{"report_id":"7a18b510-39a5-40f4-be56-e0e52e1a9149","version":6,"status":"done","tags":["usps","logistics","phishing"],"date":"2023-08-23T08:01:29Z","url":{"schema":"http","addr":"upsservicecenter.com/26c485cbb5b8f4543b102ff491bcd15a/?token=597a69d7db7b1ace116b56d1418136d882adec152c14054cf42e52f9b4016ffc6d27ed645701d6623460180b931ee87aa9a630ba54ef45b75180cf2983d936d3/","fqdn":"upsservicecenter.com","domain":"upsservicecenter.com","tld":"com"},"ip":{"addr":"140.82.54.186","port":0,"asn":20473,"as":"AS-CHOOPA","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","fqdn":"upsservicecenter.com","domain":"upsservicecenter.com","tld":"com"},"title":"USPS - Offer"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-28T08:37:39Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"devilsms.live","ip":{"addr":"199.188.200.254","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2021-09-16","domain_rank":0,"first_seen":"2022-06-09 23:23:15","last_seen":"2023-08-08 22:36:19","alert_count":8,"request_count":8,"received_data":40913,"sent_data":4066,"comment":"","tags":null,"fingerprints":null},{"fqdn":"upsservicecenter.com","ip":{"addr":"140.82.54.186","port":443,"asn":20473,"as":"AS-CHOOPA","country":"France","country_code":"FR"},"domain_registered":"2023-08-22","domain_rank":0,"first_seen":"2023-08-23 00:48:06","last_seen":"2023-08-23 00:48:06","alert_count":6,"request_count":9,"received_data":39866,"sent_data":5985,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.pki.goog","ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2016-06-13","domain_rank":175,"first_seen":"2018-07-01 08:43:07","last_seen":"2023-08-22 18:12:05","alert_count":0,"request_count":3,"received_data":2100,"sent_data":999,"comment":"","tags":null,"fingerprints":null},{"fqdn":"maps.googleapis.com","ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":33876,"first_seen":"2019-10-17 17:56:16","last_seen":"2023-08-23 05:10:06","alert_count":0,"request_count":2,"received_data":84238,"sent_data":892,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.sectigo.com","ip":{"addr":"104.18.15.101","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-08-16","domain_rank":487,"first_seen":"2019-11-29 12:50:24","last_seen":"2023-08-22 23:59:51","alert_count":0,"request_count":1,"received_data":964,"sent_data":330,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2023-08-23T08:01:03Z","timestamp":1692777663,"ip_dst":{"addr":"140.82.54.186","port":443,"asn":20473,"as":"AS-CHOOPA","country":"France","country_code":"FR"},"ip_src":{"addr":"Client IP","port":60778,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"high","alert":"ThreatFox BianLian botnet C2 traffic (ip:port - confidence level: 50%)","source":"{\"timestamp\":\"2023-08-23T08:01:03.328910+0000\",\"flow_id\":1502468626121934,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.14\",\"src_port\":60778,\"dest_ip\":\"140.82.54.186\",\"dest_port\":443,\"proto\":\"TCP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":91146449,\"rev\":1,\"signature\":\"ThreatFox BianLian botnet C2 traffic (ip:port - confidence level: 50%)\",\"category\":\"A Network Trojan was detected\",\"severity\":1,\"source\":{\"ip\":\"140.82.54.186\",\"port\":443},\"target\":{\"ip\":\"10.70.215.14\",\"port\":60778},\"metadata\":{\"confidence_level\":[\"50\"],\"first_seen\":[\"2023_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":74,\"bytes_toclient\":0,\"start\":\"2023-08-23T08:01:03.328910+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - US Postal Service","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with US Postal Service phishing","tags":["usps","logistics","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/38/11/intl/nl_ALL/common.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2005cff13e09393e76f625c7c3e6d0b7","sha1":"47d240c168d611f38c102cf2b6320ea582e69e46","sha256":"50c76b6340f567a536017cdf52bef65fdbbec4d637253e823543059ac68c2fd1","sha512":"b7122caa3f4501f20c507addf63dc80c49f42dc7f3e28180db2a495d8b931ee2acd55517cd7a856402e2330975070a16c5cc49b5e36e1e5b57d58f6d31db5032","ssdeep":"1536:Nj2K0IVivAXiR1TtgigxMPZe0N+A//hMOhWv5iZqkQzV39NEkle8h:DVGAXmWiwo+A//hMOh85QqkQl9N95h","tlshash":"2273c59d725275a69317f0b9123f000ab13a64adf4484dacb24cd9e29ef585d02bbf7c","size":77983,"data":"","first_seen":"2023-03-07T13:02:45Z","last_seen":"2026-02-12T07:32:12.530746Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/38/11/intl/nl_ALL/util.