GMT\r\netag: \"47bc-657ab6223bdbd\"\r\ncontent-type: font/woff2\r\nage: 349277\r\nx-cache-status: hit\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=phEsl%2FZlrPzDFwL%2Bv901ZIaLyUofRysC3uf7rJgYZgK0EqaAIrvvxy2eXopH22ZCX5rQq9NvCZORs28cpt1MWntUWRCuldsKCtLe63FJrcSYIgQz8F2WcrpIicZjkMHN3hj58jq0Vg%3D%3D\"}]}\r\ncf-ray: a35dc44cde6f712b-OSL\r\ncontent-length: 18364\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":18364,"size_decoded":19194,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18364, version 2.66","md5":"eab53b254ec83ac26c6d8a63004d288a","sha1":"24c5d739638fbc993e5e094d47bf3c988972ffc9","sha256":"4172940dbc974b614385675cfa3ab182fb3a14ac1874cf2f5604aa4a44e8c83c","sha512":"477b4d1d7e207a6968041d2f7b171200d947ab01f35e470668c06def96989ea796aa32fe36b302d29649ea960b947e5ea3afb9ba5550cfd117b4cef89012afbd","ssdeep":"384:dATEcETU5IYcyEjBMvb1ftDXW4z3FN0lkLhZ/E3lyVs210i:dKLcjYcpjBMNVMkLhNE3ly510i","tlshash":"5582d06729c62617d8e30161a1d85748c4cb6579d3e979874fe2f180edeab414309ece","first_seen":"2026-08-17T13:38:05.415773Z","last_seen":"2026-09-04T16:31:30.249765Z","times_seen":1876,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"l.cdn-fileserver.com/bqi.php?vgd_len=2184\u0026\u0026vgd_aref=0\u0026vgd_tsce=L1342-S1342\u0026vgd_l2type=dmola\u0026vgd_ydspr=0\u0026vgd_cdv=O3435\u0026vgd_cage=0\u0026vgd_kwrf=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026vgd_pgids=0\u0026vgd_pdtid=1\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026lf=3\u0026prid=8PR11258V\u0026cid=8CU6073RK\u0026crid=848515096\u0026requrl=http%3A%2F%2Fus-usps-xf.xyz\u0026vi=1788533008613898123\u0026ugd=4\u0026cc=NO\u0026sc=30\u0026gdpr=1\u0026vgd_acid=undefined\u0026hvsid=00001788533008759032757816326975\u0026vgd_vimpt=30\u0026vgd_vimpd=1000\u0026cme=Avn8PFa-APhvrK2SMwXsDTof4yksOsa6ZzZlQv-v4Tqs_0jONHh_GqepuO8f0akgiVoxOa8h086PhSiXc3t4dJK-1rUyiPOo2ZquwIxQ8rYzobYzI9-Fun-5ib7SJdxtj2Fk3VhbPTLea6UIXPmDzvevVVdoyjNDUZkGtTrZypGweS0NEvelAieynI8sTB-xQuhMey4vvDqZVVE6-Lbheb7dknxdA_p63dbePjbjtskzvS2Zi_TDH3x2HPqkCVP-8RaF_InPujS1_C5Jo2_hcAGO-90bsWoohzzpiW7kzxY%3D%7C%7CWtJPvijWHRsfBv4nOZN-Vs0s0qvvEfG0%7CxDcVMoSqRIQVC5Dwi8YJ9bhEmBRacXnGUU3rL0EiR64%3D%7Cxrl5Md8q4-_wI34-zVnqf9tGTazdiA5BJ7x4vmZhSF0%3D%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7Cec-6tG-Oi6KTdp2bfLkkbyV2w5GKWEDRhpECXQynv5SA5s3GlL9UAGBrOBxCVDPmEQWS6H-EIAgJUIU0ARM3p0y8oaApHp3eJ183k9bnAgFJFwPn9Prix8CmNBF1Pe0tYSEiJtV-fLsedwl6zEn-ZpEpCI_HxsRpgRImGdG3qRIw9W0Y3QSpioKkDt6BAqYkRp80-Ny_gw5BltknR9r2vo5bc2tuc3_jZ7_fepPgIpFu406pq4CfH15ZGTQicXExg_qLf8iZK5oiZ8cjZkylqMg8Gw7tj4RU9YfoD5sNt0K4RJyblmcMy737BT8AubnXph38p-pjK_FBoDSwDCsBc1xiY6WgsUAgX0fVTDFxgEI5b33fvtk5YWa44r8wmjz8dlFuhp_CHMnKiUtxIkv9uua0VNOjpB6LFM6oMu6WwXhL5Vuy4RdyFyWLW0VkIQTNkpXf17yXRMoHBYJvbUR5sf2IhbJqbs7ySXz1Yx-oCk_ba287g9oHNmPo9mOUAwrutzFA4MYmLYdmTCQO1XD9iLV0YCJIKLqIU6scRMvnJT1w03QbQ0WeQ8ceW5ckLL0Fih1RLdJ_9cgwVdGUwJThZxNRJ-wM56FARawylbej8PTF9ZJ0kCw67E0aUpkviLcvAggMzYeVyB9PpH9QGh_IE2yX4qljm_381b12gBR4mbfQ1I50akvx4l8Qf_zbN57XTMyHFTwNGS-dWe5LalZk_vcBzIvDttRUBT_FMiO7sNJV9oKKcd2ZuV6ePTcyWEQM1W0KEjue2oKwsPZ1I5LqFohlzuX9oDZN9Eh7uvoAhHYc779hBhIOJXMeB-b024xEnVzJrVPJPBHjxVFZ2e7kVH7O4zukqq4GhPixPgn3or3AGqziyR7oTFFUN4br4p8oiyPCyOedYV8NDLuba8MzKKD41HL2vJlCW8D2e1bhzlGnVvPShGm49FdsCCTIGF5Dm7UA8f7Wu5_AnPunjIl35rmY9NEgbO-p1lKFlLc2lS_4BmymTypefnj79oT7arm1a6K7z0_4Ckjw5hSIcazA1a8wwT18F9cALR2lDkmzvn4%3D%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7C\u0026fp=ls-hbhCOjusIj7icDEh73NYcQMtcHByGwKFjwyr9FAYjsMGnEVnt2zRunEtIfxv-rXiKMsYoCXTg6RIt_sbqvL5X1gjFAYct_qEzMLt7-iKaNJrVZmdabkyxo5mJZR9kqhe3QL_wyU8%3D\u0026vgd_rensize=1280_926\u0026vgd_end=1","fqdn":"l.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=994\u0026%21Q=\u0026%21lAc=KeeV%2A%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_%2F\u0026%294I=\u0026%29I=-\u0026%29QABQ=\u0026%29bQ=\u0026%29bQH0=\u0026%2A%29QABQ=\u0026%2A%2ALQ=%7B%22%2A%2A22%22%3A%22wX%22%2C%22%2A%2A2eD%22%3A%22~D%2AI9%22%2C%22%2A%2AbV%22%3A%22%22%2C%22%2A%2A%2A2%22%3A%22d-%22%2C%22%2A%2A_bV%22%3A%22%22%7D\u0026%2A2=d-\u0026%2Ab_I=ffpCWnG3\u002622=wX\u00262AbQ=GCGpfp-3n\u00262K9~0=h%2AHCsb9e2\u00262K9~d=3TXfpR3Ct\u00262QH=XdCdp\u00262bQ=GzFn-td8P\u00262eVbQ=\u00264%29cLlbQ=H0\u002642e=TmBWw_m9SA_4IdW%2FcOrwOm_AI%2FSw_Omdd4O\u00264QH=\u00264Qe0=\u00264Qef=\u00264Qh~4b9=\u00264Vzq=\u00269eH=\u00269~IAA=f\u0026AIrqAL=KeeV%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_\u0026D%299s22sIWV=\u0026DQ%2AVA=\u0026DVLV=\u0026Hb=ftGGpdd--GnfdG3Gf0d\u0026I2AbQ=\u0026KeeV%2A=f\u0026L0eDVI=Q~hL4\u0026QI2~~~=\u0026Q~Ac=f\u0026SQVA=f\u0026SQVA29%2Ae=\u0026U%29bQ=ME+8T%28+uI%2Ae+i+0+5IHIL\u0026VbQ=GTX6fty7G\u0026b%2AbQ=-\u0026b9e2L=G7NUEtpNo%3AaFN%7CiIGN%3Ac3.1bq1qbY1JY%7CiwGN%3Aqbv1YJ1qq.13\u0026c%2A=\u0026e%2A2I=5fdC0\u0026hL4c=h9I\u0026hbQ=%2904Qd0IfidcGIiCGICiGpp%29idn4G-n%290Q-3c\u0026htmlsrc=1\u0026kkdd=H3%7C3%7CH%2AAn9\u0026l%2AKV=-\u0026lL%2AeV=-\u0026q%2AVI9c=-\u0026qSQ=C\u0026tpid=\u0026~%2AV4=-\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001788533008759032757816326975\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153607860816917616%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=OriD2QUIWzZDToaMPMtkyyQPYCaNoeZ9EHWbViG2KeILE5LR_Cf9aU6B-B35suAVb_-mJcIjdWM6V5zD0Y2kv1EK69DpQ6AwS4WEazeDsZHjn8Xx93aagnogBO4TKwV69fVjD1o5wNuh8XJPaSAkYqqNmcaknSZurg1s3Wu9iudFpvL0OMFRKGzcTndax4VftZVQAx70668%3D\u0026tchkpts=%7B%22prel2%22%3A1788533008990%7D\u0026stime=1788533008990\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252521lSg%252521