107.150.7.113200 OK 78 B URL User Request GET HTTP/2 IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document, ASCII text, with no line terminators
Hash bef46d3bb712d23036be3aa8ebfba884
41c025e409ff2150939375dca4a336a997c9f778
1f40abcbcb4dedbc58e0bf815935a87e2d10ef2c2ec65cd347a64ae96402a4b9
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET / HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:33 GMT
content-type: text/html
content-length: 78
last-modified: Mon, 13 Nov 2023 13:52:50 GMT
etag: "65522a32-4e"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/us.js
107.150.7.113200 OK 82 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/us.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type gzip compressed data, from Unix
- data
Hash 1677a6a4e87ff7fc145e8521749020e9
5807ab6e4fedbec1a6e8dacdea7cce1a5d90f4c6
9525be342e8225c723e4c27977b2d385d2017c5b91965084f00deffea6281b33
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/us.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:34 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:58:46 GMT
vary: Accept-Encoding
etag: W/"65522b96-43f"
expires: Sun, 10 Dec 2023 15:20:34 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/ResourceConfig/urlConfig.json
107.150.7.113200 OK 229 B URL GET HTTP/2 upostvtgvoiuya.xyz/ResourceConfig/urlConfig.json
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type ASCII text, with CRLF line terminators
Hash ee4b049807f7c4a7e36c914570311414
e839496561489e5f184407567909f7f73ab28ba3
029a631f057385ecfd203ab7a1a9eec869ae30922c5d586c0bd68f9974850ba8
Analyzer Verdict Alert OpenPhish phishing United States Postal Service
GET /ResourceConfig/urlConfig.json HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:34 GMT
content-type: application/json
content-length: 229
last-modified: Mon, 13 Nov 2023 14:15:17 GMT
etag: "65522f75-e5"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/favicon.ico
107.150.7.113404 Not Found 146 B URL GET HTTP/2 upostvtgvoiuya.xyz/favicon.ico
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /favicon.ico HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 10 Dec 2023 03:20:34 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
api.4fia9oweu9fvgirj.xyz/websocket/69e624c03ed7a08323747263761bc04d
107.150.7.113 0 B URL api.4fia9oweu9fvgirj.xyz/websocket/69e624c03ed7a08323747263761bc04d
IP 107.150.7.113:0
ASN #8100 ASN-QUADRANET-GLOBAL
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /websocket/69e624c03ed7a08323747263761bc04d HTTP/1.1
Host: api.4fia9oweu9fvgirj.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://upostvtgvoiuya.xyz
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fwL1ahTUdiQ6RtRsJujGJQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101
Server: nginx
Date: Sun, 10 Dec 2023 03:20:36 GMT
Connection: upgrade
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Max-Age: 3600
Access-Control-Allow-Headers: *
Upgrade: websocket
Sec-WebSocket-Accept: 1ZHJedh+8sQSDktyCpfckJqP5gw=
Sec-WebSocket-Extensions: permessage-deflate
upostvtgvoiuya.xyz/__imp_apg__/js/sed-usps-70fc8edc-qa.js
107.150.7.113404 Not Found 146 B URL GET HTTP/2 upostvtgvoiuya.xyz/__imp_apg__/js/sed-usps-70fc8edc-qa.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /__imp_apg__/js/sed-usps-70fc8edc-qa.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
fast.fonts.net/t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0
104.16.250.67200 OK 0 B URL GET HTTP/2 fast.fonts.net/t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0
IP 104.16.250.67:443
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB9:2B:82:F1:50:51:EA:B4:39:81:75:2F:6E:8B:8B:94:55:81:C3:47
ValidityFri, 05 May 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0 HTTP/1.1
Host: fast.fonts.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Dec 2023 03:20:38 GMT
content-type: text/css; charset=utf-8
content-length: 0
x-amz-id-2: ki65sQC1HlYAvAwzpIlg68BKJDoZiZ/BwbN/hDH5RUfm7vMSBZqfat1D29ePjiEs20YJy+049dY=
x-amz-request-id: 4MWDSXH8MPCQQMJM
last-modified: Tue, 23 Mar 2021 12:59:23 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
cache-control: public, max-age=0, s-maxage=604800
x-amz-meta-mtime: 1519217722
x-amz-version-id: null
cf-cache-status: HIT
age: 253152
accept-ranges: bytes
set-cookie: __cf_bm=8pxzWyUVwMqxi2ZhK5s.FFxFZmAuMxWGwdMqzAgdq_8-1702178438-1-ARScqRweBnhNfDcrzjDr+sGhpIHflHk+SbiM2HwtHv/ILdoFoFxzup3jU+OI3aAI3oXYDWk1dOKNj9L0u7TG390=; path=/; expires=Sun, 10-Dec-23 03:50:38 GMT; domain=.fonts.net; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 83325a6699df712a-OSL