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16b73dc0de9683fb153b38cf6b5a6e6d","sha1":"22261377b57577dcd8046a8970ef5c80aefdf5dc","sha256":"d9f2fabff1b5fdcf2833cdcca025f1ec73c4889c41410e8a018cb1a84bb6ac79","sha512":"1a7e0c0b5f44faf69fe8368b24ae68b95d0839a285785cf7b5a805837425da75e2b89e2f3d50624cc6eca540dde0bea983bed5c29581d2c3f1e11d74502bdf05","ssdeep":"3072:lfTnZQ5U/ay5v5b681Czm83dsFkP3T+jq:lfaMayV5b68EfNskP3T+jq","tlshash":"43e32aa8724270a98277f5f6053f104aa53e985af8054c7cb288d9e1ddf8c9d11bbf78","size":146194,"data":"","first_seen":"2023-03-07T13:02:45Z","last_seen":"2026-02-12T07:32:12.522809Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","fqdn":"upsservicecenter.com","domain":"upsservicecenter.com","tld":"com"},"ip":{"addr":"140.82.54.186","port":443,"asn":20473,"as":"AS-CHOOPA","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"bcc09075b1751dac2dd0df99783c78a3","sha1":"4d730f4032ac21b115905910d2853eb7249d563a","sha256":"96c875d292aaab9b960846cc196f292b70f8ee3c8e557470a95e9eccbb76b2bc","sha512":"12cbe195b1efe8c793d0b0d259f644f3ea03fe0e85e47ed849454cf2f02f6e59d8bd2d403e871c93e1ce145826b5dc588d23785a983d3afb232ac63227326ff1","ssdeep":"","tlshash":"2bf05976a1522830476635a96046468ee8b008200a1dd7d1c81c64f22c70b3df077b98","size":478,"data":"","first_seen":"2023-03-07T13:02:45Z","last_seen":"2024-11-07T10:09:02.591779Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"upsservicecenter.com/26c485cbb5b8f4543b102ff491bcd15a/?token=597a69d7db7b1ace116b56d1418136d882adec152c14054cf42e52f9b4016ffc6d27ed645701d6623460180b931ee87aa9a630ba54ef45b75180cf2983d936d3/","fqdn":"upsservicecenter.com","domain":"upsservicecenter.com","tld":"com"},"ip":{"addr":"140.82.54.186","port":443,"asn":20473,"as":"AS-CHOOPA","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-08-23T08:01:03.328Z","timestamp":1692777663328,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upsservicecenter.com","organization":""},"issuer":{"commonName":"cPanel, Inc. Certification Authority","organization":"cPanel, Inc."},"validity":{"start":"Tue, 22 Aug 2023 00:00:00 GMT","end":"Mon, 20 Nov 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:A5:8E:7A:CD:B5:BA:83:DD:F9:8C:92:ED:D8:AF:BF:69:E0:50:78","sha256":"25:AF:E4:A8:B3:29:DC:81:9A:C5:4D:F0:B6:12:81:4C:A0:80:F6:27:3C:AC:92:DE:60:51:99:0B:0E:64:20:8B"}}},"request":{"raw":"GET /26c485cbb5b8f4543b102ff491bcd15a/?token=597a69d7db7b1ace116b56d1418136d882adec152c14054cf42e52f9b4016ffc6d27ed645701d6623460180b931ee87aa9a630ba54ef45b75180cf2983d936d3/ HTTP/1.1\r\nHost: upsservicecenter.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Wed, 23 Aug 2023 08:01:11 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: PHPSESSID=5b7d206ac047b963cc60a59f6dbe6b15; path=/\r\nLocation: ../index.php\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T15:09:54.177617Z","times_seen":14693109,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":81,"dns":1,"connect":32,"send":0,"wait":57,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upsservicecenter.com/index.php","fqdn":"upsservicecenter.com","domain":"upsservicecenter.com","tld":"com"},"ip":{"addr":"140.82.54.186","port":443,"asn":20473,"as":"AS-CHOOPA","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-08-23T08:01:03.533Z","timestamp":1692777663533,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upsservicecenter.com","organization":""},"issuer":{"commonName":"cPanel, Inc. Certification Authority","organization":"cPanel, Inc."},"validity":{"start":"Tue, 22 Aug 2023 00:00:00 GMT","end":"Mon, 20 Nov 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:A5:8E:7A:CD:B5:BA:83:DD:F9:8C:92:ED:D8:AF:BF:69:E0:50:78","sha256":"25:AF:E4:A8:B3:29:DC:81:9A:C5:4D:F0:B6:12:81:4C:A0:80:F6:27:3C:AC:92:DE:60:51:99:0B:0E:64:20:8B"}}},"request":{"raw":"GET /index.php HTTP/1.1\r\nHost: upsservicecenter.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=5b7d206ac047b963cc60a59f6dbe6b15\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Wed, 23 Aug 2023 08:01:11 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nLocation: 5c5f5705228bd52beeae430b714ec8ee?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415\r\nContent-Length: 2\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"d784fa8b6d98d27699781bd9a7cf19f0","sha1":"dd122581c8cd44d0227f9c305581ffcb4b6f1b46","sha256":"e16f1596201850fd4a63680b27f603cb64e67176159be3d8ed78a4403fdb1700","sha512":"f8aca02e28996a586f535eed5de9f4533b8b2910762f524459f6fae6fb3f8f7540db5f2c809c1c07167a95b33f6f3f85589af99182e2d2bf93f964de169dd4c0","ssdeep":"","tlshash":"c710000000000000000000300000000000000000000000000000003000000000000000","first_seen":"2023-03-07T01:32:15Z","last_seen":"2026-05-05T05:28:50.884979Z","times_seen":2463,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - US Postal Service","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with US Postal Service phishing","tags":["usps","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","fqdn":"upsservicecenter.com","domain":"upsservicecenter.com","tld":"com"},"ip":{"addr":"140.82.54.186","port":443,"asn":20473,"as":"AS-CHOOPA","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-08-23T08:01:03.717Z","timestamp":1692777663717,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upsservicecenter.com","organization":""},"issuer":{"commonName":"cPanel, Inc. Certification Authority","organization":"cPanel, Inc."