| www.googletagmanager.com/gtag/js?id=AW-964765464&l=dataLayer&cx=c |  142.250.74.168 | 200 OK | 80 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=AW-964765464&l=dataLayer&cx=c IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hash4bfa918aa9ca40d779c18fd8cf085361 74ec22a1e1fb951211794e30809bf8b8f4ef3c0c 441357267da15b32d84cb13a5c37798b961b49230284cb6b064ab643c08846e8
GET /gtag/js?id=AW-964765464&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 07:09:48 GMT
expires: Fri, 19 Apr 2024 07:09:48 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 80384
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| assets.adobedtm.com/bfecad1ae7e5d7a2b8a9353b2d496d9b392db768/satelliteLib-9c215febcba74f72ca4a2cc8370a7f4b70048c28.js |  23.202.116.228 | 200 OK | 169 kB |
URL GET HTTP/2assets.adobedtm.com/bfecad1ae7e5d7a2b8a9353b2d496d9b392db768/satelliteLib-9c215febcba74f72ca4a2cc8370a7f4b70048c28.js IP23.202.116.228:443
CertificateIssuerDigiCert Inc Subjectassets.adobedtm.com Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32742) Size169 kB (168839 bytes) Hashb1702244e4944540e1aeb9c99d010f70 e6c2423b81aac559fc776561933135fbdcceadcd f082b496c0b7474ebb0395eb969bec8ed9c2b7bdf5b78d5f1459395ff25d9366
GET /bfecad1ae7e5d7a2b8a9353b2d496d9b392db768/satelliteLib-9c215febcba74f72ca4a2cc8370a7f4b70048c28.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "b1702244e4944540e1aeb9c99d010f70:1712890535.241472"
last-modified: Fri, 12 Apr 2024 02:55:35 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=3600
expires: Fri, 19 Apr 2024 08:09:48 GMT
date: Fri, 19 Apr 2024 07:09:48 GMT
content-length: 168839
access-control-allow-origin: https://candsa.top
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| assets.adobedtm.com/6f7fd03e16fd/b40fc6058fc5/2563a30763ad/RCda9ed4324e68498bb892e8456f83522d-source.min.js | 23.202.116.228 | 200 OK | 538 B |
URL GET HTTP/2assets.adobedtm.com/6f7fd03e16fd/b40fc6058fc5/2563a30763ad/RCda9ed4324e68498bb892e8456f83522d-source.min.js IP23.202.116.228:443
CertificateIssuerDigiCert Inc Subjectassets.adobedtm.com Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1259) Hash1061cdcaea93239f8d6df249e258eecc 28523b664e4fcde9b9decb7918186efce320f526 74debbeb2387d267d3f284c60fc0253dbad14ee6483d3ed6d74d3358a2dfe779
GET /6f7fd03e16fd/b40fc6058fc5/2563a30763ad/RCda9ed4324e68498bb892e8456f83522d-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "11fb866b20614a7da2afd1dfa8088738:1652686905.773622"
last-modified: Mon, 16 May 2022 07:41:45 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 538
cache-control: max-age=3600
expires: Fri, 19 Apr 2024 08:09:48 GMT
date: Fri, 19 Apr 2024 07:09:48 GMT
access-control-allow-origin: https://candsa.top
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| assets.adobedtm.com/6f7fd03e16fd/b40fc6058fc5/2563a30763ad/EX1f0da9d63d8945dd8a57a3766052c373-libraryCode_source.min.js | 23.202.116.228 | 200 OK | 15 kB |
URL GET HTTP/2assets.adobedtm.com/6f7fd03e16fd/b40fc6058fc5/2563a30763ad/EX1f0da9d63d8945dd8a57a3766052c373-libraryCode_source.min.js IP23.202.116.228:443
CertificateIssuerDigiCert Inc Subjectassets.adobedtm.com Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32760) Hash3d8e741998eeaed2f08de4bfd4eb6227 5f9215ba0402b01cedc5e833433dca424841534f b4eb56f90de8ac48e46835b8809dd35aed0a46b569fd24b68f7a0cfda0fbf427
GET /6f7fd03e16fd/b40fc6058fc5/2563a30763ad/EX1f0da9d63d8945dd8a57a3766052c373-libraryCode_source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "11fb866b20614a7da2afd1dfa8088738:1652686905.773622"
last-modified: Mon, 16 May 2022 07:41:45 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 15227
cache-control: max-age=3600
expires: Fri, 19 Apr 2024 08:09:48 GMT
date: Fri, 19 Apr 2024 07:09:48 GMT
access-control-allow-origin: https://candsa.top
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| candsa.top/assets-ad90b6e38e9b2425489217154b485f683bd41b9c/mypost-track-config.js |  43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/assets-ad90b6e38e9b2425489217154b485f683bd41b9c/mypost-track-config.js IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text Hash0b3f05d5e92e273e970b6d7dfff1cd55 00abfe1bc23447e4ac867706057580073f1b47a7 938e9fb9b62b62717cead0bc52984d89d1fa54cb8db612da85e30a815c879e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /assets-ad90b6e38e9b2425489217154b485f683bd41b9c/mypost-track-config.js HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:48 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| candsa.top/assets-ad90b6e38e9b2425489217154b485f683bd41b9c/new-relic-tracking.js | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/assets-ad90b6e38e9b2425489217154b485f683bd41b9c/new-relic-tracking.js IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text Hash0b3f05d5e92e273e970b6d7dfff1cd55 00abfe1bc23447e4ac867706057580073f1b47a7 938e9fb9b62b62717cead0bc52984d89d1fa54cb8db612da85e30a815c879e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /assets-ad90b6e38e9b2425489217154b485f683bd41b9c/new-relic-tracking.js HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:48 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| candsa.top/website-header/header.js | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/website-header/header.js IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text Hash0b3f05d5e92e273e970b6d7dfff1cd55 00abfe1bc23447e4ac867706057580073f1b47a7 938e9fb9b62b62717cead0bc52984d89d1fa54cb8db612da85e30a815c879e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /website-header/header.js HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:48 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| candsa.top/ap-footer/footer-es2015.js | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/ap-footer/footer-es2015.js IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text Hash0b3f05d5e92e273e970b6d7dfff1cd55 00abfe1bc23447e4ac867706057580073f1b47a7 938e9fb9b62b62717cead0bc52984d89d1fa54cb8db612da85e30a815c879e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /ap-footer/footer-es2015.js HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:48 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| candsa.top/styles.8a672496cc43bf1fc4fe.css | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/styles.8a672496cc43bf1fc4fe.css IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text Hash0b3f05d5e92e273e970b6d7dfff1cd55 00abfe1bc23447e4ac867706057580073f1b47a7 938e9fb9b62b62717cead0bc52984d89d1fa54cb8db612da85e30a815c879e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /styles.8a672496cc43bf1fc4fe.css HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:48 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| translate.googleapis.com/translate_static/css/translateelement.css | 216.58.207.202 | 404 Not Found | 1.6 kB |
URL GET HTTP/3translate.googleapis.com/translate_static/css/translateelement.css IP216.58.207.202:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hash0787e9d6af8acaa0c98b15288a5daa97 fd7050c2ecde80c27d0a01e3a92e7e3d6a180e38 d8b99ad63fa1cd5572604868ca0b4a8e77d0214e7b86a3cbecf1dcedba2a75bb
GET /translate_static/css/translateelement.css HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 19 Apr 2024 07:09:48 GMT
server: sffe
content-length: 1602