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/config/urlConfig.json
107.150.7.113404 Not Found 146 B URL GET HTTP/2 upostvtgvoiuya.xyz/config/urlConfig.json
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /config/urlConfig.json HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/logo-sb.svg
107.150.7.113200 OK 3.6 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/logo-sb.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text, with CRLF line terminators
Hash 0418f7120dc6cdd1d7aa0f8219ec9af2
3bb6c6edee3cc1c072117795611e2f67383cdc44
4b5aaf0dc8f59e71849219fae0a225aeb3914bebcc363753f22b5713627b0094
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/logo-sb.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/svg+xml
content-length: 3557
last-modified: Mon, 13 Nov 2023 13:53:05 GMT
etag: "65522a41-de5"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/jquery-ui.js
107.150.7.113200 OK 1.2 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/jquery-ui.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type gzip compressed data, from Unix
- data
Hash 374a4a797e3edfc05d1d7b54bf158417
78168ce3bdf89c05acca137d091b03faf4e4641f
480bd8f00d066288b07c15812a99db84a2f3f7c8ef94bdb843d2ae015df003c2
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/jquery-ui.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:34 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:53:24 GMT
vary: Accept-Encoding
etag: W/"65522a54-59f"
expires: Sun, 10 Dec 2023 15:20:34 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/logo_mobile.svg
107.150.7.113200 OK 2.1 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/logo_mobile.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text, with CRLF line terminators
Hash f8ad388b3e39b860c97de0029ae98a21
9b032ef4ef4100dda1ba44be4836e6956b11387c
9685d6241f41ac71741d0ee9b242779f640cd3b1e64bb9bbcfb8798c5be503b2
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/logo_mobile.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/svg+xml
content-length: 2060
last-modified: Mon, 13 Nov 2023 13:53:06 GMT
etag: "65522a42-80c"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/search.svg
107.150.7.113200 OK 1.5 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/search.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text, with CRLF line terminators
Hash ace472e478185d5f5ecd18c7d821eff7
c4c97892e41d3dd838912c42fd7a7b212f671d1b
c8b13b10e28b6b420151db578831a416b7c1805d7672eeb57e69dc697fda1e27
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/search.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/svg+xml
content-length: 1465
last-modified: Mon, 13 Nov 2023 13:53:09 GMT
etag: "65522a45-5b9"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/tracking.svg
107.150.7.113200 OK 1.6 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/tracking.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text, with CRLF line terminators
Hash 2fb7b372aea93502ca192e5a633d1aa1
ce358703cce32b2176cf6ec94e17341cb6f93f03
58ad849f3ea489d0b2ee4f0dd1e4fd0b613a5248fd6b127a4479646ce4735593
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/tracking.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/svg+xml
content-length: 1561
last-modified: Mon, 13 Nov 2023 13:53:15 GMT
etag: "65522a4b-619"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/mailman.svg
107.150.7.113200 OK 1.8 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/mailman.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text
Hash 1426a5796b4337302ee498d4a9265b38
c3b2b8042eb536d43101c5281d5aae8244d1e0e1
87f26b59587d5549f99b77e77519bf17b625c6a693931f54f62accac834e6ff1
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/mailman.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/svg+xml
content-length: 1827
last-modified: Mon, 13 Nov 2023 13:53:07 GMT
etag: "65522a43-723"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/location.svg
107.150.7.113200 OK 2.6 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/location.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text, with CRLF line terminators
Hash 9b913bc84d41ec1c78da5889d36e1431
21b0075c9ec43a7ec769dde1d1ec8149b0686c0f
87d11356a8f76ef3af3c6d46bc4958cf3746e9a5b69e81d1df952b274319f539
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/location.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/svg+xml