},"validity":{"start":"Tue, 22 Aug 2023 00:00:00 GMT","end":"Mon, 20 Nov 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:A5:8E:7A:CD:B5:BA:83:DD:F9:8C:92:ED:D8:AF:BF:69:E0:50:78","sha256":"25:AF:E4:A8:B3:29:DC:81:9A:C5:4D:F0:B6:12:81:4C:A0:80:F6:27:3C:AC:92:DE:60:51:99:0B:0E:64:20:8B"}}},"request":{"raw":"GET /5c5f5705228bd52beeae430b714ec8ee?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415 HTTP/1.1\r\nHost: upsservicecenter.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=5b7d206ac047b963cc60a59f6dbe6b15\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Wed, 23 Aug 2023 08:01:11 GMT\r\nServer: Apache\r\nLocation: https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415\r\nContent-Length: 405\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":405,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text","md5":"4ad99e81fcb0f65deab0bf7f214f76ac","sha1":"bdc1da155d1f52814d10391ca5b85eb3b0a88770","sha256":"af55747853cc37fc27e326fdedb31cd94f3674aa88294fe99fca6d35a8a5fd3c","sha512":"5cbfc52d9e0303da42cb32e2f054fc83d04852c4fad1bfedeae1f63a87d0c2042649f9ca897a8a95603c0ad87173080eca7df2d2ca32ef9d538c7b606609354c","ssdeep":"","tlshash":"b4e0f1fc4ac5019074c73b88e9c220a4908b14a94b9794ee05ee394b811ad3ac85e0cc","first_seen":"2023-08-23T10:01:29Z","last_seen":"2023-08-23T10:01:29Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","fqdn":"upsservicecenter.com","domain":"upsservicecenter.com","tld":"com"},"ip":{"addr":"140.82.54.186","port":443,"asn":20473,"as":"AS-CHOOPA","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-08-23T08:01:03.793Z","timestamp":1692777663793,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upsservicecenter.com","organization":""},"issuer":{"commonName":"cPanel, Inc. Certification Authority","organization":"cPanel, Inc."},"validity":{"start":"Tue, 22 Aug 2023 00:00:00 GMT","end":"Mon, 20 Nov 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:A5:8E:7A:CD:B5:BA:83:DD:F9:8C:92:ED:D8:AF:BF:69:E0:50:78","sha256":"25:AF:E4:A8:B3:29:DC:81:9A:C5:4D:F0:B6:12:81:4C:A0:80:F6:27:3C:AC:92:DE:60:51:99:0B:0E:64:20:8B"}}},"request":{"raw":"GET /5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415 HTTP/1.1\r\nHost: upsservicecenter.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=5b7d206ac047b963cc60a59f6dbe6b15\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 23 Aug 2023 08:01:11 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11960,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- assembler source, Unicode text, UTF-8 text, with very long lines (420)","md5":"d3621d7b94c53c279f639ce52cc60b10","sha1":"1b2da482afa7fd7a369150aacd42163d46730534","sha256":"48d8893e10131f021d14d0e89abad315c69a64891d08d2cea063f3641d80cf0c","sha512":"d7182797f7633e7d0990fa938da9f17058246ffac2a5a8b16fdb300a7df3fe031939ab1fe85c06fed30947b1d5abd371d5db50f3b1474fb9eec8e1e4961faa27","ssdeep":"96:GquG1GJoC1VW6tdSIDEepFZoC4kmy1WfD4h9HDunhhQY1ABfRnhTIyW8P8PetxDq:GjU67S+EeoMKD4hMhhQCyjG80V","tlshash":"9032869384f54d7a026299b63eebb64e9fa05457c50a2d8074ac33c82fd7e51cd8336e","first_seen":"2023-08-23T10:01:29Z","last_seen":"2023-08-23T10:01:29Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upsservicecenter.com/content/marktplaats/client.min.css","fqdn":"upsservicecenter.com","domain":"upsservicecenter.com","tld":"com"},"ip":{"addr":"140.82.54.186","port":443,"asn":20473,"as":"AS-CHOOPA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","date":"2023-08-23T08:01:04.276Z","timestamp":1692777664276,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upsservicecenter.com","organization":""},"issuer":{"commonName":"cPanel, Inc. Certification Authority","organization":"cPanel, Inc."},"validity":{"start":"Tue, 22 Aug 2023 00:00:00 GMT","end":"Mon, 20 Nov 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:A5:8E:7A:CD:B5:BA:83:DD:F9:8C:92:ED:D8:AF:BF:69:E0:50:78","sha256":"25:AF:E4:A8:B3:29:DC:81:9A:C5:4D:F0:B6:12:81:4C:A0:80:F6:27:3C:AC:92:DE:60:51:99:0B:0E:64:20:8B"}}},"request":{"raw":"GET /content/marktplaats/client.min.css HTTP/1.1\r\nHost: upsservicecenter.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415\r\nCookie: PHPSESSID=5b7d206ac047b963cc60a59f6dbe6b15\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 23 Aug 2023 08:01:12 GMT\r\nServer: Apache\r\nContent-Length: 315\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-05-05T13:24:01.699292Z","times_seen":145058,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - US Postal Service","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with US Postal Service phishing","tags":["usps","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"upsservicecenter.com/content/marktplaats/normalize.112272e5.css","fqdn":"upsservicecenter.com","domain":"upsservicecenter.com","tld":"com"},"ip":{"addr":"140.82.54.186","port":443,"asn":20473,"as":"AS-CHOOPA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","date":"2023-08-23T08:01:04.281Z","timestamp":1692777664281,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upsservicecenter.com","organization":""},"issuer":{"commonName":"cPanel, Inc. Certification Authority","organization":"cPanel, Inc."