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| dd.auspost.com.au/tags.js | 143.204.55.107 | 200 OK | 28 kB |
URL GET HTTP/2dd.auspost.com.au/tags.js IP143.204.55.107:443
CertificateIssuerLet's Encrypt Subjectdd.auspost.com.au FingerprintAD:BC:E5:24:E8:2A:61:25:BA:EE:43:ED:81:9D:13:E1:D1:10:5F:9D ValiditySun, 04 Feb 2024 14:02:36 GMT - Sat, 04 May 2024 14:02:35 GMT
File typeJavaScript source, ASCII text, with very long lines (65431) Hash3db4dd66769f64a88089a8837ed0730a 140be6196de718c16a44c4b4aa41fcf9d194c812 faebbb148388045da2972c6c84f013f0ece667dd3e7b00f01cd006880b1de73e
GET /tags.js HTTP/1.1
Host: dd.auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
content-length: 27699
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains; preload
last-modified: Tue, 16 Apr 2024 13:32:36 GMT
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
date: Fri, 19 Apr 2024 06:53:39 GMT
cache-control: max-age=3600, public
expires: Fri, 19 Apr 2024 07:50:46 GMT
etag: "2552f-61636c568a23e-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tp_rRcdbw6YIsWpKG6jwLJ95OjLWlfN6JpbSLHnkexVu1zgxM5cv-Q==
age: 1142
X-Firefox-Spdy: h2
|
|
| dd.auspost.com.au/tags.js | 143.204.55.107 | 200 OK | 28 kB |
URL GET HTTP/2dd.auspost.com.au/tags.js IP143.204.55.107:443
CertificateIssuerLet's Encrypt Subjectdd.auspost.com.au FingerprintAD:BC:E5:24:E8:2A:61:25:BA:EE:43:ED:81:9D:13:E1:D1:10:5F:9D ValiditySun, 04 Feb 2024 14:02:36 GMT - Sat, 04 May 2024 14:02:35 GMT
File typeJavaScript source, ASCII text, with very long lines (65431) Hash3db4dd66769f64a88089a8837ed0730a 140be6196de718c16a44c4b4aa41fcf9d194c812 faebbb148388045da2972c6c84f013f0ece667dd3e7b00f01cd006880b1de73e
GET /tags.js HTTP/1.1
Host: dd.auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
content-length: 27699
server: Apache
strict-transport-security: max-age=63072000; includeSubDomains; preload
last-modified: Tue, 16 Apr 2024 13:32:36 GMT
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
date: Fri, 19 Apr 2024 06:53:39 GMT
cache-control: max-age=3600, public
expires: Fri, 19 Apr 2024 07:50:46 GMT
etag: "2552f-61636c568a23e-gzip"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EYm6HnlEBEZeFNnLxm0ChUHmbQsNpaubdPg87qK9QJt7-yCJLjX2Zw==
age: 1142
X-Firefox-Spdy: h2
|
|
| assets.adobedtm.com/6f7fd03e16fd/b40fc6058fc5/0b735a180ded/EX771a893021694b81b688aed2e2d076bc-libraryCode_source.min.js | 23.202.116.228 | 200 OK | 16 kB |
URL GET HTTP/2assets.adobedtm.com/6f7fd03e16fd/b40fc6058fc5/0b735a180ded/EX771a893021694b81b688aed2e2d076bc-libraryCode_source.min.js IP23.202.116.228:443
CertificateIssuerDigiCert Inc Subjectassets.adobedtm.com Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32728) Hash59056e1241452dca450e3f0112998f74 998e7a43ae10ea93ea165e48cc16efde21d1eb6d 2371e7c7bcac0fa23f127d0fcebb8419fe237eadb122998df2a23d3f38e6bcd8
GET /6f7fd03e16fd/b40fc6058fc5/0b735a180ded/EX771a893021694b81b688aed2e2d076bc-libraryCode_source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "2e2b4c124a7c9ca8c113e6e7527fc3d6:1712890537.413354"
last-modified: Fri, 12 Apr 2024 02:55:37 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 15956
cache-control: max-age=3600
expires: Fri, 19 Apr 2024 08:09:48 GMT
date: Fri, 19 Apr 2024 07:09:48 GMT
access-control-allow-origin: https://candsa.top
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| translate.googleapis.com/translate_static/css/translateelement.css | 216.58.207.202 | 404 Not Found | 1.6 kB |
URL GET HTTP/3translate.googleapis.com/translate_static/css/translateelement.css IP216.58.207.202:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1136) Hash0787e9d6af8acaa0c98b15288a5daa97 fd7050c2ecde80c27d0a01e3a92e7e3d6a180e38 d8b99ad63fa1cd5572604868ca0b4a8e77d0214e7b86a3cbecf1dcedba2a75bb
GET /translate_static/css/translateelement.css HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 19 Apr 2024 07:09:48 GMT
server: sffe
content-length: 1602
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=DC-4621208 | 142.250.74.168 | 200 OK | 72 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=DC-4621208 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hash3f955be0b93fa001009f3e68a5db32c1 222fdcb89a6ba370d66cec52224b46944b52527a b6d9c336d441a2c65ea911b80a6bb777b8a248a177aebfbf4ad85801eb1e1dce
GET /gtag/js?id=DC-4621208 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 19 Apr 2024 07:09:48 GMT
expires: Fri, 19 Apr 2024 07:09:48 GMT
cache-control: private, max-age=900
last-modified: Fri, 19 Apr 2024 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72527
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| assets.adobedtm.com/6f7fd03e16fd/b40fc6058fc5/0b735a180ded/RC0509a741873c468faa4c6c20f0dc2e00-source.min.js | 23.202.116.228 | 200 OK | 434 B |
URL GET HTTP/2assets.adobedtm.com/6f7fd03e16fd/b40fc6058fc5/0b735a180ded/RC0509a741873c468faa4c6c20f0dc2e00-source.min.js IP23.202.116.228:443
CertificateIssuerDigiCert Inc Subjectassets.adobedtm.com Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (1012) Hash5417ad68bcfb8db4e900c0f9c1c12532 e1989a0fee24d38dfd46cd784e6faaa39659e213 e2928f156a83dfb1aa01783399c49f2b6636c4ee6660ab9c240c998c01368e55
GET /6f7fd03e16fd/b40fc6058fc5/0b735a180ded/RC0509a741873c468faa4c6c20f0dc2e00-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "2e2b4c124a7c9ca8c113e6e7527fc3d6:1712890537.413354"
last-modified: Fri, 12 Apr 2024 02:55:37 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 434
cache-control: max-age=3600
expires: Fri, 19 Apr 2024 08:09:48 GMT
date: Fri, 19 Apr 2024 07:09:48 GMT
access-control-allow-origin: https://candsa.top
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ssl.o.auspost.com.au/id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=0A2D38B352782F1E0A490D4C%40AdobeOrg&mid=66888518054812516234497051988867033971&ts=1713510588868 | 63.140.62.17 | 200 OK | 48 B |
URL GET HTTP/2ssl.o.auspost.com.au/id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=0A2D38B352782F1E0A490D4C%40AdobeOrg&mid=66888518054812516234497051988867033971&ts=1713510588868 IP63.140.62.17:443
CertificateIssuerDigiCert Inc Subjectssl.o.auspost.com.au Fingerprint88:80:BA:6E:CF:0C:15:DE:F4:AB:74:B4:69:E9:08:C3:47:50:E0:90 ValidityWed, 27 Mar 2024 00:00:00 GMT - Sun, 27 Apr 2025 23:59:59 GMT
Hash38fe351dde38edb4bcb1f1752bde41ee 98be7e0fe83999880aee0ba102610e7e28fb87fb 19852bb66b0df2f363cefff01fe293c203e13cd53eb6f2fbb558dd901f4cab59
GET /id?d_visid_ver=5.4.0&d_fieldgroup=A&mcorgid=0A2D38B352782F1E0A490D4C%40AdobeOrg&mid=66888518054812516234497051988867033971&ts=1713510588868 HTTP/1.1
Host: ssl.o.auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://candsa.top
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://candsa.top
access-control-allow-credentials: true
date: Fri, 19 Apr 2024 07:09:49 GMT
p3p: CP="This is not a P3P policy"
server: jag
set-cookie: s_ecid=MCMID%7C66888518054812516234497051988867033971; Path=/; Domain=auspost.com.au; Max-Age=63072000; Expires=Sun, 19 Apr 2026 07:09:09 GMT; SameSite=Lax;
vary: Origin
content-type: application/x-javascript;charset=utf-8
content-length: 48