%25252A%253DLwwn%25253A%25252F%25252FgtKgtntKA_CAxv%2526%25252Aewxnl%253D8p2%25252Ay%25261m%253DYfqq-RRIIq5YRqTqYeR%25262%25252Ay_%253D2Pl%25262m8%253D~ey8RelYKR_qlKDqlDKq--~KR5yqI5~e8IT_%252638n%252521%253DY%252638n%252521sPtw%253D%25268lsppp%253D%25268p%252521_%253DY%2526J%25252Atwn%253DI%2526JtLn%253DI%2526Lwwnt%253DY%2526Ppl%252521%252521%253DY%2526Pw1%253D%2526_t%253D%2526a~m8%253DOX%252B%252529ik%252BVltw%252BK%252Be%252B0l1l%25252A%2526d8%253D%2526dJ%252521_%253DLwwnt%25253A%25252F%25252FgtKgtntKA_CAxv%25252F%2526g38%253DD%2526gtnlP_%253DI%2526htmlsrc%253D1%2526kkdd%253D%25252AH%25257C3%25257CHA%25252A9n%2526ls%252521m8%253D%2526mPws%25252A%253DqEzaXf-zc%25253A%252528Wz%25257CKlqz%25253A_T4CmgCgmMC7M%25257CKHqz%25253Agm.CM7Cgg4CT%2526mtm8%253DI%2526nm8%253DqiUhYfrEq%2526ptny%253DI%2526s%252521m8%253DqDq-Y-IT5%2526s81%253DURDR-%2526sLPpR%253DTiUY-bTDf%2526sLPpe%253D2t1DNmPws%2526sm8%253DqFW5IfR%252529B%2526ss%253DHU%2526swnm8%253D%2526tmvl%253DYY-DA5qT%2526tpid%253D%2526ts%253DRI%2526tt%25252A8%253D%25257B%252522ttss%252522%25253A%252522HU%252522%25252C%252522ttswx%252522%25253A%252522pxtlP%252522%25252C%252522ttmn%252522%25253A%252522%252522%25252C%252522ttts%252522%25253A%252522RI%252522%25252C%252522ttvmn%252522%25253A%252522%252522%25257D%2526t~8%252521Z8%253D%2526wtsl%253D0YRDe%2526x8tn%252521%253D%2526xn%25252An%253D%2526x~PNssNlAn%253D%2526y81%253D%2526y82pymP%253D%2526y8wY%253D%2526y8we%253D%2526ynFg%253D%2526ysw%253Di6ZAHv6P3%252521vylRA%25252F_jSHj6v%252521l%25252F3Hvj6RRyj%2526y~_%25252AJm8%253D1e%2526~8%252521Z8%253D%2526~l%253DI%2526~m8%253D%2526~m81e%253D%2526~yl%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","date":"2026-09-04T14:43:30.582Z","timestamp":1788533010582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 19:29:19 GMT","end":"Thu, 22 Oct 2026 20:29:13 GMT"},"fingerprint":{"sha1":"90:47:F6:6B:6B:51:A2:68:C2:B7:73:31:7A:91:BC:57:76:65:26:8E","sha256":"20:B7:3C:50:10:4D:53:AB:B2:A7:A3:FF:C7:44:4E:88:6D:CC:A3:64:4C:D9:D9:F6:18:D3:0C:2A:6A:E9:61:25"}}},"request":{"raw":"GET /bqi.php?vgd_len=2184\u0026\u0026vgd_aref=0\u0026vgd_tsce=L1342-S1342\u0026vgd_l2type=dmola\u0026vgd_ydspr=0\u0026vgd_cdv=O3435\u0026vgd_cage=0\u0026vgd_kwrf=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026vgd_pgids=0\u0026vgd_pdtid=1\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026lf=3\u0026prid=8PR11258V\u0026cid=8CU6073RK\u0026crid=848515096\u0026requrl=http%3A%2F%2Fus-usps-xf.xyz\u0026vi=1788533008613898123\u0026ugd=4\u0026cc=NO\u0026sc=30\u0026gdpr=1\u0026vgd_acid=undefined\u0026hvsid=00001788533008759032757816326975\u0026vgd_vimpt=30\u0026vgd_vimpd=1000\u0026cme=Avn8PFa-APhvrK2SMwXsDTof4yksOsa6ZzZlQv-v4Tqs_0jONHh_GqepuO8f0akgiVoxOa8h086PhSiXc3t4dJK-1rUyiPOo2ZquwIxQ8rYzobYzI9-Fun-5ib7SJdxtj2Fk3VhbPTLea6UIXPmDzvevVVdoyjNDUZkGtTrZypGweS0NEvelAieynI8sTB-xQuhMey4vvDqZVVE6-Lbheb7dknxdA_p63dbePjbjtskzvS2Zi_TDH3x2HPqkCVP-8RaF_InPujS1_C5Jo2_hcAGO-90bsWoohzzpiW7kzxY%3D%7C%7CWtJPvijWHRsfBv4nOZN-Vs0s0qvvEfG0%7CxDcVMoSqRIQVC5Dwi8YJ9bhEmBRacXnGUU3rL0EiR64%3D%7Cxrl5Md8q4-_wI34-zVnqf9tGTazdiA5BJ7x4vmZhSF0%3D%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7Cec-6tG-Oi6KTdp2bfLkkbyV2w5GKWEDRhpECXQynv5SA5s3GlL9UAGBrOBxCVDPmEQWS6H-EIAgJUIU0ARM3p0y8oaApHp3eJ183k9bnAgFJFwPn9Prix8CmNBF1Pe0tYSEiJtV-fLsedwl6zEn-ZpEpCI_HxsRpgRImGdG3qRIw9W0Y3QSpioKkDt6BAqYkRp80-Ny_gw5BltknR9r2vo5bc2tuc3_jZ7_fepPgIpFu406pq4CfH15ZGTQicXExg_qLf8iZK5oiZ8cjZkylqMg8Gw7tj4RU9YfoD5sNt0K4RJyblmcMy737BT8AubnXph38p-pjK_FBoDSwDCsBc1xiY6WgsUAgX0fVTDFxgEI5b33fvtk5YWa44r8wmjz8dlFuhp_CHMnKiUtxIkv9uua0VNOjpB6LFM6oMu6WwXhL5Vuy4RdyFyWLW0VkIQTNkpXf17yXRMoHBYJvbUR5sf2IhbJqbs7ySXz1Yx-oCk_ba287g9oHNmPo9mOUAwrutzFA4MYmLYdmTCQO1XD9iLV0YCJIKLqIU6scRMvnJT1w03QbQ0WeQ8ceW5ckLL0Fih1RLdJ_9cgwVdGUwJThZxNRJ-wM56FARawylbej8PTF9ZJ0kCw67E0aUpkviLcvAggMzYeVyB9PpH9QGh_IE2yX4qljm_381b12gBR4mbfQ1I50akvx4l8Qf_zbN57XTMyHFTwNGS-dWe5LalZk_vcBzIvDttRUBT_FMiO7sNJV9oKKcd2ZuV6ePTcyWEQM1W0KEjue2oKwsPZ1I5LqFohlzuX9oDZN9Eh7uvoAhHYc779hBhIOJXMeB-b024xEnVzJrVPJPBHjxVFZ2e7kVH7O4zukqq4GhPixPgn3or3AGqziyR7oTFFUN4br4p8oiyPCyOedYV8NDLuba8MzKKD41HL2vJlCW8D2e1bhzlGnVvPShGm49FdsCCTIGF5Dm7UA8f7Wu5_AnPunjIl35rmY9NEgbO-p1lKFlLc2lS_4BmymTypefnj79oT7arm1a6K7z0_4Ckjw5hSIcazA1a8wwT18F9cALR2lDkmzvn4%3D%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7C\u0026fp=ls-hbhCOjusIj7icDEh73NYcQMtcHByGwKFjwyr9FAYjsMGnEVnt2zRunEtIfxv-rXiKMsYoCXTg6RIt_sbqvL5X1gjFAYct_qEzMLt7-iKaNJrVZmdabkyxo5mJZR9kqhe3QL_wyU8%3D\u0026vgd_rensize=1280_926\u0026vgd_end=1 HTTP/1.1\r\nHost: l.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://realtimesearchresults.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0, no-cache, no-store\r\ncontent-type: text/javascript\r\nexpires: Thu, 03 Sep 2026 14:43:30 GMT\r\npragma: no-cache\r\ndate: Fri, 04 Sep 2026 14:43:30 GMT\r\nserver-timing: cfExtPri\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pToUrXtsPDtbBWVpm8hAt36e3DB9Subp3VaMBc%2Fi8Jf4wYF1SPl2heBoAGv3QRK0YlSp5jvy5VkDrr9c8Dccag%2BCakSB9ePwJqck74TCaG5kw1syyJnLTEAxXSVcmF4nMZkKsqP3Vg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35dc4542eaf712b-OSL\r\ncontent-length: 15\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":15,"size_decoded":887,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"2ba5e95642c652c708881ad3c9d8443f","sha1":"5bfcc33bb9cc897546c600206b03d1307bd63a94","sha256":"c787e9dd6dc8ea3c935f5f0f30e3b9e4a3e066b4619bb244f569883f8e318a24","sha512":"8c157fc41fd03bbd47633269b18effb652644e58284f8f85465b0ffba9b5a06544a03ed0655706c96edfa09a64f4f164f6bbc573ac5045000cae03c8b36d046f","ssdeep":"","tlshash":"7e600000000cc030030f0c00c3000300303000c000000c33000f30cc000000c00fc303","first_seen":"2025-03-08T00:25:13.560069Z","last_seen":"2026-09-04T18:02:51.865847Z","times_seen":219711,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.consentmanager.net/delivery/recall/logos/175795","fqdn":"cdn.