content-length: 2586
last-modified: Mon, 13 Nov 2023 13:53:04 GMT
etag: "65522a40-a1a"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/stamps.svg
107.150.7.113200 OK 1.1 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/stamps.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text, with CRLF line terminators
Hash 2e722b55bb31b83042310fbf5b45128d
cb6cd5c99c06ba8c04c7795dea4d13241eaaa045
0b68e5b64999ab2e6d137a1886410cc9e8bed0b3863aacd838a3eb008f2bb516
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/stamps.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/svg+xml
content-length: 1103
last-modified: Mon, 13 Nov 2023 13:53:14 GMT
etag: "65522a4a-44f"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/schedule_pickup.svg
107.150.7.113200 OK 1.8 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/schedule_pickup.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text, with CRLF line terminators
Hash d627861a77e755da093cae9b4db00b7b
fc5ac7d6bc6bf06f53b399848be232b35aa2c5b1
2a5e1fdc8e264327be71c3063cc6bf1dd8a618576310a5d26dc31ba8d6f83616
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/schedule_pickup.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/svg+xml
content-length: 1775
last-modified: Mon, 13 Nov 2023 13:53:09 GMT
etag: "65522a45-6ef"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/calculate_price.svg
107.150.7.113200 OK 2.3 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/calculate_price.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text, with CRLF line terminators
Hash 6204f7fb48ef86964b4b1cce343ebdde
d60b7e47e22615fdea2a24e102200090b466b862
edbb6a59137018b9a8229184aac04a2661787564cdf4484229bee96d7c11e771
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/calculate_price.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/svg+xml
content-length: 2302
last-modified: Mon, 13 Nov 2023 13:52:55 GMT
etag: "65522a37-8fe"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/find_zip.svg
107.150.7.113200 OK 1.5 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/find_zip.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text, with CRLF line terminators
Hash e30aab66bad715f4fef4b6c42f8490d2
40be7a560b0687cf57c7ef0c0600ca08203a680c
aa6ff55c203834f667cbb01cedb0d409ff3b8f1b5a4de8c89a79b2e7034a8001
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/find_zip.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/svg+xml
content-length: 1471
last-modified: Mon, 13 Nov 2023 13:52:57 GMT
etag: "65522a39-5bf"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/holdmail.svg
107.150.7.113200 OK 1.4 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/holdmail.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text, with CRLF line terminators
Hash 4c8f3d7064524311ef86ddd0ded768d1
53ca5f29f603435821d07019cf123e430626f54e
2d45f10e1a6925e9500a4fb6e0223ce4ddfb492a914472ca8229fa01e3f94afa
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/holdmail.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/svg+xml
content-length: 1448
last-modified: Mon, 13 Nov 2023 13:53:02 GMT
etag: "65522a3e-5a8"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/change_address.svg
107.150.7.113200 OK 1.9 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/change_address.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text, with CRLF line terminators
Hash 3955e49630deb78cc1212ba20d83bafc
881ba502127d57c48784703683869abf4c8e28d8
b84842a014070d9363a46638e512476260162014c9bde4bcca7a9ade4177ea12
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/change_address.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/svg+xml
content-length: 1869
last-modified: Mon, 13 Nov 2023 13:52:56 GMT
etag: "65522a38-74d"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/po_box.svg
107.150.7.113200 OK 1.6 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/po_box.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text, with CRLF line terminators
Hash d3793852de4f419211843c1f4c05ddb4
8c7eccab4e3865a04553d720c150e4506d8990a0
7487a4b55d8cb9a837520dcb7ea5e50c915b5797c165f9bf7a7a3f8fe468a0a0
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/po_box.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/svg+xml
content-length: 1639
last-modified: Mon, 13 Nov 2023 13:53:08 GMT
etag: "65522a44-667"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/free_boxes.svg