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| ssl.o.auspost.com.au/b/ss/auspost-dev/1/JS-2.22.4-LDQM/s87303108879638?AQB=1&ndh=1&pf=1&t=19%2F3%2F2024%207%3A9%3A49%205%200&mid=66888518054812516234497051988867033971&ce=UTF-8&ns=australiapost&cdp=3&fpCookieDomainPeriods=3&pageName=auspost%3Ahome&g=https%3A%2F%2Fcandsa.top%2F&cc=AUD&ch=auspost%3Ahome&server=candsa.top&events=event115%3D11%2Cevent1&c1=auspost&v1=auspost&h1=auspost%7Chome&c2=auspost%3Ahome&v2=auspost%3Ahome&c3=auspost%3Ahome&v3=auspost%3Ahome&v4=auspost%3Ahome&c21=New&v21=New&c22=5%3A09%20PM%7CFriday&v22=5%3A09%20PM%7CFriday&c26=VisitorAPI%20Present&c34=https%3A%2F%2Fcandsa.top%2F&c36=11&v36=11&c55=false&v60=D%3Dc31&c64=auspost%3Ahome&v64=auspost%3Ahome&c74=66888518054812516234497051988867033971&v74=66888518054812516234497051988867033971&c75=am%3A2.22.4%20%7C%20vs%3A5.4.0%20%7C%20aam%3A%20%7C%20t%3A%20%7C%20code%3A20191206%20%7C%20launch&v75=am%3A2.22.4%20%7C%20vs%3A5.4.0%20%7C%20aam%3A%20%7C%20t%3A%20%7C%20code%3A20191206%20%7C%20launch&v170=auspost%3Ahome&v174=https%3A%2F%2Fcandsa.top%2F&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=1024&mcorgid=0A2D38B352782F1E0A490D4C%40AdobeOrg&AQE=1 | 63.140.62.17 | 200 OK | 43 B |
URL GET HTTP/2ssl.o.auspost.com.au/b/ss/auspost-dev/1/JS-2.22.4-LDQM/s87303108879638?AQB=1&ndh=1&pf=1&t=19%2F3%2F2024%207%3A9%3A49%205%200&mid=66888518054812516234497051988867033971&ce=UTF-8&ns=australiapost&cdp=3&fpCookieDomainPeriods=3&pageName=auspost%3Ahome&g=https%3A%2F%2Fcandsa.top%2F&cc=AUD&ch=auspost%3Ahome&server=candsa.top&events=event115%3D11%2Cevent1&c1=auspost&v1=auspost&h1=auspost%7Chome&c2=auspost%3Ahome&v2=auspost%3Ahome&c3=auspost%3Ahome&v3=auspost%3Ahome&v4=auspost%3Ahome&c21=New&v21=New&c22=5%3A09%20PM%7CFriday&v22=5%3A09%20PM%7CFriday&c26=VisitorAPI%20Present&c34=https%3A%2F%2Fcandsa.top%2F&c36=11&v36=11&c55=false&v60=D%3Dc31&c64=auspost%3Ahome&v64=auspost%3Ahome&c74=66888518054812516234497051988867033971&v74=66888518054812516234497051988867033971&c75=am%3A2.22.4%20%7C%20vs%3A5.4.0%20%7C%20aam%3A%20%7C%20t%3A%20%7C%20code%3A20191206%20%7C%20launch&v75=am%3A2.22.4%20%7C%20vs%3A5.4.0%20%7C%20aam%3A%20%7C%20t%3A%20%7C%20code%3A20191206%20%7C%20launch&v170=auspost%3Ahome&v174=https%3A%2F%2Fcandsa.top%2F&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=1024&mcorgid=0A2D38B352782F1E0A490D4C%40AdobeOrg&AQE=1 IP63.140.62.17:443
CertificateIssuerDigiCert Inc Subjectssl.o.auspost.com.au Fingerprint88:80:BA:6E:CF:0C:15:DE:F4:AB:74:B4:69:E9:08:C3:47:50:E0:90 ValidityWed, 27 Mar 2024 00:00:00 GMT - Sun, 27 Apr 2025 23:59:59 GMT
File typeGIF image data, version 89a, 2 x 2 Hashad480fd0732d0f6f1a8b06359e3a42bb a544538683a2dfe574eeb2e358ac8fcc78289d50 a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
GET /b/ss/auspost-dev/1/JS-2.22.4-LDQM/s87303108879638?AQB=1&ndh=1&pf=1&t=19%2F3%2F2024%207%3A9%3A49%205%200&mid=66888518054812516234497051988867033971&ce=UTF-8&ns=australiapost&cdp=3&fpCookieDomainPeriods=3&pageName=auspost%3Ahome&g=https%3A%2F%2Fcandsa.top%2F&cc=AUD&ch=auspost%3Ahome&server=candsa.top&events=event115%3D11%2Cevent1&c1=auspost&v1=auspost&h1=auspost%7Chome&c2=auspost%3Ahome&v2=auspost%3Ahome&c3=auspost%3Ahome&v3=auspost%3Ahome&v4=auspost%3Ahome&c21=New&v21=New&c22=5%3A09%20PM%7CFriday&v22=5%3A09%20PM%7CFriday&c26=VisitorAPI%20Present&c34=https%3A%2F%2Fcandsa.top%2F&c36=11&v36=11&c55=false&v60=D%3Dc31&c64=auspost%3Ahome&v64=auspost%3Ahome&c74=66888518054812516234497051988867033971&v74=66888518054812516234497051988867033971&c75=am%3A2.22.4%20%7C%20vs%3A5.4.0%20%7C%20aam%3A%20%7C%20t%3A%20%7C%20code%3A20191206%20%7C%20launch&v75=am%3A2.22.4%20%7C%20vs%3A5.4.0%20%7C%20aam%3A%20%7C%20t%3A%20%7C%20code%3A20191206%20%7C%20launch&v170=auspost%3Ahome&v174=https%3A%2F%2Fcandsa.top%2F&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=1024&mcorgid=0A2D38B352782F1E0A490D4C%40AdobeOrg&AQE=1 HTTP/1.1
Host: ssl.o.auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
date: Fri, 19 Apr 2024 07:09:49 GMT
expires: Thu, 18 Apr 2024 07:09:49 GMT
last-modified: Sat, 20 Apr 2024 07:09:49 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
etag: 3679735970879111168-4618252435550455342
vary: *
content-type: image/gif;charset=utf-8
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| s.pinimg.com/ct/lib/main.32155010.js | 23.52.84.225 | 200 OK | 20 kB |
URL GET HTTP/2s.pinimg.com/ct/lib/main.32155010.js IP23.52.84.225:443
CertificateIssuerDigiCert Inc Subject*.pinterest.com Fingerprint8E:D1:BC:9A:53:E5:51:57:5E:48:5E:22:82:8C:60:F8:74:F0:08:AC ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash48bfea2777d079c1aabec184c1b54b34 2fb78ec90eacc0159becd954b8613edf1fcd6e66 6982e83b9ea7682534a77808bc53b3e516bc5d26dc406de1a2ea81c2fdf63a33
GET /ct/lib/main.32155010.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
etag: "0c0f2aed16e51276069e2c6e45c878c1"
x-amz-server-side-encryption: AES256
cache-control: max-age=43200
content-encoding: br
accept-ranges: bytes
content-type: application/javascript
content-length: 19940
alt-svc: h3=":443"; ma=600
vary: Accept-Encoding, Origin
akamai-x-true-ttl: 43200
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| s.pinimg.com/ct/core.js | 23.52.84.225 | 200 OK | 1.9 kB |
IP23.52.84.225:443
CertificateIssuerDigiCert Inc Subject*.pinterest.com Fingerprint8E:D1:BC:9A:53:E5:51:57:5E:48:5E:22:82:8C:60:F8:74:F0:08:AC ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (4777), with no line terminators Hash157038e34123cc34939c37ef460356f4 bc65c9c0071a0d483a78ff7d5abe5f2500b265c1 62e7cb03e8f65ceb4f43a5a56a3b9c3950158fae3fea85699e3f4c68672f4c2f
GET /ct/core.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
etag: "2a48a6694c41c203319b5f6018c2bbbc"
x-amz-server-side-encryption: AES256
cache-control: max-age=7200
content-encoding: br
accept-ranges: bytes
content-type: application/javascript
content-length: 1899
vary: Accept-Encoding, Origin
akamai-x-true-ttl: 7200
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProText-Regular.woff2 | 3.164.230.70 | 200 OK | 52 kB |
URL GET HTTP/2auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProText-Regular.woff2 IP3.164.230.70:443
CertificateIssuerEntrust, Inc. Subjectauspost.com.au Fingerprint55:C1:BC:10:96:68:10:27:1C:A5:54:7F:5F:05:4F:74:9C:A0:57:F4 ValidityThu, 17 Aug 2023 00:36:18 GMT - Mon, 16 Sep 2024 00:36:17 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 50292, version 1.131 Hashbbe340f033a0416d944ba2cf62e2644b 9396631d2e209e1242778f54594b972120926c92 32f1fa3af8b71bc8726bb4da6a2d73e82718c56107041d48bdfc8961bdac2283
GET /mypost/auspoststaticassets/assets/fonts/APTypeProText-Regular.woff2 HTTP/1.1
Host: auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://candsa.top
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 50292
cache-control: no-cache
date: Fri, 19 Apr 2024 07:09:49 GMT
etag: "27fae15cbfd530523ff56cb72d8778ec"
last-modified: Fri, 12 Apr 2024 03:18:50 GMT
server: nginx
strict-transport-security: max-age=15552000
x-amz-version-id: azk68GC_QCKRzra2OL3z3ap.alDnEwSz
x-cache: Miss from cloudfront
via: 1.1 a75b33507c98ec56d93666d653f76f76.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: 3yJJbliMMUNiDDUA1PEYjBtIG_RQAzWY1uT9MgJgyWeGLNtWZ8RSAw==
X-Firefox-Spdy: h2
|
|
| auspost.com.au/mypost/auspoststaticassets/assets/favicons/apple-touch-icon.png | 3.164.230.70 | 200 OK | 1.6 kB |
URL GET HTTP/2auspost.com.au/mypost/auspoststaticassets/assets/favicons/apple-touch-icon.png IP3.164.230.70:443