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"95.173.205.15","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yfdpco6.com/sk-park.php?pid=9PO15V947\u0026dn=us-usps-xf.xyz\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.us-usps-xf.xyz%2F\u0026reqref=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-09-04T14:43:35.652Z","timestamp":1788533015652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.consentmanager.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"70:78:AC:EC:58:46:BE:A4:98:C0:29:71:CD:B8:DF:DC:99:05:84:92","sha256":"C2:1B:99:0D:17:3A:3D:5F:E6:6A:EB:55:36:3C:68:1B:B8:23:97:D8:7A:8A:A5:4B:F6:CE:FA:AA:0B:0F:15:AC"}}},"request":{"raw":"GET /delivery/recall/logos/175795 HTTP/1.1\r\nHost: cdn.consentmanager.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco6.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 04 Sep 2026 14:43:35 GMT\r\ncontent-type: image/svg+xml\r\nexpires: Sat, 05 Sep 2026 08:50:38 GMT\r\ncache-control: public, max-age=86400\r\nedge-control: public, max-age=86400, max-age=2592000\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-77-nzt: k4DXYTCSrtrWzkdlCg/xlE+yIf2E24kWq6abr8xicuem9GQ+Y0Jt8YtAJ7Wgn9JxQEbjITI\r\nx-77-nzt-ray: 2a494a1559e78c783cd99a6a9e67d226\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-age: 21154\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2208,"size_decoded":1615,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9663837b7e86ac01b6a47c0a5dad0a37","sha1":"69d5e34c9211623decc0e25ba50327f07c50fbe9","sha256":"b63cd6f0d99d9c77bd0f2d6a43abf5a3fa7ae2b684abbc9f8c897d9751b83b51","sha512":"4a3afe10eff251478162cbd33e8526791ef0a3725b440e7ad64335f51554b40151ef9adbfff4162d69cb197a20d90588cdae00ea3290f1ded8be1861d040752d","ssdeep":"","tlshash":"e7418620e7b889755c488b640ef80c833f69184f3814a588febca2d6bf22d508a55e5f","first_seen":"2025-06-18T19:16:16.051879Z","last_seen":"2026-09-04T18:02:51.896008Z","times_seen":23018,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"34.251.101.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.us-usps-xf.xyz/","date":"2026-09-04T14:43:38.064Z","timestamp":1788533018064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 17 Aug 2026 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EE:E8:EA:46:19:BB:CD:06:47:CD:BE:A5:CB:4D:D5:B1:10:DA:04:FB","sha256":"6F:F7:26:C1:10:8F:08:8A:9A:3F:1B:1D:C0:B2:22:FA:92:87:E8:8E:0B:BF:4D:70:D3:63:B0:64:7C:53:C5:9D"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2749\r\nOrigin: https://ww38.us-usps-xf.xyz\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.us-usps-xf.xyz/\r\nCookie: cg_uuid=dca731e105346292301336e3a10b7132\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2749,"data":"e=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\u0026cri=BJlqw0sZoV\u0026sf=0\u0026dc=\u0026cp=10\u0026gtm=-\u0026gac=-\u0026uvid=d6f5937a07afe1ecccc36321578a38ebe79c5497\u0026tb=1%7C7%2C62\u0026gi=17%2C2575\u0026ich=0\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=62\u0026ti=10052\u0026mo=0\u0026pn=12565\u0026spn=2513\u0026sck=88298e881ab6e60c137ccd3edcf05eda.K6JRZRobf4ukO0fy%3AhP6U5%2BTtIsJ0FKJhM%2BfWb4tQI16nJiTP8DkM2KzaijNEoFKHtGQJJ4Yvhlzhh2IUSza9ofFoGNxqginIIevbCrh5cF4S%2BDsUifYb4hz9oo7CF3TmuEeI9pwZh3Oh6QpjBaNrbPhIiB%2BxM5dzX2MIJVa083iHLBrEhXOzEZ2dewJo9V%2BGGp6Rwik6mh63n3buBrGLBzm%2FEX5M5jAUsk58z9RoXpnFLSVbFwoG38WE%2FqFdSehr%2FbepYgShVOuRKGvRkF4rLSkYv%2BP2bbwU%2F5rnoIeJ33iAotm8WwvHAZjp7lOJ21oF8katk0nWqrrnMhbUUaQADrpqYViUs1979YUIhGFoMIz9exo4WpWCTtxyBH%2FZnJlGz5Z5%2FUqyzWU3mnxiPAX1AcB1FH8HoV%2BIYlUADPzHfmHLWRkRbEQKjzDsOhlxKYwpEJ%2FznbDpjYjcd5AI0dHUuTdV06hzFJ%2FCeoMdM1C81dvnlw%3D%3D%3AkWpQ3QffvQQomscRS68TUg%3D%3D\u0026fp=1626\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0\u0026snt=1"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.us-usps-xf.xyz\r\ncontent-type: application/json\r\ndate: Fri, 04 Sep 2026 14:43:38 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":3649,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"34.251.101.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.us-usps-xf.xyz/","date":"2026-09-04T14:43:43.075Z","timestamp":1788533023075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 17 Aug 2026 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EE:E8:EA:46:19:BB:CD:06:47:CD:BE:A5:CB:4D:D5:B1:10:DA:04:FB","sha256":"6F:F7:26:C1:10:8F:08:8A:9A:3F:1B:1D:C0:B2:22:FA:92:87:E8:8E:0B:BF:4D:70:D3:63:B0:64:7C:53:C5:9D"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2749\r\nOrigin: https://ww38.us-usps-xf.xyz\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.us-usps-xf.xyz/\r\nCookie: cg_uuid=dca731e105346292301336e3a10b7132\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2749,"data":"e=37dfbd8ee84e001262e6c236e9478a9a9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d57138d642f17070100b1eabfd72e30d69183042b3e18f6646541c2628b70cd166456729451010a34045ac5ba6d4d6ca037e264da4af6c638a1536ffe0a2c7913c84ffe1fbe85ddcd3cb82d19f97adea954659005344163588b934131b723f8b388a75f45af34d0fd60b47d8b74c14e851538c9745bad4b01473cb52d3ea7dfa2f46cff1ab458da17f85e3975bddc273b7d70588661979d00e07360abc8ee3d4f7a23d6862f208a902a476811275843b88f2f646307b6e65b3bd9eae72482e95d711c2daea6f1c19b21bfd5de53e953c9506d34cbeb9be1a33793dfb138942112c3a79c3e1215f0606ca08c0621ac84e97e9d5ebb02f2c712dd508c887ccc2670d584629b25d3cfa0a591a7aa5335e433a4efaf3b5b35a0c121c5e501ec1b540bd45c5999c2828899bca91d8864909ef5d028a03c6c37c4207ddad4814923d7f863ac11a7cb0d9c61b96f5313198121ae42cbd6bc6ef79d3c8b06fc97919b29ce584e2da51e37556f6f79c9a721fb07dfe89727aa9925b3d020d996e2fb7e99bbea532626c8e51e0a9bb20a7b0cffebee22dd6e88e04ef2f232a02af242c90a814a93d168d51035f9bc8e747d63720941085d14b6e08c6cd202ab444e432bf0a84edf981b0ce2b9dfbabf6edeece4fc85feb3f04b4f3ff35b87b6596a845f6607ca625f7970eb78a77105dfe8c767967dd0248ab731cab90985660921216f6001c885bd8f2e71479b064492dbd1beb3c9530599aec11df1c7721dde9870753db0c6901326a53b971cda43b72d9100dad612ffb23ae7988bd298407c86834935e872f7f1d8e16ec73f376d7d86745114f4fa0b9de606cb879acf5cc58284300e3740a059e95fa83fc8c76adf68042940467c02f3469cc37303ab65abcae9279b8b149e7e73b303287ddbb9ad5509bf35acd14eb852665915e2292680b3c53c9e152c908612a2c3cfbfdd13c857543e07b22a70108e9a0f5db920f5be9c6f9dd9ec124f23e139711a0ece0b42b9dabd4d53826872d2949b539697e98d4b28ba2ca95e3c03de442263c781475381d3e3d5e2b60ff378e2379337cbd14798b1e4396fbc944ad096acaed6a19594635086ad370ad84dd055da1db4a639a2ddaa8c2fe6d992bb8d1f39c1b7b9b651dd46cf0744354e7ac082656a9a38aa0495df2abd486af22e079369efdf3d29f0242103598eac896fd19c0f602c34738e8c98f8d07dc846f2be382c9e905b1419023a626af129b2e76913a3b5dac4e3aeaea9bfcc28e2f2831c2d30\u0026cri=BJlqw0sZoV\u0026sf=0\u0026dc=\u0026cp=15\u0026gtm=-\u0026gac=-\u0026uvid=d6f5937a07afe1ecccc36321578a38ebe79c5497\u0026tb=1%7C7%2C62\u0026gi=17%2C2575\u0026ich=0\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=62\u0026ti=15062\u0026mo=0\u0026pn=17575\u0026spn=2513\u0026sck=88298e881ab6e60c137ccd3edcf05eda.K6JRZRobf4ukO0fy%3AhP6U5%2BTtIsJ0FKJhM%2BfWb4tQI16nJiTP8DkM2KzaijNEoFKHtGQJJ4Yvhlzhh2IUSza9ofFoGNxqginIIevbCrh5cF4S%2BDsUifYb4hz9oo7CF3TmuEeI9pwZh3Oh6QpjBaNrbPhIiB%2BxM5dzX2MIJVa083iHLBrEhXOzEZ2dewJo9V%2BGGp6Rwik6mh63n3buBrGLBzm%2FEX5M5jAUsk58z9RoXpnFLSVbFwoG38WE%2FqFdSehr%2FbepYgShVOuRKGvRkF4rLSkYv%2BP2bbwU%2F5rnoIeJ33iAotm8WwvHAZjp7lOJ21oF8katk0nWqrrnMhbUUaQADrpqYViUs1979YUIhGFoMIz9exo4WpWCTtxyBH%2FZnJlGz5Z5%2FUqyzWU3mnxiPAX1AcB1FH8HoV%2BIYlUADPzHfmHLWRkRbEQKjzDsOhlxKYwpEJ%2FznbDpjYjcd5AI0dHUuTdV06hzFJ%2FCeoMdM1C81dvnlw%3D%3D%3AkWpQ3QffvQQomscRS68TUg%3D%3D\u0026fp=1626\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0\u0026snt=1"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.us-usps-xf.xyz\r\ncontent-type: application/json\r\ndate: Fri, 04 Sep 2026 14:43:43 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":3649,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww38.us-usps-xf.xyz/e0b55647-f7e8-4a6f-87bf-f8df1ca6c443/eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.UNwjDb5lkdJLz63amT4irI1l5YiNHC4jsqSF5iw3OZAHm1ddsLTCcg.-RVAFcT9ynYbCHIv5bPM3A.H2gG7wIyOo8e7yf6s7dkX1niludUyp3q6aQcQN55d9k5GtljSQcgVRqdGHyvOX2DqHy-4k3ydWiidKQxQrYpkh6mHg80-O3YDggdMHmYbcuCx5lLT1nXjNH0kznRePxvWWDYbobmyY-tpKXkU76kAw75OpGGvSLFa3bE7oYESsVmPOCtXyMuAVT9dp5qGc2iG_PrL-2-qnItN3NHUZbwDh0kaeeJ7fP6AhTkmFpFrLMMHGh9J36PcONjLZ3KQlpXUtpdyuFXD3HfVc3cH1KjCLCQ93ZH_hE5hf0TjuA44wX1uYsheIabHPwEAwbbEqXkaXUko3_Unt5YReFXb87HmQ.xJqNC9zoP1mUAzj3ZHwCkw","fqdn":"ww38.us-usps-xf.xyz","domain":"us-usps-xf.xyz","tld":"xyz"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ww38.us-usps-xf.xyz/","date":"2026-09-04T14:43:27.367Z","timestamp":1788533007367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww38.us-usps-xf.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 23:28:48 GMT","end":"Tue, 20 Oct 2026 23:28:47 GMT"},"fingerprint":{"sha1":"99:10:65:29:B8:F3:72:9D:8B:F4:16:E5:0F:A0:C2:B2:9C:49:8A:67","sha256":"8C:07:D2:DB:A8:AD:6E:12:FF:0B:28:DD:5B:7E:CF:BE:D2:A8:28:8F:2D:F1:5F:FC:08:90:DC:6C:5D:55:63:73"}}},"request":{"raw":"GET /e0b55647-f7e8-4a6f-87bf-f8df1ca6c443/eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.UNwjDb5lkdJLz63amT4irI1l5YiNHC4jsqSF5iw3OZAHm1ddsLTCcg.-RVAFcT9ynYbCHIv5bPM3A.H2gG7wIyOo8e7yf6s7dkX1niludUyp3q6aQcQN55d9k5GtljSQcgVRqdGHyvOX2DqHy-4k3ydWiidKQxQrYpkh6mHg80-O3YDggdMHmYbcuCx5lLT1nXjNH0kznRePxvWWDYbobmyY-tpKXkU76kAw75OpGGvSLFa3bE7oYESsVmPOCtXyMuAVT9dp5qGc2iG_PrL-2-qnItN3NHUZbwDh0kaeeJ7fP6AhTkmFpFrLMMHGh9J36PcONjLZ3KQlpXUtpdyuFXD3HfVc3cH1KjCLCQ93ZH_hE5hf0TjuA44wX1uYsheIabHPwEAwbbEqXkaXUko3_Unt5YReFXb87HmQ.xJqNC9zoP1mUAzj3ZHwCkw HTTP/1.1\r\nHost: ww38.us-usps-xf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ww38.us-usps-xf.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 \r\nalt-svc: h3=\":8443\"; ma=2592000\r\ndate: Fri, 04 Sep 2026 14:43:27 GMT\r\nserver: Caddy\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":136,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"ww38.us-usps-xf.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"ww38.us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"l.cdn-fileserver.com/bping.php?ugd=4\u0026wsip=170763715\u0026requrl=http%3A%2F%2Fus-usps-xf.xyz\u0026r=1788533008761\u0026vgd_tsce=L1342\u0026vgd_oreqf=one\u0026cid=8CU6073RK\u0026hvsid=00001788533008759032757816326975\u0026lf=6\u0026mspa=0\u0026vgd_cage=56\u0026vgd_cdv=O3435\u0026vgd_setup=c21\u0026prid=8PR11258V\u0026vi=1788533008613898123\u0026cc=NO\u0026ssld=%7B%22QQNN%22%3A%22Ia%22%2C%22QQN75%22%3A%22Y5QJz%22%2C%22QQ8E%22%3A%22%22%2C%22QQQN%22%3A%22A9%22%2C%22QQl8E%22%3A%22%22%7D\u0026vgd_l2type=dmola\u0026sc=30\u0026lper=100\u0026vgd_asn=50304\u0026vgd_rpth=%2Fola\u0026gdpr=1\u0026wshp=0\u0026vgd_oresf=one\u0026vgd_wlstp=0\u0026crid=848515096\u0026vgd_len=555\u0026vgd_end=1","fqdn":"l.