},"validity":{"start":"Tue, 22 Aug 2023 00:00:00 GMT","end":"Mon, 20 Nov 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:A5:8E:7A:CD:B5:BA:83:DD:F9:8C:92:ED:D8:AF:BF:69:E0:50:78","sha256":"25:AF:E4:A8:B3:29:DC:81:9A:C5:4D:F0:B6:12:81:4C:A0:80:F6:27:3C:AC:92:DE:60:51:99:0B:0E:64:20:8B"}}},"request":{"raw":"GET /content/marktplaats/normalize.112272e5.css HTTP/1.1\r\nHost: upsservicecenter.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415\r\nCookie: PHPSESSID=5b7d206ac047b963cc60a59f6dbe6b15\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 23 Aug 2023 08:01:12 GMT\r\nServer: Apache\r\nContent-Length: 315\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-05-05T13:24:01.699292Z","times_seen":145058,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - US Postal Service","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with US Postal Service phishing","tags":["usps","logistics","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-08-23T08:01:04.430278464Z","timestamp":1692777664430,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Wed, 23 Aug 2023 08:01:12 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"74eed3f5ba40ed8254fd560147072a3c","sha1":"7e8836b3b7b3bdd43fc16c13f520912d9588901f","sha256":"6c961d618eadd1e94ff53dd884d9c65078a8c7116c02a567c3b24d6ca81ad271","sha512":"2ac414c44026028de3d740be9d6726090e89dbe43eb548f15ac2a5128b31c51f7cafbb6e53b2f8cd03de4cd09419f7dab3861dd965c2a78bad5c76b39a9edd6f","ssdeep":"","tlshash":"25f054151c749911d21bdb3522eec506ae807c0c181c03c324ec96c0c3863ebf115551","first_seen":"2023-08-22T16:39:08Z","last_seen":"2023-08-23T22:21:59Z","times_seen":969,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-08-23T08:01:04.434494154Z","timestamp":1692777664434,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Wed, 23 Aug 2023 08:01:12 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"74eed3f5ba40ed8254fd560147072a3c","sha1":"7e8836b3b7b3bdd43fc16c13f520912d9588901f","sha256":"6c961d618eadd1e94ff53dd884d9c65078a8c7116c02a567c3b24d6ca81ad271","sha512":"2ac414c44026028de3d740be9d6726090e89dbe43eb548f15ac2a5128b31c51f7cafbb6e53b2f8cd03de4cd09419f7dab3861dd965c2a78bad5c76b39a9edd6f","ssdeep":"","tlshash":"25f054151c749911d21bdb3522eec506ae807c0c181c03c324ec96c0c3863ebf115551","first_seen":"2023-08-22T16:39:08Z","last_seen":"2023-08-23T22:21:59Z","times_seen":969,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/38/11/intl/nl_ALL/util.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","date":"2023-08-23T08:01:04.284Z","timestamp":1692777664284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 31 Jul 2023 08:22:19 GMT","end":"Mon, 23 Oct 2023 08:22:18 GMT"},"fingerprint":{"sha1":"2A:06:F9:5A:FD:FC:89:5C:D7:C5:CC:38:F0:25:78:FB:15:9F:5A:67","sha256":"B5:6E:61:9A:99:BF:5A:AB:FB:51:B3:9E:2C:B4:09:09:0F:85:51:48:71:37:BA:3A:7B:5C:71:53:34:80:97:58"}}},"request":{"raw":"GET /maps-api-v3/api/js/38/11/intl/nl_ALL/util.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upsservicecenter.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ncontent-length: 53998\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 23 Aug 2023 02:00:00 GMT\r\nexpires: Thu, 22 Aug 2024 02:00:00 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 04 Nov 2019 22:32:04 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 21672\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53998,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3412)","md5":"16b73dc0de9683fb153b38cf6b5a6e6d","sha1":"22261377b57577dcd8046a8970ef5c80aefdf5dc","sha256":"d9f2fabff1b5fdcf2833cdcca025f1ec73c4889c41410e8a018cb1a84bb6ac79","sha512":"1a7e0c0b5f44faf69fe8368b24ae68b95d0839a285785cf7b5a805837425da75e2b89e2f3d50624cc6eca540dde0bea983bed5c29581d2c3f1e11d74502bdf05","ssdeep":"3072:lfTnZQ5U/ay5v5b681Czm83dsFkP3T+jq:lfaMayV5b68EfNskP3T+jq","tlshash":"43e32aa8724270a98277f5f6053f104aa53e985af8054c7cb288d9e1ddf8c9d11bbf78","first_seen":"2023-03-07T13:02:45Z","last_seen":"2026-02-12T07:32:12.522809Z","times_seen":53,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":149,"dns":1,"connect":8,"send":0,"wait":10,"receive":19,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.googleapis.com/maps-api-v3/api/js/38/11/intl/nl_ALL/common.js","fqdn":"maps.googleapis.com","domain":"maps.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","date":"2023-08-23T08:01:04.282Z","timestamp":1692777664282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 31 Jul 2023 08:22:19 GMT","end":"Mon, 23 Oct 2023 08:22:18 GMT"},"fingerprint":{"sha1":"2A:06:F9:5A:FD:FC:89:5C:D7:C5:CC:38:F0:25:78:FB:15:9F:5A:67","sha256":"B5:6E:61:9A:99:BF:5A:AB:FB:51:B3:9E:2C:B4:09:09:0F:85:51:48:71:37:BA:3A:7B:5C:71:53:34:80:97:58"}}},"request":{"raw":"GET /maps-api-v3/api/js/38/11/intl/nl_ALL/common.js HTTP/1.1\r\nHost: maps.