CertificateIssuerEntrust, Inc. Subjectauspost.com.au Fingerprint55:C1:BC:10:96:68:10:27:1C:A5:54:7F:5F:05:4F:74:9C:A0:57:F4 ValidityThu, 17 Aug 2023 00:36:18 GMT - Mon, 16 Sep 2024 00:36:17 GMT
File typePNG image data, 180 x 180, 8-bit colormap, non-interlaced Hash7b1d397aa9eacc7d6733848ca9e8954d 372156cb7e9a9616a0b61115d8a056b7f44a15cf 5ca98123565b2336f07400de1a2de9bfbd9152916d8a851febc7aa5855e67c26
GET /mypost/auspoststaticassets/assets/favicons/apple-touch-icon.png HTTP/1.1
Host: auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1554
cache-control: no-cache
date: Fri, 19 Apr 2024 07:09:50 GMT
etag: "7b1d397aa9eacc7d6733848ca9e8954d"
last-modified: Fri, 12 Apr 2024 03:18:50 GMT
server: nginx
strict-transport-security: max-age=15552000
x-amz-version-id: l_8UwJt265tEAdGy8MEzVztCWYN6BjUG
x-cache: Miss from cloudfront
via: 1.1 a75b33507c98ec56d93666d653f76f76.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: At-gaCYfd-BpvXcjxU_l8J7mkwPOTmtR42xtYllLIh0v1Ola9T7SOQ==
X-Firefox-Spdy: h2
|
|
| auspost.com.au/mypost/auspoststaticassets/assets/favicons/favicon-16x16.png | 3.164.230.70 | 200 OK | 448 B |
URL GET HTTP/2auspost.com.au/mypost/auspoststaticassets/assets/favicons/favicon-16x16.png IP3.164.230.70:443
CertificateIssuerEntrust, Inc. Subjectauspost.com.au Fingerprint55:C1:BC:10:96:68:10:27:1C:A5:54:7F:5F:05:4F:74:9C:A0:57:F4 ValidityThu, 17 Aug 2023 00:36:18 GMT - Mon, 16 Sep 2024 00:36:17 GMT
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hash3ad604e022770d793a1cf82f6f8e4301 04681aac6fbb024ce6b8b61657dcc76b28789277 aca28651f2b4a1546de612c7d7ed3c7033851b3d76770d3dc77504f784b12f5d
GET /mypost/auspoststaticassets/assets/favicons/favicon-16x16.png HTTP/1.1
Host: auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 448
cache-control: no-cache
date: Fri, 19 Apr 2024 07:09:50 GMT
etag: "3ad604e022770d793a1cf82f6f8e4301"
last-modified: Fri, 12 Apr 2024 03:18:50 GMT
server: nginx
strict-transport-security: max-age=15552000
x-amz-version-id: qmD7evsvvgfgMCr4mW89gn11PGTlGrBo
x-cache: Miss from cloudfront
via: 1.1 a75b33507c98ec56d93666d653f76f76.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: TxP9qSMX8_ktXBPD88ExOVtbMwqpT6HVZbpdTR7VSbfYCaLnEFSNHg==
X-Firefox-Spdy: h2
|
|
| candsa.top/APTypeProText-Regular.a67ad29d67ff62360d33.woff2 | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/APTypeProText-Regular.a67ad29d67ff62360d33.woff2 IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text Hash0b3f05d5e92e273e970b6d7dfff1cd55 00abfe1bc23447e4ac867706057580073f1b47a7 938e9fb9b62b62717cead0bc52984d89d1fa54cb8db612da85e30a815c879e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /APTypeProText-Regular.a67ad29d67ff62360d33.woff2 HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Cookie: AMCV_0A2D38B352782F1E0A490D4C%40AdobeOrg=1176715910%7CMCIDTS%7C19833%7CMCMID%7C66888518054812516234497051988867033971%7CMCAID%7CNONE%7CMCOPTOUT-1713517789s%7CNONE%7CvVersion%7C5.4.0; sat_track=true; _gcl_au=1.1.1159124711.1713510589; AMCVS_0A2D38B352782F1E0A490D4C%40AdobeOrg=1; prevUrl=https%3A%2F%2Fcandsa.top%2F; s_ppn=auspost%3Ahome; s_nr=1713510589128; s_auth=false; s_cc=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:51 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProDisplay-Medium.woff2 | 3.164.230.70 | 200 OK | 65 kB |
URL GET HTTP/2auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProDisplay-Medium.woff2 IP3.164.230.70:443
CertificateIssuerEntrust, Inc. Subjectauspost.com.au Fingerprint55:C1:BC:10:96:68:10:27:1C:A5:54:7F:5F:05:4F:74:9C:A0:57:F4 ValidityThu, 17 Aug 2023 00:36:18 GMT - Mon, 16 Sep 2024 00:36:17 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 44240, version 1.131 Hash4d88bb72e6999eedcc2fe732f1e71ada 37a00238eff9abaf574f8761f1aee78ca987d8b0 4e2b50b70e2f0429dabc63ad316304f4a0725d89f893ea5d2dfb50d41dccb56c
GET /mypost/auspoststaticassets/assets/fonts/APTypeProDisplay-Medium.woff2 HTTP/1.1
Host: auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://candsa.top
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 44240
cache-control: no-cache
date: Fri, 19 Apr 2024 07:09:49 GMT
etag: "41f3d79ca98c45dcbefba62294517a70"
last-modified: Fri, 12 Apr 2024 03:18:50 GMT
server: nginx
strict-transport-security: max-age=15552000
x-amz-version-id: 7CvLyAt.GTlgEFyOn5bDIQhMJFa2GI1Y
x-cache: Miss from cloudfront
via: 1.1 a75b33507c98ec56d93666d653f76f76.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: vSm32uD9RK4cN7Aroi-uauDlhJKeck0aXEQoMPpOeWTYgqs6zfoIjw==
X-Firefox-Spdy: h2
|
|
| candsa.top/APTypeProText-Medium.47db950bddc880ba36a0.woff2 | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/APTypeProText-Medium.47db950bddc880ba36a0.woff2 IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text Hash0b3f05d5e92e273e970b6d7dfff1cd55 00abfe1bc23447e4ac867706057580073f1b47a7 938e9fb9b62b62717cead0bc52984d89d1fa54cb8db612da85e30a815c879e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /APTypeProText-Medium.47db950bddc880ba36a0.woff2 HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Cookie: AMCV_0A2D38B352782F1E0A490D4C%40AdobeOrg=1176715910%7CMCIDTS%7C19833%7CMCMID%7C66888518054812516234497051988867033971%7CMCAID%7CNONE%7CMCOPTOUT-1713517789s%7CNONE%7CvVersion%7C5.4.0; sat_track=true; _gcl_au=1.1.1159124711.1713510589; AMCVS_0A2D38B352782F1E0A490D4C%40AdobeOrg=1; prevUrl=https%3A%2F%2Fcandsa.top%2F; s_ppn=auspost%3Ahome; s_nr=1713510589128; s_auth=false; s_cc=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:51 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| candsa.top/APTypeProText-Regular.0d06f05cee62a982b327.woff | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/APTypeProText-Regular.0d06f05cee62a982b327.woff IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text Hash0b3f05d5e92e273e970b6d7dfff1cd55 00abfe1bc23447e4ac867706057580073f1b47a7 938e9fb9b62b62717cead0bc52984d89d1fa54cb8db612da85e30a815c879e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /APTypeProText-Regular.0d06f05cee62a982b327.woff HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Cookie: AMCV_0A2D38B352782F1E0A490D4C%40AdobeOrg=1176715910%7CMCIDTS%7C19833%7CMCMID%7C66888518054812516234497051988867033971%7CMCAID%7CNONE%7CMCOPTOUT-1713517789s%7CNONE%7CvVersion%7C5.4.0; sat_track=true; _gcl_au=1.1.1159124711.1713510589; AMCVS_0A2D38B352782F1E0A490D4C%40AdobeOrg=1; prevUrl=https%3A%2F%2Fcandsa.top%2F; s_ppn=auspost%3Ahome; s_nr=1713510589128; s_auth=false; s_cc=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:51 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| candsa.top/APTypeProDisplay-Medium.e7119b9cddcfe7afabe5.woff | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/APTypeProDisplay-Medium.e7119b9cddcfe7afabe5.woff IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text Hash0b3f05d5e92e273e970b6d7dfff1cd55 00abfe1bc23447e4ac867706057580073f1b47a7 938e9fb9b62b62717cead0bc52984d89d1fa54cb8db612da85e30a815c879e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /APTypeProDisplay-Medium.e7119b9cddcfe7afabe5.woff HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Cookie: AMCV_0A2D38B352782F1E0A490D4C%40AdobeOrg=1176715910%7CMCIDTS%7C19833%7CMCMID%7C66888518054812516234497051988867033971%7CMCAID%7CNONE%7CMCOPTOUT-1713517789s%7CNONE%7CvVersion%7C5.4.0; sat_track=true; _gcl_au=1.1.1159124711.1713510589; AMCVS_0A2D38B352782F1E0A490D4C%40AdobeOrg=1; prevUrl=https%3A%2F%2Fcandsa.top%2F; s_ppn=auspost%3Ahome; s_nr=1713510589128; s_auth=false; s_cc=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:51 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| candsa.top/APTypeProText-Medium.413a53b9b97bf12b7b51.woff | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/APTypeProText-Medium.413a53b9b97bf12b7b51.woff IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text Hash0b3f05d5e92e273e970b6d7dfff1cd55 00abfe1bc23447e4ac867706057580073f1b47a7 938e9fb9b62b62717cead0bc52984d89d1fa54cb8db612da85e30a815c879e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /APTypeProText-Medium.413a53b9b97bf12b7b51.woff HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Cookie: AMCV_0A2D38B352782F1E0A490D4C%40AdobeOrg=1176715910%7CMCIDTS%7C19833%7CMCMID%7C66888518054812516234497051988867033971%7CMCAID%7CNONE%7CMCOPTOUT-1713517789s%7CNONE%7CvVersion%7C5.4.0; sat_track=true; _gcl_au=1.1.1159124711.1713510589; AMCVS_0A2D38B352782F1E0A490D4C%40AdobeOrg=1; prevUrl=https%3A%2F%2Fcandsa.top%2F; s_ppn=auspost%3Ahome; s_nr=1713510589128; s_auth=false; s_cc=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:51 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| candsa.top/website-header/fonts/APTypeProText-Regular.woff2 | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/website-header/fonts/APTypeProText-Regular.woff2 IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text Hash0b3f05d5e92e273e970b6d7dfff1cd55 00abfe1bc23447e4ac867706057580073f1b47a7 938e9fb9b62b62717cead0bc52984d89d1fa54cb8db612da85e30a815c879e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /website-header/fonts/APTypeProText-Regular.woff2 HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Cookie: AMCV_0A2D38B352782F1E0A490D4C%40AdobeOrg=1176715910%7CMCIDTS%7C19833%7CMCMID%7C66888518054812516234497051988867033971%7CMCAID%7CNONE%7CMCOPTOUT-1713517789s%7CNONE%7CvVersion%7C5.4.0; sat_track=true; _gcl_au=1.1.1159124711.1713510589; AMCVS_0A2D38B352782F1E0A490D4C%40AdobeOrg=1; prevUrl=https%3A%2F%2Fcandsa.top%2F; s_ppn=auspost%3Ahome; s_nr=1713510589128; s_auth=false; s_cc=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| candsa.top/ap-footer/APTypeProText-Regular.woff2 | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/ap-footer/APTypeProText-Regular.woff2 IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text Hash0b3f05d5e92e273e970b6d7dfff1cd55 00abfe1bc23447e4ac867706057580073f1b47a7 938e9fb9b62b62717cead0bc52984d89d1fa54cb8db612da85e30a815c879e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /ap-footer/APTypeProText-Regular.woff2 HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Cookie: AMCV_0A2D38B352782F1E0A490D4C%40AdobeOrg=1176715910%7CMCIDTS%7C19833%7CMCMID%7C66888518054812516234497051988867033971%7CMCAID%7CNONE%7CMCOPTOUT-1713517789s%7CNONE%7CvVersion%7C5.4.0; sat_track=true; _gcl_au=1.1.1159124711.1713510589; AMCVS_0A2D38B352782F1E0A490D4C%40AdobeOrg=1; prevUrl=https%3A%2F%2Fcandsa.top%2F; s_ppn=auspost%3Ahome; s_nr=1713510589128; s_auth=false; s_cc=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| candsa.top/website-header/fonts/APTypeProText-Regular.woff | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/website-header/fonts/APTypeProText-Regular.woff IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text Hash0b3f05d5e92e273e970b6d7dfff1cd55 00abfe1bc23447e4ac867706057580073f1b47a7 938e9fb9b62b62717cead0bc52984d89d1fa54cb8db612da85e30a815c879e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /website-header/fonts/APTypeProText-Regular.woff HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Cookie: AMCV_0A2D38B352782F1E0A490D4C%40AdobeOrg=1176715910%7CMCIDTS%7C19833%7CMCMID%7C66888518054812516234497051988867033971%7CMCAID%7CNONE%7CMCOPTOUT-1713517789s%7CNONE%7CvVersion%7C5.4.0; sat_track=true; _gcl_au=1.1.1159124711.1713510589; AMCVS_0A2D38B352782F1E0A490D4C%40AdobeOrg=1; prevUrl=https%3A%2F%2Fcandsa.top%2F; s_ppn=auspost%3Ahome; s_nr=1713510589128; s_auth=false; s_cc=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| candsa.top/website-header/fonts/APTypeProText-Medium.woff2 | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/website-header/fonts/APTypeProText-Medium.woff2 IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text Hash0b3f05d5e92e273e970b6d7dfff1cd55 00abfe1bc23447e4ac867706057580073f1b47a7 938e9fb9b62b62717cead0bc52984d89d1fa54cb8db612da85e30a815c879e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /website-header/fonts/APTypeProText-Medium.woff2 HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Cookie: AMCV_0A2D38B352782F1E0A490D4C%40AdobeOrg=1176715910%7CMCIDTS%7C19833%7CMCMID%7C66888518054812516234497051988867033971%7CMCAID%7CNONE%7CMCOPTOUT-1713517789s%7CNONE%7CvVersion%7C5.4.0; sat_track=true; _gcl_au=1.1.1159124711.1713510589; AMCVS_0A2D38B352782F1E0A490D4C%40AdobeOrg=1; prevUrl=https%3A%2F%2Fcandsa.top%2F; s_ppn=auspost%3Ahome; s_nr=1713510589128; s_auth=false; s_cc=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProText-Regular.woff2 | 3.164.230.70 | 200 OK | 32 kB |
URL GET HTTP/2auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProText-Regular.woff2 IP3.164.230.70:443
CertificateIssuerEntrust, Inc. Subjectauspost.com.au Fingerprint55:C1:BC:10:96:68:10:27:1C:A5:54:7F:5F:05:4F:74:9C:A0:57:F4 ValidityThu, 17 Aug 2023 00:36:18 GMT - Mon, 16 Sep 2024 00:36:17 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 50292, version 1.131 Hash8d1be20dd48f2a7d8ab1d9158f65da6e add2f3acbe4977b51a644123c5bcbf1f1c3761ef 0f8dc54d1223a6f611ee9a51d4f0dda3c86018e1aadc5c290d5b6ce4ad3451a1
GET /mypost/auspoststaticassets/assets/fonts/APTypeProText-Regular.woff2 HTTP/1.1
Host: auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://candsa.top
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 50292
cache-control: no-cache
date: Fri, 19 Apr 2024 07:09:52 GMT
etag: "27fae15cbfd530523ff56cb72d8778ec"
last-modified: Fri, 12 Apr 2024 03:18:50 GMT
server: nginx
strict-transport-security: max-age=15552000
x-amz-id-2: Filga6sQKexgivWb54zNzf5w8rpeHuYUTxA9vMCqbXtDBHJ/o7fsVxxKBIc4JuOgNClyr1RiHwM=
x-amz-request-id: 46GBSRAQRTKFY31B
x-amz-version-id: azk68GC_QCKRzra2OL3z3ap.alDnEwSz
x-cache: Miss from cloudfront
via: 1.1 a75b33507c98ec56d93666d653f76f76.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: _oIW2wOeOV0KtW1aVC9uzUacSPrP4Je0_sazKIkpAeApG21Rg12Y7g==
X-Firefox-Spdy: h2
|
|
| auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProDisplay-Medium.woff2 | 3.164.230.70 | 200 OK | 65 kB |
URL GET HTTP/2auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProDisplay-Medium.woff2 IP3.164.230.70:443
CertificateIssuerEntrust, Inc. Subjectauspost.com.au Fingerprint55:C1:BC:10:96:68:10:27:1C:A5:54:7F:5F:05:4F:74:9C:A0:57:F4 ValidityThu, 17 Aug 2023 00:36:18 GMT - Mon, 16 Sep 2024 00:36:17 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 44240, version 1.131 Hash4d88bb72e6999eedcc2fe732f1e71ada 37a00238eff9abaf574f8761f1aee78ca987d8b0 4e2b50b70e2f0429dabc63ad316304f4a0725d89f893ea5d2dfb50d41dccb56c
GET /mypost/auspoststaticassets/assets/fonts/APTypeProDisplay-Medium.woff2 HTTP/1.1