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yfdpco6.com/sk-park.php?pid=9PO15V947\u0026dn=us-usps-xf.xyz\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.us-usps-xf.xyz%2F\u0026reqref=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-09-04T14:43:28.970Z","timestamp":1788533008970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 19:29:19 GMT","end":"Thu, 22 Oct 2026 20:29:13 GMT"},"fingerprint":{"sha1":"90:47:F6:6B:6B:51:A2:68:C2:B7:73:31:7A:91:BC:57:76:65:26:8E","sha256":"20:B7:3C:50:10:4D:53:AB:B2:A7:A3:FF:C7:44:4E:88:6D:CC:A3:64:4C:D9:D9:F6:18:D3:0C:2A:6A:E9:61:25"}}},"request":{"raw":"GET /bping.php?ugd=4\u0026wsip=170763715\u0026requrl=http%3A%2F%2Fus-usps-xf.xyz\u0026r=1788533008761\u0026vgd_tsce=L1342\u0026vgd_oreqf=one\u0026cid=8CU6073RK\u0026hvsid=00001788533008759032757816326975\u0026lf=6\u0026mspa=0\u0026vgd_cage=56\u0026vgd_cdv=O3435\u0026vgd_setup=c21\u0026prid=8PR11258V\u0026vi=1788533008613898123\u0026cc=NO\u0026ssld=%7B%22QQNN%22%3A%22Ia%22%2C%22QQN75%22%3A%22Y5QJz%22%2C%22QQ8E%22%3A%22%22%2C%22QQQN%22%3A%22A9%22%2C%22QQl8E%22%3A%22%22%7D\u0026vgd_l2type=dmola\u0026sc=30\u0026lper=100\u0026vgd_asn=50304\u0026vgd_rpth=%2Fola\u0026gdpr=1\u0026wshp=0\u0026vgd_oresf=one\u0026vgd_wlstp=0\u0026crid=848515096\u0026vgd_len=555\u0026vgd_end=1 HTTP/1.1\r\nHost: l.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco6.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0, no-cache, no-store\r\ncontent-type: image/gif\r\nexpires: Thu, 03 Sep 2026 14:43:29 GMT\r\npragma: no-cache\r\ndate: Fri, 04 Sep 2026 14:43:29 GMT\r\nserver-timing: cfExtPri\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FKhyDrg7j2BT0TBitpbVIAsaSAm9fyRL74oh8F3X5%2FT05TvopTErrk5qGPvo7MVnCDapXYm7nfjMJIutzU6so4VI40x2Gvo3xQFTqPZiw5jvnZekqCm1Kp1GQvwreKut3W8OG5ojOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35dc44a4e2e712b-OSL\r\ncontent-length: 43\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":909,"mime_type":"image/gif","magic":"GIF image data, version 87a, 1 x 1","md5":"6f1d74c7168076c7666246504a8c03f2","sha1":"00656377deb1a4393e0cf0055385b08b2b81b46c","sha256":"8ac1703c1c34b2be426deda409d39258f82fae17f13e645f377f337a954aedde","sha512":"e502484faa0dc2a1f23c7f715879db654f29d0af1d6f616467d3d1fc578c2d16fccaacd76c4a5ecae8451dc912323473559d29edbd322fe85b8f1e83a7cdf2f3","ssdeep":"","tlshash":"53900447f1401103d135403007075340070c5030145403050071507ddc1d7553d07410","first_seen":"2025-03-07T21:51:05.009549Z","last_seen":"2026-09-04T18:02:51.888064Z","times_seen":221366,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":4,"connect":28,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d.delivery.consentmanager.net/delivery/info/?id=175795\u0026did=2\u0026cfdid=2\u0026t=cc\u0026h=https%3A%2F%2Fyfdpco6.com%2Fsk-park.php\u0026o=1788533015609\u0026l=EN\u0026lv=97099\u0026d=2\u0026ct=14\u0026e=\u0026e2=\u0026e3=\u0026i=\u0026sv=1230\u0026dv=64\u0026","fqdn":"d.delivery.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"94.237.80.97","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yfdpco6.com/sk-park.php?pid=9PO15V947\u0026dn=us-usps-xf.xyz\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.us-usps-xf.xyz%2F\u0026reqref=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-09-04T14:43:35.649Z","timestamp":1788533015649,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.delivery.consentmanager.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FD:3D:5F:67:04:BA:73:77:A7:4B:D6:EB:58:C2:FC:D4:01:EE:58:64","sha256":"95:14:00:DA:64:95:A5:B3:BD:95:40:8F:E7:45:6C:68:21:88:41:0E:BA:77:8C:C4:50:5C:15:69:2E:02:AB:ED"}}},"request":{"raw":"GET /delivery/info/?id=175795\u0026did=2\u0026cfdid=2\u0026t=cc\u0026h=https%3A%2F%2Fyfdpco6.com%2Fsk-park.php\u0026o=1788533015609\u0026l=EN\u0026lv=97099\u0026d=2\u0026ct=14\u0026e=\u0026e2=\u0026e3=\u0026i=\u0026sv=1230\u0026dv=64\u0026 HTTP/1.1\r\nHost: d.delivery.consentmanager.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco6.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Fri, 04 Sep 2026 14:43:40 GMT\r\nserver: Apache/2.4.68 (Debian)\r\ncache-control: no-store, no-cache, must-revalidate\r\nedge-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 01 Dec 1994 16:00:00 GMT\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Fri, 04 Sep 2026 14:43:40 GMT\r\ntransfer-encoding: chunked\r\ncontent-type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":43,"size_decoded":467,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"6f81c41597d3f5a336f458822cc0c32a","sha1":"8cd77a54b38f1fb376b45af2eaab8f5982523b8d","sha256":"5704a2e9f2f7ce43a79f9b407f1aedcfd50223cbe8bd2f71ff8c5c819e469cbc","sha512":"edb4841fa021f06b664c4f09378f6572177ceb8518b976c0b1571e2346fa116097d4979d31bd9ab7e841b68795922a07d451583620a2f31e3e54a867f91d7c95","ssdeep":"","tlshash":"b7900023ea888023c2a2c0300a0803003b88b8300238032e80bc30a8ec3a3a20c02000","first_seen":"2023-04-06T20:54:09Z","last_seen":"2026-09-04T18:02:51.867069Z","times_seen":55695,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":37,"send":0,"wait":45,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-usps-xf.xyz/","fqdn":"us-usps-xf.xyz","domain":"us-usps-xf.xyz","tld":"xyz"},"ip":{"addr":"103.224.182.219","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T14:43:23.555Z","timestamp":1788533003555,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"termiche.