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upsservicecenter.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"maps-api-js\"\r\nreport-to: {\"group\":\"maps-api-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/maps-api-js\"}]}\r\ncontent-length: 28568\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 23 Aug 2023 02:00:00 GMT\r\nexpires: Thu, 22 Aug 2024 02:00:00 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 04 Nov 2019 22:32:04 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 21672\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28568,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1601)","md5":"2005cff13e09393e76f625c7c3e6d0b7","sha1":"47d240c168d611f38c102cf2b6320ea582e69e46","sha256":"50c76b6340f567a536017cdf52bef65fdbbec4d637253e823543059ac68c2fd1","sha512":"b7122caa3f4501f20c507addf63dc80c49f42dc7f3e28180db2a495d8b931ee2acd55517cd7a856402e2330975070a16c5cc49b5e36e1e5b57d58f6d31db5032","ssdeep":"1536:Nj2K0IVivAXiR1TtgigxMPZe0N+A//hMOhWv5iZqkQzV39NEkle8h:DVGAXmWiwo+A//hMOh85QqkQl9N95h","tlshash":"2273c59d725275a69317f0b9123f000ab13a64adf4484dacb24cd9e29ef585d02bbf7c","first_seen":"2023-03-07T13:02:45Z","last_seen":"2026-02-12T07:32:12.530746Z","times_seen":53,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":153,"dns":2,"connect":8,"send":0,"wait":27,"receive":1,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-08-23T08:01:04.558766505Z","timestamp":1692777664558,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Wed, 23 Aug 2023 08:01:12 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"74eed3f5ba40ed8254fd560147072a3c","sha1":"7e8836b3b7b3bdd43fc16c13f520912d9588901f","sha256":"6c961d618eadd1e94ff53dd884d9c65078a8c7116c02a567c3b24d6ca81ad271","sha512":"2ac414c44026028de3d740be9d6726090e89dbe43eb548f15ac2a5128b31c51f7cafbb6e53b2f8cd03de4cd09419f7dab3861dd965c2a78bad5c76b39a9edd6f","ssdeep":"","tlshash":"25f054151c749911d21bdb3522eec506ae807c0c181c03c324ec96c0c3863ebf115551","first_seen":"2023-08-22T16:39:08Z","last_seen":"2023-08-23T22:21:59Z","times_seen":969,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.sectigo.com/","fqdn":"ocsp.sectigo.com","domain":"sectigo.com","tld":"com"},"ip":{"addr":"104.18.15.101","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-08-23T08:01:04.667421746Z","timestamp":1692777664667,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ocsp.sectigo.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 23 Aug 2023 08:01:12 GMT\r\nContent-Type: application/ocsp-response\r\nContent-Length: 472\r\nConnection: keep-alive\r\nLast-Modified: Sat, 19 Aug 2023 17:43:14 GMT\r\nExpires: Sat, 26 Aug 2023 17:43:13 GMT\r\nEtag: \"6f64877f90c1f593e385f49cefe7985ce426b0a9\"\r\nCache-Control: max-age=293520,s-maxage=1800,public,no-transform,must-revalidate\r\nX-CCACDN-Proxy-ID: mcdpinlb2\r\nX-Frame-Options: SAMEORIGIN\r\nCF-Cache-Status: DYNAMIC\r\nServer: cloudflare\r\nCF-RAY: 7fb1d384abbbb50c-OSL\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"0a17b75790acda4c0d04e6505993c606","sha1":"6f64877f90c1f593e385f49cefe7985ce426b0a9","sha256":"2d5cc5f48b01cc890fe02b518697b01705983ebd9d89961b2e9dcdbe770cee49","sha512":"e15b9e4f157e57aeec3df7b1e45b3c2870822db566b2eed027ac7d7b84d7a5b4aa5d05ea6244492768709fb7c438116833ab4a1d7a984aac3dca7be82ee6f713","ssdeep":"","tlshash":"3ef05416fd351f16bc0ddf0815765d563ec3b2541850189da44924c986303b6603c83a","first_seen":"2023-08-23T02:38:44Z","last_seen":"2023-08-23T10:01:29Z","times_seen":13,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"devilsms.live/css/usps/main.css","fqdn":"devilsms.live","domain":"devilsms.live","tld":"live"},"ip":{"addr":"199.188.200.254","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","date":"2023-08-23T08:01:04.273Z","timestamp":1692777664273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"devilsms.live","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 18 Aug 2022 00:00:00 GMT","end":"Sat, 16 Sep 2023 23:59:59 GMT"},"fingerprint":{"sha1":"72:C0:D3:B1:19:FB:CD:8A:B3:B2:6D:62:78:A9:37:61:9F:B9:AA:6C","sha256":"1C:4F:35:01:63:27:0B:C4:90:DF:FC:74:3F:CE:95:CD:34:A3:1F:11:29:AC:0B:26:23:33:27:CD:B6:9C:50:43"}}},"request":{"raw":"GET /css/usps/main.css HTTP/1.1\r\nHost: devilsms.live\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upsservicecenter.