107.150.7.113200 OK 1.1 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/free_boxes.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text, with CRLF line terminators
Hash dc788e0d1e8c7d9463a99882e622730c
a079d9612a9c119a9419b620d9dcfc141dd7e011
a3f1dfab56de547e28606e3e2150167339be6a35c8385486066924874d14df47
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/free_boxes.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/svg+xml
content-length: 1066
last-modified: Mon, 13 Nov 2023 13:52:58 GMT
etag: "65522a3a-42a"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/featured_clicknship.svg
107.150.7.113200 OK 1.1 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/featured_clicknship.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- HTML document text
- HTML document, ASCII text, with very long lines (1078), with no line terminators
Hash 375ed61778c1a49c8d1ea21f31748719
476785aa7126fbd9dcaa3bce84b57c3c120bd5a4
23edd9ac5dba678e1e5f97f2397a69d295e257c4a56e462c686557246081ffa2
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/featured_clicknship.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/svg+xml
content-length: 1078
last-modified: Mon, 13 Nov 2023 13:52:56 GMT
etag: "65522a38-436"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/go-now.png
107.150.7.113200 OK 20 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/go-now.png
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type PNG image data, 210 x 170, 8-bit/color RGBA, non-interlaced
- data
Hash 6311ef7a60f86d77aa48fcc48a675a31
96bc8b2fe87b126ffbf0d7b7ad8419661cb6bd9c
70d715475fb0a4756fc65c50cbb2cf0ca15f7311efc6c54b18e045e6ab202251
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/go-now.png HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/png
content-length: 19969
last-modified: Mon, 13 Nov 2023 13:52:59 GMT
etag: "65522a3b-4e01"
expires: Tue, 09 Jan 2024 03:20:37 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/header-init-search.js
107.150.7.113200 OK 904 B URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/header-init-search.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type ASCII text, with CRLF line terminators
Hash d8cb563907e68e9649948c6f521efe60
f5b7cf8123929db8162a2af51d07dd11c21fbac3
fd1e9eadb5698c1bc534ef8a75303b3b67f5e1ab7d1b217b27b09da42aa5036a
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/header-init-search.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
content-length: 904
last-modified: Mon, 13 Nov 2023 13:53:20 GMT
etag: "65522a50-388"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/idxs-icon.svg
107.150.7.113200 OK 1.9 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/idxs-icon.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text
Hash ff0c118bc3a45d92e2d45e57416abee5
9b5b3759e5e7e2148269063f1575d22cb2126b41
ab9283d446c093b7acf18a7e95a21a9b834b12f19f26e8776ff3407fc83e5b6c
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/idxs-icon.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/svg+xml
content-length: 1876
last-modified: Mon, 13 Nov 2023 13:53:03 GMT
etag: "65522a3f-754"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/social-facebook_1.png
107.150.7.113200 OK 1.9 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/social-facebook_1.png
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
- data
Hash 5d1fed200f7befa569074a293cf2abed
11bacbc9debe99986d9a6e974e9a819aaa74be29
9d0ef8aa34abec770b6a9fb4358842a29413d08c0d1e4b74f5c4c31ab477c14c
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/social-facebook_1.png HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/png
content-length: 1873
last-modified: Mon, 13 Nov 2023 13:53:10 GMT
etag: "65522a46-751"
expires: Tue, 09 Jan 2024 03:20:37 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/social-twitter_2.png
107.150.7.113200 OK 1.8 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/social-twitter_2.png
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type PNG image data, 50 x 48, 8-bit/color RGBA, non-interlaced
- data
Hash 4f6b06552f2054fecb5a3ab3956d7a79
c1257b76200738ad53147be110920f84efd479b3
248385895aacd78d7a7b045cd5109103c2f849bbaef9cff5980d59823a620c91
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/social-twitter_2.png HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/png
content-length: 1842
last-modified: Mon, 13 Nov 2023 13:53:12 GMT
etag: "65522a48-732"
expires: Tue, 09 Jan 2024 03:20:37 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/social-pinterest_6.png