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 01:04:40 GMT","end":"Sat, 21 Nov 2026 01:04:39 GMT"},"fingerprint":{"sha1":"D3:82:94:F1:E2:C9:82:01:CE:FD:61:2E:11:AA:24:1C:B8:BC:AA:2D","sha256":"F8:9B:CB:12:4E:8C:25:B0:73:DF:55:4E:EA:0D:C1:68:07:17:CF:38:D8:56:CE:D8:3E:7D:D7:59:F0:66:97:EB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: us-usps-xf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Fri, 04 Sep 2026 14:43:24 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 568\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1060,"size_decoded":767,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"f86660fe83a2c70d093097930970f235","sha1":"4e9dc7757d566c066871c835395f92417a0201dc","sha256":"5d4235ebcb5437270d9948ef29363d7637edcb8060393a8fdf3041560cfdc0b9","sha512":"2dcdbcd367ab63ef869c9989dcbd2c33aa6fc31b2ae03100528928fa83498013d70f7b2d8f46bfd6cc72d62c6b79ec8fc961a6944a2edd4fa2ae9312e9bd967d","ssdeep":"","tlshash":"c911320dbc919413617924ddc9f4e32dc07f260885ccce6cd0e2e628ec402edd45a99a","first_seen":"2026-09-04T14:43:58.821607Z","last_seen":"2026-09-04T14:43:58.821607Z","times_seen":1,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":4,"connect":181,"send":0,"wait":184,"receive":0,"ssl":204},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"us-usps-xf.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-usps-xf.xyz/?tr_uuid=20260905-0043-24a1-9ab2-51fc71c5bcd2\u0026fp=7dd9a6542fac2440f8716d30a40b13ce","fqdn":"us-usps-xf.xyz","domain":"us-usps-xf.xyz","tld":"xyz"},"ip":{"addr":"103.224.182.219","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T14:43:25.520Z","timestamp":1788533005520,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"termiche.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 01:04:40 GMT","end":"Sat, 21 Nov 2026 01:04:39 GMT"},"fingerprint":{"sha1":"D3:82:94:F1:E2:C9:82:01:CE:FD:61:2E:11:AA:24:1C:B8:BC:AA:2D","sha256":"F8:9B:CB:12:4E:8C:25:B0:73:DF:55:4E:EA:0D:C1:68:07:17:CF:38:D8:56:CE:D8:3E:7D:D7:59:F0:66:97:EB"}}},"request":{"raw":"GET /?tr_uuid=20260905-0043-24a1-9ab2-51fc71c5bcd2\u0026fp=7dd9a6542fac2440f8716d30a40b13ce HTTP/1.1\r\nHost: us-usps-xf.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://us-usps-xf.xyz/\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\ndate: Fri, 04 Sep 2026 14:43:26 GMT\r\nserver: Apache\r\nlocation: http://ww38.us-usps-xf.xyz/\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T17:58:18.160842Z","times_seen":18277814,"resource_available":true,"data":null}},"time_used":628,"timings":{"blocked":0,"dns":0,"connect":204,"send":0,"wait":212,"receive":0,"ssl":213},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"us-usps-xf.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"us-usps-xf.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/ct","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"34.251.101.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.us-usps-xf.xyz/","date":"2026-09-04T14:43:27.751Z","timestamp":1788533007751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 17 Aug 2026 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EE:E8:EA:46:19:BB:CD:06:47:CD:BE:A5:CB:4D:D5:B1:10:DA:04:FB","sha256":"6F:F7:26:C1:10:8F:08:8A:9A:3F:1B:1D:C0:B2:22:FA:92:87:E8:8E:0B:BF:4D:70:D3:63:B0:64:7C:53:C5:9D"}}},"request":{"raw":"POST /ct HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 4549\r\nOrigin: https://ww38.us-usps-xf.xyz\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.us-usps-xf.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4549,"data":"id=92098\u0026url=https%3A%2F%2Fww38.us-usps-xf.xyz%2F\u0026sf=0\u0026tpi=\u0026ch=AdsDeli%20-%20iFrame\u0026uvid=d6f5937a07afe1ecccc36321578a38ebe79c5497\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1788533007746\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=2482501029182611517059510957126077855070915795281911221181292812220787120150203105201201210629016\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=linux%20x86_64\u0026nv=\u0026ref=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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%3D%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=BJlqw0sZoV\u0026pto=2250\u0026ver=66\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1788533007.LPW81V6zRydygyu7\u0026suid=1.1788533007.YSBfZ4aLXzHkc3KH\u0026tuid=1.1788533007.Trj2ZJv3yjw81L1M\u0026sid=1.1788533007747.SkTp9Urjwm9rotwe\u0026fbc=-\u0026gtm=-\u0026it=6%2C1561%2C408\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA2Oi15fzZz"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.us-usps-xf.xyz\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Fri, 04 Sep 2026 14:43:27 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: cg_uuid=dca731e105346292301336e3a10b7132; Max-Age=29030400; Path=/; Expires=Fri, 06 Aug 2027 14:43:27 GMT; HttpOnly; Secure; SameSite=None\r\ntiming-allow-origin: https://ww38.us-usps-xf.xyz\r\ncontent-length: 1947\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"cg_uuid","value":"dca731e105346292301336e3a10b7132","quoted":false,"path":"/","expires":"2027-08-06T14:43:27Z","raw_expires":"Fri, 06 Aug 2027 14:43:27 GMT","max_age":29030400,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"cg_uuid=dca731e105346292301336e3a10b7132; Max-Age=29030400; Path=/; Expires=Fri, 06 Aug 2027 14:43:27 