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 30 Aug 2023 08:01:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 Oct 2021 03:52:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30024\r\ndate: Wed, 23 Aug 2023 08:01:12 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30024,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (348), with CRLF line terminators","md5":"36277e4fba035d5002b28b28b3656109","sha1":"244ec24c6b302f36a3a174fc3bf225c3b906603b","sha256":"877c9ecef0ce6e991b965a744c396fb8f8f3968aefa053c966b1a8e806d77c5a","sha512":"1f0a89dffad97d31df67b66b2a79ae776ce03350de44c5c6219913010ca5e48067f8093c4d126031c9bf31289f1cdf9195daf335d8d9b2c59e72518d1e264350","ssdeep":"1536:88OAvNEBXUZ2CZUs2DUV2HOOPrT0qU+d2DPSKSg93zOMwFfIxqNM9wQSDU12Wxr:UOOPrT0sgPlPxqNMuQSY","tlshash":"8134c921d981958e72378c159bb01d44ea7c0047da821abcbf5cb7798fb7d858a62fcc","first_seen":"2023-04-12T09:17:26Z","last_seen":"2023-09-16T07:19:08Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1189,"timings":{"blocked":397,"dns":1,"connect":171,"send":0,"wait":339,"receive":42,"ssl":237},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - US Postal Service","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with US Postal Service phishing","tags":["usps","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/images/logo-mini-sb.png","fqdn":"upsservicecenter.com","domain":"upsservicecenter.com","tld":"com"},"ip":{"addr":"140.82.54.186","port":443,"asn":20473,"as":"AS-CHOOPA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","date":"2023-08-23T08:01:04.285Z","timestamp":1692777664285,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upsservicecenter.com","organization":""},"issuer":{"commonName":"cPanel, Inc. Certification Authority","organization":"cPanel, Inc."},"validity":{"start":"Tue, 22 Aug 2023 00:00:00 GMT","end":"Mon, 20 Nov 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:A5:8E:7A:CD:B5:BA:83:DD:F9:8C:92:ED:D8:AF:BF:69:E0:50:78","sha256":"25:AF:E4:A8:B3:29:DC:81:9A:C5:4D:F0:B6:12:81:4C:A0:80:F6:27:3C:AC:92:DE:60:51:99:0B:0E:64:20:8B"}}},"request":{"raw":"GET /5c5f5705228bd52beeae430b714ec8ee/images/logo-mini-sb.png HTTP/1.1\r\nHost: upsservicecenter.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415\r\nCookie: PHPSESSID=5b7d206ac047b963cc60a59f6dbe6b15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 23 Aug 2023 08:01:12 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 23 Aug 2023 08:01:11 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 23625\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23625,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 135 x 16, 8-bit/color RGBA, non-interlaced\\012- data","md5":"43707dd65a8c8ec7754b7b45fd483488","sha1":"f258a5de57dfa37baf13296da6055e8f8881d742","sha256":"585262db6911000f59795831f9db7bb41477bcafb135c82b51b0473363134fcf","sha512":"4f821dbcb766cfca452c7a1350e36231fbf82d2d62426e7309e56595813138aaec56daa0c28274a73972977e6d2026aba1ba8866cbdace5c6f5ac276e5664921","ssdeep":"","tlshash":"","first_seen":"2023-05-01T22:22:00Z","last_seen":"2025-10-30T01:12:08.805508Z","times_seen":84,"resource_available":false,"data":null}},"time_used":852,"timings":{"blocked":767,"dns":0,"connect":0,"send":0,"wait":40,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - US Postal Service","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with US Postal Service phishing","tags":["usps","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"devilsms.live/css/usps/Roboto-Regular-webfont.woff2","fqdn":"devilsms.live","domain":"devilsms.live","tld":"live"},"ip":{"addr":"199.188.200.254","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","date":"2023-08-23T08:01:05.114Z","timestamp":1692777665114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"devilsms.live","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 18 Aug 2022 00:00:00 GMT","end":"Sat, 16 Sep 2023 23:59:59 GMT"},"fingerprint":{"sha1":"72:C0:D3:B1:19:FB:CD:8A:B3:B2:6D:62:78:A9:37:61:9F:B9:AA:6C","sha256":"1C:4F:35:01:63:27:0B:C4:90:DF:FC:74:3F:CE:95:CD:34:A3:1F:11:29:AC:0B:26:23:33:27:CD:B6:9C:50:43"}}},"request":{"raw":"GET /css/usps/Roboto-Regular-webfont.woff2 HTTP/1.1\r\nHost: devilsms.live\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upsservicecenter.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://devilsms.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 23 Aug 2023 08:01:13 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-05-05T10:58:14.797043Z","times_seen":40510,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - US Postal Service","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with US Postal Service phishing","tags":["usps","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"devilsms.live/css/usps/Roboto-Light-webfont.woff2","fqdn":"devilsms.live","domain":"devilsms.live","tld":"live"},"ip":{"addr":"199.188.200.254","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","date":"2023-08-23T08:01:05.116Z","timestamp":1692777665116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"devilsms.live","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 18 Aug 2022 00:00:00 GMT","end":"Sat, 16 Sep 2023 23:59:59 GMT"},"fingerprint":{"sha1":"72:C0:D3:B1:19:FB:CD:8A:B3:B2:6D:62:78:A9:37:61:9F:B9:AA:6C","sha256":"1C:4F:35:01:63:27:0B:C4:90:DF:FC:74:3F:CE:95:CD:34:A3:1F:11:29:AC:0B:26:23:33:27:CD:B6:9C:50:43"}}},"request":{"raw":"GET /css/usps/Roboto-Light-webfont.woff2 HTTP/1.1\r\nHost: devilsms.live\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upsservicecenter.