Host: auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://candsa.top
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 44240
cache-control: no-cache
date: Fri, 19 Apr 2024 07:09:52 GMT
etag: "41f3d79ca98c45dcbefba62294517a70"
last-modified: Fri, 12 Apr 2024 03:18:50 GMT
server: nginx
strict-transport-security: max-age=15552000
x-amz-id-2: uAP4VeuqbfT7ls9KswcXx/SENEhVVzRfibQDgpYHxzOZzlbC23ah18qprF+CQ4CvVfgFJsF5Pa0=
x-amz-request-id: 46GAZ264KSFT713J
x-amz-version-id: 7CvLyAt.GTlgEFyOn5bDIQhMJFa2GI1Y
x-cache: Miss from cloudfront
via: 1.1 a75b33507c98ec56d93666d653f76f76.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: 2ClLEk9pGc9hoalwxm6bXZpHVXmKM9T5VFmInaCijDamICrAlpFWHA==
X-Firefox-Spdy: h2
|
|
| candsa.top/website-header/fonts/APTypeProText-Medium.woff | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/website-header/fonts/APTypeProText-Medium.woff IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text Hash0b3f05d5e92e273e970b6d7dfff1cd55 00abfe1bc23447e4ac867706057580073f1b47a7 938e9fb9b62b62717cead0bc52984d89d1fa54cb8db612da85e30a815c879e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /website-header/fonts/APTypeProText-Medium.woff HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Cookie: AMCV_0A2D38B352782F1E0A490D4C%40AdobeOrg=1176715910%7CMCIDTS%7C19833%7CMCMID%7C66888518054812516234497051988867033971%7CMCAID%7CNONE%7CMCOPTOUT-1713517789s%7CNONE%7CvVersion%7C5.4.0; sat_track=true; _gcl_au=1.1.1159124711.1713510589; AMCVS_0A2D38B352782F1E0A490D4C%40AdobeOrg=1; prevUrl=https%3A%2F%2Fcandsa.top%2F; s_ppn=auspost%3Ahome; s_nr=1713510589128; s_auth=false; s_cc=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| candsa.top/ap-footer/APTypeProDisplay-Medium.woff | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/ap-footer/APTypeProDisplay-Medium.woff IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text Hash0b3f05d5e92e273e970b6d7dfff1cd55 00abfe1bc23447e4ac867706057580073f1b47a7 938e9fb9b62b62717cead0bc52984d89d1fa54cb8db612da85e30a815c879e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /ap-footer/APTypeProDisplay-Medium.woff HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Cookie: AMCV_0A2D38B352782F1E0A490D4C%40AdobeOrg=1176715910%7CMCIDTS%7C19833%7CMCMID%7C66888518054812516234497051988867033971%7CMCAID%7CNONE%7CMCOPTOUT-1713517789s%7CNONE%7CvVersion%7C5.4.0; sat_track=true; _gcl_au=1.1.1159124711.1713510589; AMCVS_0A2D38B352782F1E0A490D4C%40AdobeOrg=1; prevUrl=https%3A%2F%2Fcandsa.top%2F; s_ppn=auspost%3Ahome; s_nr=1713510589128; s_auth=false; s_cc=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProText-Medium.woff | 3.164.230.70 | 200 OK | 42 kB |
URL GET HTTP/2auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProText-Medium.woff IP3.164.230.70:443
CertificateIssuerEntrust, Inc. Subjectauspost.com.au Fingerprint55:C1:BC:10:96:68:10:27:1C:A5:54:7F:5F:05:4F:74:9C:A0:57:F4 ValidityThu, 17 Aug 2023 00:36:18 GMT - Mon, 16 Sep 2024 00:36:17 GMT
File typeWeb Open Font Format, TrueType, length 68456, version 1.0 Hash7a807f01e9181c7ef509441d2351b9ce 8057d2a1c8392ee90efa3525d9c2218d0e50c5b6 2f3cad5dcde505164183cf409ce78a4883ce65005b0957064ac15ab0ddaee50b
GET /mypost/auspoststaticassets/assets/fonts/APTypeProText-Medium.woff HTTP/1.1
Host: auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://candsa.top
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 68456
cache-control: no-cache
date: Fri, 19 Apr 2024 07:09:50 GMT
etag: "587d0435fd96ab4acf399f73e9df400c"
last-modified: Fri, 12 Apr 2024 03:18:50 GMT
server: nginx
strict-transport-security: max-age=15552000
x-amz-id-2: 7exO/+4T1LQCfS+Sw1b28kMAQlAGkB6akKJ+2H5cvICSLjUSXMfbxaA2xyO5BFEKodMjSUVM6BU=
x-amz-request-id: HP4NM7WNDRSW5EXY
x-amz-version-id: VjMEVmZLi4Foha_FUCt1JZ5FUIWRfd4j
x-cache: Miss from cloudfront
via: 1.1 a75b33507c98ec56d93666d653f76f76.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: Hc0r6NyLOqNEFi_GtLQxpurSWDCm1kojLXYUrT5z19pu5IOJ7UV6hg==
X-Firefox-Spdy: h2
|
|
| candsa.top/website-header/fonts/APTypeProDisplay-Medium.woff2 | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/website-header/fonts/APTypeProDisplay-Medium.woff2 IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text Hash0b3f05d5e92e273e970b6d7dfff1cd55 00abfe1bc23447e4ac867706057580073f1b47a7 938e9fb9b62b62717cead0bc52984d89d1fa54cb8db612da85e30a815c879e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /website-header/fonts/APTypeProDisplay-Medium.woff2 HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Cookie: AMCV_0A2D38B352782F1E0A490D4C%40AdobeOrg=1176715910%7CMCIDTS%7C19833%7CMCMID%7C66888518054812516234497051988867033971%7CMCAID%7CNONE%7CMCOPTOUT-1713517789s%7CNONE%7CvVersion%7C5.4.0; sat_track=true; _gcl_au=1.1.1159124711.1713510589; AMCVS_0A2D38B352782F1E0A490D4C%40AdobeOrg=1; prevUrl=https%3A%2F%2Fcandsa.top%2F; s_ppn=auspost%3Ahome; s_nr=1713510589128; s_auth=false; s_cc=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:57 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| candsa.top/website-header/fonts/APTypeProDisplay-Medium.woff | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/website-header/fonts/APTypeProDisplay-Medium.woff IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text Hash0b3f05d5e92e273e970b6d7dfff1cd55 00abfe1bc23447e4ac867706057580073f1b47a7 938e9fb9b62b62717cead0bc52984d89d1fa54cb8db612da85e30a815c879e2a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /website-header/fonts/APTypeProDisplay-Medium.woff HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Cookie: AMCV_0A2D38B352782F1E0A490D4C%40AdobeOrg=1176715910%7CMCIDTS%7C19833%7CMCMID%7C66888518054812516234497051988867033971%7CMCAID%7CNONE%7CMCOPTOUT-1713517789s%7CNONE%7CvVersion%7C5.4.0; sat_track=true; _gcl_au=1.1.1159124711.1713510589; AMCVS_0A2D38B352782F1E0A490D4C%40AdobeOrg=1; prevUrl=https%3A%2F%2Fcandsa.top%2F; s_ppn=auspost%3Ahome; s_nr=1713510589128; s_auth=false; s_cc=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:57 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| candsa.top/APTypeProDisplay-Medium.3965cc1a217ef4946152.woff2 | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/APTypeProDisplay-Medium.3965cc1a217ef4946152.woff2 IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text, with no line terminators Hash979057b568353251fd52248b7f7388e4 116525307cc65b31ea3e07cddb1a3f614c73464e 1c952a55f0b5dfca4f0b63ec61b694d3af94cb22d28018a5bfb3258d2543bce5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /APTypeProDisplay-Medium.3965cc1a217ef4946152.woff2 HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Cookie: AMCV_0A2D38B352782F1E0A490D4C%40AdobeOrg=1176715910%7CMCIDTS%7C19833%7CMCMID%7C66888518054812516234497051988867033971%7CMCAID%7CNONE%7CMCOPTOUT-1713517789s%7CNONE%7CvVersion%7C5.4.0; sat_track=true; _gcl_au=1.1.1159124711.1713510589; AMCVS_0A2D38B352782F1E0A490D4C%40AdobeOrg=1; prevUrl=https%3A%2F%2Fcandsa.top%2F; s_ppn=auspost%3Ahome; s_nr=1713510589128; s_auth=false; s_cc=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:51 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProText-Regular.woff | 3.164.230.70 | 200 OK | 32 kB |
URL GET HTTP/2auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProText-Regular.woff IP3.164.230.70:443