GMT; HttpOnly; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4769,"size_decoded":2569,"mime_type":"application/json","magic":"JSON text data","md5":"1114ae180db330a1e2baa6835d49bdd0","sha1":"e142e612e88d760c840dd03e3cd9bd7f2bd9c225","sha256":"8f6a01ffbba12fff7e4cf06959e2958d3140e8eb51856eb177efd804860b32de","sha512":"2bc0b105158fd76c06fba5050aa6b1076f54a11ff8247513a93f41ade233bf5fb335a2e218e4a2e430280f192dcf0a73c8e82667f930e69f4000f6650963a550","ssdeep":"96:E1/iR+YtMWvoD+cUfGo1/iw+YtMWvoD+cUfZb201BgQf:O/jicUff/YicUfZHbf","tlshash":"5aa10b2864b4aee2117eed2fc7973d9963fb5f56654b3869008e166a29f23210819c41","first_seen":"2026-09-04T14:43:58.823864Z","last_seen":"2026-09-04T14:43:58.823864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":4,"connect":32,"send":0,"wait":131,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/tracker/tc_imp.gif?e=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\u0026cri=BJlqw0sZoV\u0026ts=267\u0026cb=1788533008013","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"34.251.101.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww38.us-usps-xf.xyz/","date":"2026-09-04T14:43:28.017Z","timestamp":1788533008017,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 17 Aug 2026 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EE:E8:EA:46:19:BB:CD:06:47:CD:BE:A5:CB:4D:D5:B1:10:DA:04:FB","sha256":"6F:F7:26:C1:10:8F:08:8A:9A:3F:1B:1D:C0:B2:22:FA:92:87:E8:8E:0B:BF:4D:70:D3:63:B0:64:7C:53:C5:9D"}}},"request":{"raw":"GET /tracker/tc_imp.gif?e=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\u0026cri=BJlqw0sZoV\u0026ts=267\u0026cb=1788533008013 HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.us-usps-xf.xyz/\r\nCookie: cg_uuid=dca731e105346292301336e3a10b7132\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ndate: Fri, 04 Sep 2026 14:43:28 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":270,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"db04c7b378cb2db912c3ba8a5a774ee3","sha1":"dee34bd86c3484d31002182aa2b7caa4699126b8","sha256":"98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a","sha512":"826225fc21717d8861a05b9d2f959539aad2d2b131b2afed75d88fbca535e1b0d5a0da8ac69713a0876a0d467848a37a0a7f926aeafad8cf28201382d16466ab","ssdeep":"","tlshash":"6490000bca888002caa2c0302b8883022b88b0320228832e80bc30a8ee3b3a20c02000","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-09-04T17:10:39.631552Z","times_seen":417099,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d.delivery.consentmanager.net/delivery/cmp.php?\u0026cdid=40679ccc92462\u0026h=https%3A%2F%2Fyfdpco6.com%2Fsk-park.php%3Fpid%3D9PO15V947%26dn%3Dus-usps-xf.xyz%26ua%3DMozilla%252F5.0%2B%2528Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%2529%2BGecko%252F20100101%2BFirefox%252F134.0%26ip%3D195.64.118.0%26xfip%3D195.64.118.0%26requrl%3Dhttp%253A%252F%252Fww38.us-usps-xf.xyz%252F%26reqref%3Dhttps%253A%252F%252Fus-usps-xf.xyz%252F%26al%3Den-US%252Cen%253Bq%253D0.9\u0026\u0026l=en\u0026o=1788533008981","fqdn":"d.delivery.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"94.237.80.97","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yfdpco6.com/sk-park.php?pid=9PO15V947\u0026dn=us-usps-xf.xyz\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.us-usps-xf.xyz%2F\u0026reqref=https%3A%2F%2Fus-usps-xf.xyz%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-09-04T14:43:28.984Z","timestamp":1788533008984,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.delivery.consentmanager.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FD:3D:5F:67:04:BA:73:77:A7:4B:D6:EB:58:C2:FC:D4:01:EE:58:64","sha256":"95:14:00:DA:64:95:A5:B3:BD:95:40:8F:E7:45:6C:68:21:88:41:0E:BA:77:8C:C4:50:5C:15:69:2E:02:AB:ED"}}},"request":{"raw":"GET /delivery/cmp.php?\u0026cdid=40679ccc92462\u0026h=https%3A%2F%2Fyfdpco6.com%2Fsk-park.php%3Fpid%3D9PO15V947%26dn%3Dus-usps-xf.xyz%26ua%3DMozilla%252F5.0%2B%2528Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%2529%2BGecko%252F20100101%2BFirefox%252F134.0%26ip%3D195.64.118.0%26xfip%3D195.64.118.0%26requrl%3Dhttp%253A%252F%252Fww38.us-usps-xf.xyz%252F%26reqref%3Dhttps%253A%252F%252Fus-usps-xf.xyz%252F%26al%3Den-US%252Cen%253Bq%253D0.9\u0026\u0026l=en\u0026o=1788533008981 HTTP/1.1\r\nHost: d.delivery.consentmanager.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco6.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Fri, 04 Sep 2026 14:43:40 GMT\r\nserver: Apache/2.4.68 (Debian)\r\ncache-control: no-store, no-cache, must-revalidate\r\nedge-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 01 Dec 1994 16:00:00 GMT\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Fri, 04 Sep 2026 14:43:40 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 779\r\ncontent-type: text/javascript; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1387,"size_decoded":1264,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (618)","md5":"f007cde2c0b63907fcbee875a9ab76f0","sha1":"9abb9b7142a76facef065404f76f38cf69ebc5c6","sha256":"81a081db98e1b60a39cde47fc311e04b4b1f16422c2ca0b33246ee0b272467cc","sha512":"78ab247f4555fabe3707dd8c74e56144de3dc22eaf37a014b34002b362a4f472ebd5957324ed9287319b6612c338af192c350c6d2f07909a0872f04ddabaff6f","ssdeep":"","tlshash":"49210f745d602850e23a0989b57ef36cb276153769c5d160588fb844de48e8fccdfee0","first_seen":"2026-09-04T14:43:58.827624Z","last_seen":"2026-09-04T14:43:58.827624Z","times_seen":1,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":18,"connect":36,"send":0,"wait":43,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.cdn-fileserver.com/__media__/pics/9000/09/593//bg1.png","fqdn":"s.