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://devilsms.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 23 Aug 2023 08:01:13 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-05-05T10:58:14.797043Z","times_seen":40510,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - US Postal Service","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with US Postal Service phishing","tags":["usps","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"devilsms.live/css/usps/Marktplaats.Sprite.svg","fqdn":"devilsms.live","domain":"devilsms.live","tld":"live"},"ip":{"addr":"199.188.200.254","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","date":"2023-08-23T08:01:05.103Z","timestamp":1692777665103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"devilsms.live","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 18 Aug 2022 00:00:00 GMT","end":"Sat, 16 Sep 2023 23:59:59 GMT"},"fingerprint":{"sha1":"72:C0:D3:B1:19:FB:CD:8A:B3:B2:6D:62:78:A9:37:61:9F:B9:AA:6C","sha256":"1C:4F:35:01:63:27:0B:C4:90:DF:FC:74:3F:CE:95:CD:34:A3:1F:11:29:AC:0B:26:23:33:27:CD:B6:9C:50:43"}}},"request":{"raw":"GET /css/usps/Marktplaats.Sprite.svg HTTP/1.1\r\nHost: devilsms.live\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://devilsms.live/css/usps/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 23 Aug 2023 08:01:13 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-05-05T10:58:14.797043Z","times_seen":40510,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - US Postal Service","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with US Postal Service phishing","tags":["usps","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"devilsms.live/css/usps/Roboto-Light-webfont.woff","fqdn":"devilsms.live","domain":"devilsms.live","tld":"live"},"ip":{"addr":"199.188.200.254","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","date":"2023-08-23T08:01:05.300Z","timestamp":1692777665300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"devilsms.live","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 18 Aug 2022 00:00:00 GMT","end":"Sat, 16 Sep 2023 23:59:59 GMT"},"fingerprint":{"sha1":"72:C0:D3:B1:19:FB:CD:8A:B3:B2:6D:62:78:A9:37:61:9F:B9:AA:6C","sha256":"1C:4F:35:01:63:27:0B:C4:90:DF:FC:74:3F:CE:95:CD:34:A3:1F:11:29:AC:0B:26:23:33:27:CD:B6:9C:50:43"}}},"request":{"raw":"GET /css/usps/Roboto-Light-webfont.woff HTTP/1.1\r\nHost: devilsms.live\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upsservicecenter.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://devilsms.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 23 Aug 2023 08:01:13 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-05-05T10:58:14.797043Z","times_seen":40510,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - US Postal Service","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with US Postal Service phishing","tags":["usps","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"devilsms.live/css/usps/Roboto-Regular-webfont.woff","fqdn":"devilsms.live","domain":"devilsms.live","tld":"live"},"ip":{"addr":"199.188.200.254","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","date":"2023-08-23T08:01:05.299Z","timestamp":1692777665299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"devilsms.live","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 18 Aug 2022 00:00:00 GMT","end":"Sat, 16 Sep 2023 23:59:59 GMT"},"fingerprint":{"sha1":"72:C0:D3:B1:19:FB:CD:8A:B3:B2:6D:62:78:A9:37:61:9F:B9:AA:6C","sha256":"1C:4F:35:01:63:27:0B:C4:90:DF:FC:74:3F:CE:95:CD:34:A3:1F:11:29:AC:0B:26:23:33:27:CD:B6:9C:50:43"}}},"request":{"raw":"GET /css/usps/Roboto-Regular-webfont.woff HTTP/1.1\r\nHost: devilsms.live\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upsservicecenter.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://devilsms.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 23 Aug 2023 08:01:13 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-05-05T10:58:14.797043Z","times_seen":40510,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - US Postal Service","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with US Postal Service phishing","tags":["usps","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"devilsms.live/css/usps/Roboto-Light-webfont.ttf?v1","fqdn":"devilsms.live","domain":"devilsms.live","tld":"live"},"ip":{"addr":"199.188.200.254","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","date":"2023-08-23T08:01:05.482Z","timestamp":1692777665482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"devilsms.live","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 18 Aug 2022 00:00:00 GMT","end":"Sat, 16 Sep 2023 23:59:59 GMT"},"fingerprint":{"sha1":"72:C0:D3:B1:19:FB:CD:8A:B3:B2:6D:62:78:A9:37:61:9F:B9:AA:6C","sha256":"1C:4F:35:01:63:27:0B:C4:90:DF:FC:74:3F:CE:95:CD:34:A3:1F:11:29:AC:0B:26:23:33:27:CD:B6:9C:50:43"}}},"request":{"raw":"GET /css/usps/Roboto-Light-webfont.ttf?v1 HTTP/1.1\r\nHost: devilsms.live\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://upsservicecenter.