CertificateIssuerEntrust, Inc. Subjectauspost.com.au Fingerprint55:C1:BC:10:96:68:10:27:1C:A5:54:7F:5F:05:4F:74:9C:A0:57:F4 ValidityThu, 17 Aug 2023 00:36:18 GMT - Mon, 16 Sep 2024 00:36:17 GMT
File typeWeb Open Font Format, TrueType, length 68061, version 1.0 Hash86a928af56919696ca5c7392d22d8e82 ec72f015c0080c6071c949e80aaccdac30cad2a4 6998f91c968fc7660c6a3e02a14474e71a775175c93f941c1eb4c12a19639f61
GET /mypost/auspoststaticassets/assets/fonts/APTypeProText-Regular.woff HTTP/1.1
Host: auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://candsa.top
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 68061
cache-control: no-cache
date: Fri, 19 Apr 2024 07:09:53 GMT
etag: "5a196398843079e4bca467ef62473a5e"
last-modified: Fri, 12 Apr 2024 03:18:50 GMT
server: nginx
strict-transport-security: max-age=15552000
x-amz-id-2: k7F5gqsqM0GcQ6/3gkwBpRxdwljQ5RG7MmHV/78NdWChbbG8JlvuqQLnHgMWEpHT79otuyx2tn8=
x-amz-request-id: 42N91ZVWAJ10MEY2
x-amz-version-id: L8t4A_9KoIOlrijPN8T.bX8rnUjR_jkR
x-cache: Miss from cloudfront
via: 1.1 a75b33507c98ec56d93666d653f76f76.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: 7rkoWpLJyjbZzeIDCsOJ8T78bBVxEb4KSwtSRHvXPFINcCzeC7vLYw==
X-Firefox-Spdy: h2
|
|
| | 43.249.9.216 | 200 OK | 826 kB |
URL User Request GET HTTP/2IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
Size826 kB (826247 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET / HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Fri, 19 Apr 2024 07:09:47 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProText-Regular.woff | 3.164.230.70 | 200 OK | 32 kB |
URL GET HTTP/2auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProText-Regular.woff IP3.164.230.70:443
CertificateIssuerEntrust, Inc. Subjectauspost.com.au Fingerprint55:C1:BC:10:96:68:10:27:1C:A5:54:7F:5F:05:4F:74:9C:A0:57:F4 ValidityThu, 17 Aug 2023 00:36:18 GMT - Mon, 16 Sep 2024 00:36:17 GMT
File typeWeb Open Font Format, TrueType, length 68061, version 1.0 Hash86a928af56919696ca5c7392d22d8e82 ec72f015c0080c6071c949e80aaccdac30cad2a4 6998f91c968fc7660c6a3e02a14474e71a775175c93f941c1eb4c12a19639f61
GET /mypost/auspoststaticassets/assets/fonts/APTypeProText-Regular.woff HTTP/1.1
Host: auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://candsa.top
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 68061
cache-control: no-cache
date: Fri, 19 Apr 2024 07:09:50 GMT
etag: "5a196398843079e4bca467ef62473a5e"
last-modified: Fri, 12 Apr 2024 03:18:50 GMT
server: nginx
strict-transport-security: max-age=15552000
x-amz-version-id: L8t4A_9KoIOlrijPN8T.bX8rnUjR_jkR
x-cache: Miss from cloudfront
via: 1.1 a75b33507c98ec56d93666d653f76f76.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: A5CVuCpAMK4AtPNBnB69yj7oEhkD37JCR4_luvYGEsjc3EIsAGQ7fQ==
X-Firefox-Spdy: h2
|
|
| auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProText-Regular.woff | 3.164.230.70 | 200 OK | 32 kB |
URL GET HTTP/2auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProText-Regular.woff IP3.164.230.70:443
CertificateIssuerEntrust, Inc. Subjectauspost.com.au Fingerprint55:C1:BC:10:96:68:10:27:1C:A5:54:7F:5F:05:4F:74:9C:A0:57:F4 ValidityThu, 17 Aug 2023 00:36:18 GMT - Mon, 16 Sep 2024 00:36:17 GMT
File typeWeb Open Font Format, TrueType, length 68061, version 1.0 Hash86a928af56919696ca5c7392d22d8e82 ec72f015c0080c6071c949e80aaccdac30cad2a4 6998f91c968fc7660c6a3e02a14474e71a775175c93f941c1eb4c12a19639f61
GET /mypost/auspoststaticassets/assets/fonts/APTypeProText-Regular.woff HTTP/1.1
Host: auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://candsa.top
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 68061
cache-control: no-cache
date: Fri, 19 Apr 2024 07:09:53 GMT
etag: "5a196398843079e4bca467ef62473a5e"
last-modified: Fri, 12 Apr 2024 03:18:50 GMT
server: nginx
strict-transport-security: max-age=15552000
x-amz-id-2: uDyFtWny3Rodwes+5SeYuNb1RLEfP3/9vLfYkGOzt9tr2+mZqOuxGCvMjtZ0yPZ4kOllPqDli+Q=
x-amz-request-id: 42N040KT8DFG4ZP2
x-amz-version-id: L8t4A_9KoIOlrijPN8T.bX8rnUjR_jkR
x-cache: Miss from cloudfront
via: 1.1 a75b33507c98ec56d93666d653f76f76.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: AYdnS9kHxpEoDoLcL_oMj9J-NpTjoh-2qECVuSrY_UDdpGiheTtNLQ==
X-Firefox-Spdy: h2
|
|
| candsa.top/ap-footer/APTypeProDisplay-Medium.woff2 | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/ap-footer/APTypeProDisplay-Medium.woff2 IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text, with no line terminators Hash979057b568353251fd52248b7f7388e4 116525307cc65b31ea3e07cddb1a3f614c73464e 1c952a55f0b5dfca4f0b63ec61b694d3af94cb22d28018a5bfb3258d2543bce5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /ap-footer/APTypeProDisplay-Medium.woff2 HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Cookie: AMCV_0A2D38B352782F1E0A490D4C%40AdobeOrg=1176715910%7CMCIDTS%7C19833%7CMCMID%7C66888518054812516234497051988867033971%7CMCAID%7CNONE%7CMCOPTOUT-1713517789s%7CNONE%7CvVersion%7C5.4.0; sat_track=true; _gcl_au=1.1.1159124711.1713510589; AMCVS_0A2D38B352782F1E0A490D4C%40AdobeOrg=1; prevUrl=https%3A%2F%2Fcandsa.top%2F; s_ppn=auspost%3Ahome; s_nr=1713510589128; s_auth=false; s_cc=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProDisplay-Medium.woff | 3.164.230.70 | 200 OK | 32 kB |
URL GET HTTP/2auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProDisplay-Medium.woff IP3.164.230.70:443
CertificateIssuerEntrust, Inc. Subjectauspost.com.au Fingerprint55:C1:BC:10:96:68:10:27:1C:A5:54:7F:5F:05:4F:74:9C:A0:57:F4 ValidityThu, 17 Aug 2023 00:36:18 GMT - Mon, 16 Sep 2024 00:36:17 GMT
File typeWeb Open Font Format, TrueType, length 58886, version 1.0 Hashc2079958904e4466aac5508356bb18ba a8e086b3cf5c3bf7500f0954584837f6d88aeb1c b17f23d903cba2c1276d3fe6ce008b24e170aace1e68661a5c53363d247f0880
GET /mypost/auspoststaticassets/assets/fonts/APTypeProDisplay-Medium.woff HTTP/1.1
Host: auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://candsa.top
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 58886
cache-control: no-cache
date: Fri, 19 Apr 2024 07:09:50 GMT
etag: "a5858ebe483aeb916de9be070cb39944"
last-modified: Fri, 12 Apr 2024 03:18:50 GMT
server: nginx
strict-transport-security: max-age=15552000
x-amz-version-id: 2sH.tT9WtHy4pjPLTqVpCgWWqUwmtmTp
x-cache: Miss from cloudfront
via: 1.1 a75b33507c98ec56d93666d653f76f76.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: mF401BeVuBO0MOI4FzgXvwf1T3J3JgtgAOd9676zUq_uiex-OSSvmQ==
X-Firefox-Spdy: h2
|
|
| auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProDisplay-Medium.woff | 3.164.230.70 | 200 OK | 32 kB |
URL GET HTTP/2auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProDisplay-Medium.woff IP3.164.230.70:443
CertificateIssuerEntrust, Inc. Subjectauspost.com.au Fingerprint55:C1:BC:10:96:68:10:27:1C:A5:54:7F:5F:05:4F:74:9C:A0:57:F4 ValidityThu, 17 Aug 2023 00:36:18 GMT - Mon, 16 Sep 2024 00:36:17 GMT
File typeWeb Open Font Format, TrueType, length 58886, version 1.0 Hashc2079958904e4466aac5508356bb18ba a8e086b3cf5c3bf7500f0954584837f6d88aeb1c b17f23d903cba2c1276d3fe6ce008b24e170aace1e68661a5c53363d247f0880
GET /mypost/auspoststaticassets/assets/fonts/APTypeProDisplay-Medium.woff HTTP/1.1
Host: auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://candsa.top
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 58886