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=994\u0026%21Q=\u0026%21lAc=KeeV%2A%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_%2F\u0026%294I=\u0026%29I=-\u0026%29QABQ=\u0026%29bQ=\u0026%29bQH0=\u0026%2A%29QABQ=\u0026%2A%2ALQ=%7B%22%2A%2A22%22%3A%22wX%22%2C%22%2A%2A2eD%22%3A%22~D%2AI9%22%2C%22%2A%2AbV%22%3A%22%22%2C%22%2A%2A%2A2%22%3A%22d-%22%2C%22%2A%2A_bV%22%3A%22%22%7D\u0026%2A2=d-\u0026%2Ab_I=ffpCWnG3\u002622=wX\u00262AbQ=GCGpfp-3n\u00262K9~0=h%2AHCsb9e2\u00262K9~d=3TXfpR3Ct\u00262QH=XdCdp\u00262bQ=GzFn-td8P\u00262eVbQ=\u00264%29cLlbQ=H0\u002642e=TmBWw_m9SA_4IdW%2FcOrwOm_AI%2FSw_Omdd4O\u00264QH=\u00264Qe0=\u00264Qef=\u00264Qh~4b9=\u00264Vzq=\u00269eH=\u00269~IAA=f\u0026AIrqAL=KeeV%3A%2F%2Fq%2Aiq%2AV%2AiWc1WD_\u0026D%299s22sIWV=\u0026DQ%2AVA=\u0026DVLV=\u0026Hb=ftGGpdd--GnfdG3Gf0d\u0026I2AbQ=\u0026KeeV%2A=f\u0026L0eDVI=Q~hL4\u0026QI2~~~=\u0026Q~Ac=f\u0026SQVA=f\u0026SQVA29%2Ae=\u0026U%29bQ=ME+8T%28+uI%2Ae+i+0+5IHIL\u0026VbQ=GTX6fty7G\u0026b%2AbQ=-\u0026b9e2L=G7NUEtpNo%3AaFN%7CiIGN%3Ac3.1bq1qbY1JY%7CiwGN%3Aqbv1YJ1qq.13\u0026c%2A=\u0026e%2A2I=5fdC0\u0026hL4c=h9I\u0026hbQ=%2904Qd0IfidcGIiCGICiGpp%29idn4G-n%290Q-3c\u0026htmlsrc=1\u0026kkdd=H3%7C3%7CH%2AAn9\u0026l%2AKV=-\u0026lL%2AeV=-\u0026q%2AVI9c=-\u0026qSQ=C\u0026tpid=\u0026~%2AV4=-\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001788533008759032757816326975\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153607860816917616%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=OriD2QUIWzZDToaMPMtkyyQPYCaNoeZ9EHWbViG2KeILE5LR_Cf9aU6B-B35suAVb_-mJcIjdWM6V5zD0Y2kv1EK69DpQ6AwS4WEazeDsZHjn8Xx93aagnogBO4TKwV69fVjD1o5wNuh8XJPaSAkYqqNmcaknSZurg1s3Wu9iudFpvL0OMFRKGzcTndax4VftZVQAx70668%3D\u0026tchkpts=%7B%22prel2%22%3A1788533008990%7D\u0026stime=1788533008990\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252521lSg%252521%25252A%253DLwwn%25253A%25252F%25252FgtKgtntKA_CAxv%2526%25252Aewxnl%253D8p2%25252Ay%25261m%253DYfqq-RRIIq5YRqTqYeR%25262%25252Ay_%253D2Pl%25262m8%253D~ey8RelYKR_qlKDqlDKq--~KR5yqI5~e8IT_%252638n%252521%253DY%252638n%252521sPtw%253D%25268lsppp%253D%25268p%252521_%253DY%2526J%25252Atwn%253DI%2526JtLn%253DI%2526Lwwnt%253DY%2526Ppl%252521%252521%253DY%2526Pw1%253D%2526_t%253D%2526a~m8%253DOX%252B%252529ik%252BVltw%252BK%252Be%252B0l1l%25252A%2526d8%253D%2526dJ%252521_%253DLwwnt%25253A%25252F%25252FgtKgtntKA_CAxv%25252F%2526g38%253DD%2526gtnlP_%253DI%2526htmlsrc%253D1%2526kkdd%253D%25252AH%25257C3%25257CHA%25252A9n%2526ls%252521m8%253D%2526mPws%25252A%253DqEzaXf-zc%25253A%252528Wz%25257CKlqz%25253A_T4CmgCgmMC7M%25257CKHqz%25253Agm.CM7Cgg4CT%2526mtm8%253DI%2526nm8%253DqiUhYfrEq%2526ptny%253DI%2526s%252521m8%253DqDq-Y-IT5%2526s81%253DURDR-%2526sLPpR%253DTiUY-bTDf%2526sLPpe%253D2t1DNmPws%2526sm8%253DqFW5IfR%252529B%2526ss%253DHU%2526swnm8%253D%2526tmvl%253DYY-DA5qT%2526tpid%253D%2526ts%253DRI%2526tt%25252A8%253D%25257B%252522ttss%252522%25253A%252522HU%252522%25252C%252522ttswx%252522%25253A%252522pxtlP%252522%25252C%252522ttmn%252522%25253A%252522%252522%25252C%252522ttts%252522%25253A%252522RI%252522%25252C%252522ttvmn%252522%25253A%252522%252522%25257D%2526t~8%252521Z8%253D%2526wtsl%253D0YRDe%2526x8tn%252521%253D%2526xn%25252An%253D%2526x~PNssNlAn%253D%2526y81%253D%2526y82pymP%253D%2526y8wY%253D%2526y8we%253D%2526ynFg%253D%2526ysw%253Di6ZAHv6P3%252521vylRA%25252F_jSHj6v%252521l%25252F3Hvj6RRyj%2526y~_%25252AJm8%253D1e%2526~8%252521Z8%253D%2526~l%253DI%2526~m8%253D%2526~m81e%253D%2526~yl%253D%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","date":"2026-09-04T14:43:29.379Z","timestamp":1788533009379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 19:29:19 GMT","end":"Thu, 22 Oct 2026 20:29:13 GMT"},"fingerprint":{"sha1":"90:47:F6:6B:6B:51:A2:68:C2:B7:73:31:7A:91:BC:57:76:65:26:8E","sha256":"20:B7:3C:50:10:4D:53:AB:B2:A7:A3:FF:C7:44:4E:88:6D:CC:A3:64:4C:D9:D9:F6:18:D3:0C:2A:6A:E9:61:25"}}},"request":{"raw":"GET /__media__/pics/9000/09/593//bg1.png HTTP/1.1\r\nHost: s.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://realtimesearchresults.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nvia: 1.1 google\r\ndate: Fri, 04 Sep 2026 14:43:29 GMT\r\ncache-control: public, max-age=604800\r\nage: 174499\r\nlast-modified: Thu, 06 Mar 2025 12:55:21 GMT\r\netag: \"4642-62fac04c7759a\"\r\ncontent-type: image/png\r\nx-cache-status: hit\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BsnqGkP6iC9ep0NS5qB8kNBPHHZ8IcC3nT282TuQR8QLZdw4vH5bfMv%2BjihFq3R%2B1%2F7izjSLwtc1oIwWJ0g2HxfRPT0E2%2B9BbkdQ%2F1bjm3zoMwf49Tw7oW8LdThoZno%2F0y%2Bxu7gtXw%3D%3D\"}]}\r\ncf-ray: a35dc44cae6e712b-OSL\r\ncontent-length: 17986\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":17986,"size_decoded":18759,"mime_type":"image/png","magic":"PNG image data, 1730 x 988, 4-bit colormap, non-interlaced","md5":"825ccd29ac102fcadaf92b2343d5917b","sha1":"24472e766cfac5b82a73b219796556a0a3702bd6","sha256":"0878fb2875c0ad852de8fb3e8f443afdf3064890f1443b3feccc274382f913cd","sha512":"71b8e7c0813227f5efa4b4e0561978b13672f46ee441bc222ad77aa46a32f0f44a5dab3ef038bb3418190e69dced597a79e77566da01a259f1cd6b5298a08662","ssdeep":"384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N","tlshash":"8a82bef49ea4241cdde2dfbce09243d635e8fb03481a9c516bcb46c27459ea2782c71d","first_seen":"2023-04-06T22:32:28Z","last_seen":"2026-09-04T18:02:51.89502Z","times_seen":227001,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}