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://devilsms.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 23 Aug 2023 08:01:13 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-05-05T10:58:14.797043Z","times_seen":40510,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - US Postal Service","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with US Postal Service phishing","tags":["usps","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"devilsms.live/css/usps/Roboto-Regular-webfont.ttf?v1","fqdn":"devilsms.live","domain":"devilsms.live","tld":"live"},"ip":{"addr":"199.188.200.254","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","date":"2023-08-23T08:01:05.484Z","timestamp":1692777665484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"devilsms.live","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 18 Aug 2022 00:00:00 GMT","end":"Sat, 16 Sep 2023 23:59:59 GMT"},"fingerprint":{"sha1":"72:C0:D3:B1:19:FB:CD:8A:B3:B2:6D:62:78:A9:37:61:9F:B9:AA:6C","sha256":"1C:4F:35:01:63:27:0B:C4:90:DF:FC:74:3F:CE:95:CD:34:A3:1F:11:29:AC:0B:26:23:33:27:CD:B6:9C:50:43"}}},"request":{"raw":"GET /css/usps/Roboto-Regular-webfont.ttf?v1 HTTP/1.1\r\nHost: devilsms.live\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://upsservicecenter.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://devilsms.live/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Wed, 23 Aug 2023 08:01:13 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-05-05T10:58:14.797043Z","times_seen":40510,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - US Postal Service","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with US Postal Service phishing","tags":["usps","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"upsservicecenter.com/content/marktplaats/favicon-192x192.png","fqdn":"upsservicecenter.com","domain":"upsservicecenter.com","tld":"com"},"ip":{"addr":"140.82.54.186","port":443,"asn":20473,"as":"AS-CHOOPA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","date":"2023-08-23T08:01:05.660Z","timestamp":1692777665660,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upsservicecenter.com","organization":""},"issuer":{"commonName":"cPanel, Inc. Certification Authority","organization":"cPanel, Inc."},"validity":{"start":"Tue, 22 Aug 2023 00:00:00 GMT","end":"Mon, 20 Nov 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:A5:8E:7A:CD:B5:BA:83:DD:F9:8C:92:ED:D8:AF:BF:69:E0:50:78","sha256":"25:AF:E4:A8:B3:29:DC:81:9A:C5:4D:F0:B6:12:81:4C:A0:80:F6:27:3C:AC:92:DE:60:51:99:0B:0E:64:20:8B"}}},"request":{"raw":"GET /content/marktplaats/favicon-192x192.png HTTP/1.1\r\nHost: upsservicecenter.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415\r\nCookie: PHPSESSID=5b7d206ac047b963cc60a59f6dbe6b15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 23 Aug 2023 08:01:13 GMT\r\nServer: Apache\r\nContent-Length: 315\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-05-05T13:24:01.699292Z","times_seen":145058,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - US Postal Service","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with US Postal Service phishing","tags":["usps","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"upsservicecenter.com/content/marktplaats/favicon.ico","fqdn":"upsservicecenter.com","domain":"upsservicecenter.com","tld":"com"},"ip":{"addr":"140.82.54.186","port":443,"asn":20473,"as":"AS-CHOOPA","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415","date":"2023-08-23T08:01:05.662Z","timestamp":1692777665662,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upsservicecenter.com","organization":""},"issuer":{"commonName":"cPanel, Inc. Certification Authority","organization":"cPanel, Inc."},"validity":{"start":"Tue, 22 Aug 2023 00:00:00 GMT","end":"Mon, 20 Nov 2023 23:59:59 GMT"},"fingerprint":{"sha1":"EE:A5:8E:7A:CD:B5:BA:83:DD:F9:8C:92:ED:D8:AF:BF:69:E0:50:78","sha256":"25:AF:E4:A8:B3:29:DC:81:9A:C5:4D:F0:B6:12:81:4C:A0:80:F6:27:3C:AC:92:DE:60:51:99:0B:0E:64:20:8B"}}},"request":{"raw":"GET /content/marktplaats/favicon.ico HTTP/1.1\r\nHost: upsservicecenter.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upsservicecenter.com/5c5f5705228bd52beeae430b714ec8ee/?token=95abaf3b06e0c73eeb55335058a2eeef66083109c139f3d8b6d21b9aaacd7cb5d2190eff2127da8d8faf27c8f8cda3f392afc114f7cfc443f4a6dbbb3ac78415\r\nCookie: PHPSESSID=5b7d206ac047b963cc60a59f6dbe6b15\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 23 Aug 2023 08:01:13 GMT\r\nServer: Apache\r\nContent-Length: 315\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-05-05T13:24:01.699292Z","times_seen":145058,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - US Postal Service","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with US Postal Service phishing","tags":["usps","logistics","phishing"],"meta":null}]}}]}