cache-control: no-cache
date: Fri, 19 Apr 2024 07:09:56 GMT
etag: "a5858ebe483aeb916de9be070cb39944"
last-modified: Fri, 12 Apr 2024 03:18:50 GMT
server: nginx
strict-transport-security: max-age=15552000
x-amz-id-2: iVSeZ+SVG4Z+Sm07Hdd54RQyQ3vM073NYb4gKoglPIm6b/9Bg1ah9bE5QdCH1SlOYG+u8b3wH4U=
x-amz-request-id: 5KCZZ281AP1GE3Y7
x-amz-version-id: 2sH.tT9WtHy4pjPLTqVpCgWWqUwmtmTp
x-cache: Miss from cloudfront
via: 1.1 a75b33507c98ec56d93666d653f76f76.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: vLaTQ-f2eDkZgrpaCdFMpj9uKzaFMTBsgqatCtktSEz9-zLKlYEyqQ==
X-Firefox-Spdy: h2
|
|
| auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProText-Medium.woff2 | 3.164.230.70 | 200 OK | 32 kB |
URL GET HTTP/2auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProText-Medium.woff2 IP3.164.230.70:443
CertificateIssuerEntrust, Inc. Subjectauspost.com.au Fingerprint55:C1:BC:10:96:68:10:27:1C:A5:54:7F:5F:05:4F:74:9C:A0:57:F4 ValidityThu, 17 Aug 2023 00:36:18 GMT - Mon, 16 Sep 2024 00:36:17 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 50472, version 1.131 Hashb01216a00fa50c041c845aec2bb5b233 1de8a41fb165d52a9f1a42c6546354a88a7c2fa3 a2e24f6b1bc41cbf7235b6b30e251f068ec545ce648220e466529575e5fd28fc
GET /mypost/auspoststaticassets/assets/fonts/APTypeProText-Medium.woff2 HTTP/1.1
Host: auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://candsa.top
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 50472
cache-control: no-cache
date: Fri, 19 Apr 2024 07:09:49 GMT
etag: "c8ca4c62639e9f4744bae72a42294a00"
last-modified: Fri, 12 Apr 2024 03:18:50 GMT
server: nginx
strict-transport-security: max-age=15552000
x-amz-version-id: 7dO9fLxOPvs5bWbotTcLw2DGmRjSNVJM
x-cache: Miss from cloudfront
via: 1.1 a75b33507c98ec56d93666d653f76f76.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: An65FTD1Qw6WnB_vXkj1rpOUkM_MFF2R5eOvFtKpPBP9Ptt9SeAVBA==
X-Firefox-Spdy: h2
|
|
| candsa.top/ap-footer/APTypeProText-Regular.woff | 43.249.9.216 | 404 Not Found | 257 B |
URL GET HTTP/2candsa.top/ap-footer/APTypeProText-Regular.woff IP43.249.9.216:443 ASN#142032 High Family Technology Co., Limited
CertificateIssuerLet's Encrypt Subjectwww.candsa.top Fingerprint00:16:68:53:60:BF:E0:E5:FD:19:82:A9:38:AA:4E:26:BC:CC:58:5E ValidityMon, 05 Feb 2024 07:33:44 GMT - Sun, 05 May 2024 07:33:43 GMT
File typeHTML document, ASCII text, with no line terminators Hash979057b568353251fd52248b7f7388e4 116525307cc65b31ea3e07cddb1a3f614c73464e 1c952a55f0b5dfca4f0b63ec61b694d3af94cb22d28018a5bfb3258d2543bce5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Australia Post | | OpenPhish | phishing | Australia Post |
GET /ap-footer/APTypeProText-Regular.woff HTTP/1.1
Host: candsa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Cookie: AMCV_0A2D38B352782F1E0A490D4C%40AdobeOrg=1176715910%7CMCIDTS%7C19833%7CMCMID%7C66888518054812516234497051988867033971%7CMCAID%7CNONE%7CMCOPTOUT-1713517789s%7CNONE%7CvVersion%7C5.4.0; sat_track=true; _gcl_au=1.1.1159124711.1713510589; AMCVS_0A2D38B352782F1E0A490D4C%40AdobeOrg=1; prevUrl=https%3A%2F%2Fcandsa.top%2F; s_ppn=auspost%3Ahome; s_nr=1713510589128; s_auth=false; s_cc=true
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
content-length: 257
content-type: text/html; charset=iso-8859-1
date: Fri, 19 Apr 2024 07:09:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| s.pinimg.com/ct/lib/main.6192ffb7.js | 23.52.84.225 | 200 OK | 70 kB |
URL GET HTTP/3s.pinimg.com/ct/lib/main.6192ffb7.js IP23.52.84.225:443
CertificateIssuerDigiCert Inc Subject*.pinterest.com Fingerprint8E:D1:BC:9A:53:E5:51:57:5E:48:5E:22:82:8C:60:F8:74:F0:08:AC ValidityMon, 07 Aug 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash48bfea2777d079c1aabec184c1b54b34 2fb78ec90eacc0159becd954b8613edf1fcd6e66 6982e83b9ea7682534a77808bc53b3e516bc5d26dc406de1a2ea81c2fdf63a33
GET /ct/lib/main.6192ffb7.js HTTP/1.1
Host: s.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
etag: "0c0f2aed16e51276069e2c6e45c878c1"
x-amz-server-side-encryption: AES256
cache-control: max-age=1209600
content-encoding: br
accept-ranges: bytes
content-type: application/javascript
content-length: 19940
alt-svc: h3=":443"; ma=600
quic-version: 0x00000001
vary: Accept-Encoding, Origin
akamai-x-true-ttl: 1209600
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
|
|
| auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProText-Medium.woff2 | 3.164.230.70 | 200 OK | 32 kB |
URL GET HTTP/2auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProText-Medium.woff2 IP3.164.230.70:443
CertificateIssuerEntrust, Inc. Subjectauspost.com.au Fingerprint55:C1:BC:10:96:68:10:27:1C:A5:54:7F:5F:05:4F:74:9C:A0:57:F4 ValidityThu, 17 Aug 2023 00:36:18 GMT - Mon, 16 Sep 2024 00:36:17 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 50472, version 1.131 Hashb01216a00fa50c041c845aec2bb5b233 1de8a41fb165d52a9f1a42c6546354a88a7c2fa3 a2e24f6b1bc41cbf7235b6b30e251f068ec545ce648220e466529575e5fd28fc
GET /mypost/auspoststaticassets/assets/fonts/APTypeProText-Medium.woff2 HTTP/1.1
Host: auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://candsa.top
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 50472
cache-control: no-cache
date: Fri, 19 Apr 2024 07:09:52 GMT
etag: "c8ca4c62639e9f4744bae72a42294a00"
last-modified: Fri, 12 Apr 2024 03:18:50 GMT
server: nginx
strict-transport-security: max-age=15552000
x-amz-id-2: Vg2JCgxhedurCXKrMIrFhCydF9U5VvLqlKr6mFGQc3fPAiCrqILlJyd2agizbyud7nXmYPdecaE=
x-amz-request-id: 46G1XAMR215JEFRG
x-amz-version-id: 7dO9fLxOPvs5bWbotTcLw2DGmRjSNVJM
x-cache: Miss from cloudfront
via: 1.1 a75b33507c98ec56d93666d653f76f76.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: CtT4TkR1kDqOm3qsWJa5KElNX1_3yTTPHczOgSMwm5yPlyHvU-hCwQ==
X-Firefox-Spdy: h2
|
|
| auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProDisplay-Medium.woff | 3.164.230.70 | 200 OK | 32 kB |
URL GET HTTP/2auspost.com.au/mypost/auspoststaticassets/assets/fonts/APTypeProDisplay-Medium.woff IP3.164.230.70:443
CertificateIssuerEntrust, Inc. Subjectauspost.com.au Fingerprint55:C1:BC:10:96:68:10:27:1C:A5:54:7F:5F:05:4F:74:9C:A0:57:F4 ValidityThu, 17 Aug 2023 00:36:18 GMT - Mon, 16 Sep 2024 00:36:17 GMT
File typeWeb Open Font Format, TrueType, length 58886, version 1.0 Hashc2079958904e4466aac5508356bb18ba a8e086b3cf5c3bf7500f0954584837f6d88aeb1c b17f23d903cba2c1276d3fe6ce008b24e170aace1e68661a5c53363d247f0880
GET /mypost/auspoststaticassets/assets/fonts/APTypeProDisplay-Medium.woff HTTP/1.1
Host: auspost.com.au
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://candsa.top
DNT: 1
Connection: keep-alive
Referer: https://candsa.top/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 58886
cache-control: no-cache
date: Fri, 19 Apr 2024 07:09:53 GMT
etag: "a5858ebe483aeb916de9be070cb39944"
last-modified: Fri, 12 Apr 2024 03:18:50 GMT
server: nginx
strict-transport-security: max-age=15552000
x-amz-id-2: lD16sqGg37Bx4D8cgI4IMyCG9eJizh6fTe05WjR92K7IYKSYRKyN5PKd94IxrL6h8Jm5M9ylWp0=
x-amz-request-id: 42N78PVXGZM8R4SM
x-amz-version-id: 2sH.tT9WtHy4pjPLTqVpCgWWqUwmtmTp
x-cache: Miss from cloudfront
via: 1.1 a75b33507c98ec56d93666d653f76f76.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P1
x-amz-cf-id: uqHv6W2U1tGb32_gFXlLlHlj78VBuHU5FXNixsQXjrnvB_pDjOroOw==
X-Firefox-Spdy: h2
|
|
0.0.0.0