107.150.7.113200 OK 2.3 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/social-pinterest_6.png
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
- data
Hash 010bf7d7901ccaa3905cfe4b7c1cb50d
9c174f76a3ed50a173637d44793d6bc15a818112
67d664b844fdba0588665c6f1986b25fcb6d99e5122a455c36da8622f1eaab62
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/social-pinterest_6.png HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/png
content-length: 2325
last-modified: Mon, 13 Nov 2023 13:53:11 GMT
etag: "65522a47-915"
expires: Tue, 09 Jan 2024 03:20:37 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/social-youtube_3.png
107.150.7.113200 OK 2.5 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/social-youtube_3.png
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type PNG image data, 50 x 35, 8-bit/color RGBA, non-interlaced
- data
Hash e38ff6af4b8ff088fcb2dc92410b759b
529c88413dbc330fa05a0629b2084ca7931f453e
c2b609bbc0ed5b17740df6ab378bfcbe068e3b08d85e85b2d9dfbe6dd3c6be95
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/social-youtube_3.png HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/png
content-length: 2461
last-modified: Mon, 13 Nov 2023 13:53:13 GMT
etag: "65522a49-99d"
expires: Tue, 09 Jan 2024 03:20:37 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/config/urlConfig.json
107.150.7.113404 Not Found 146 B URL GET HTTP/2 upostvtgvoiuya.xyz/config/urlConfig.json
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /config/urlConfig.json HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 10 Dec 2023 03:20:38 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/css/main.css
107.150.7.113200 OK 49 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/css/main.css
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type gzip compressed data, from Unix
- data
Hash b022d5dd29c245ab012ea566e025f64a
3e45a59e4771467ceef835303df3d9f4e4be62bd
06a07ec984b003c6a446b3c0c9f2c087273142af7c67a9d1538b1fae9b2f6cf3
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/css/main.css HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: text/css
last-modified: Mon, 13 Nov 2023 14:02:19 GMT
vary: Accept-Encoding
etag: W/"65522c6b-14778"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
api.4fia9oweu9fvgirj.xyz/click/queryIp
107.150.7.113200 OK 12 B URL GET HTTP/2 api.4fia9oweu9fvgirj.xyz/click/queryIp
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectapi.4fia9oweu9fvgirj.xyz
FingerprintF4:3A:72:81:D4:07:49:57:CB:2E:A8:AD:2F:B6:1C:06:58:FE:AF:A1
ValiditySat, 21 Oct 2023 11:46:58 GMT - Fri, 19 Jan 2024 11:46:57 GMT
File type ASCII text, with no line terminators
Hash 35b0bce9d250429df012c0426f88d0bd
f81d80af9cbeb0011316fbba3da8002b32251f7a
da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
GET /click/queryIp HTTP/1.1
Host: api.4fia9oweu9fvgirj.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://upostvtgvoiuya.xyz
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:38 GMT
content-type: text/plain;charset=UTF-8
content-length: 12
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE
access-control-max-age: 3600
access-control-allow-headers: *
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-cache: MISS
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/images/utility_languages.png
107.150.7.113200 OK 1.5 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/images/utility_languages.png
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced
- data
Hash 410956805d5701e87299cff412827e1a
5de9a390649dfc12e3d6df431140d499ad8abd67
6e727dbf5b0f4a3ec76762e445ad2c5cb750f7de41afb8b0342f903124d09826
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/images/utility_languages.png HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/png
content-length: 1456
last-modified: Mon, 13 Nov 2023 13:59:30 GMT
etag: "65522bc2-5b0"
expires: Tue, 09 Jan 2024 03:20:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/images/chinese_characters.gif
107.150.7.113200 OK 2.2 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/images/chinese_characters.gif
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type GIF image data, version 89a, 44 x 102
- data
Hash 6cfd66aca15e28ed9e77672fa22604b7
79f78e9167a5853d740486cdae627034cf2a7085
dc9835ec6574c8d748f4fe255d01035a7d289f4a8caae72a989a32d3973caecd
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/images/chinese_characters.gif HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/gif
content-length: 2173
last-modified: Mon, 13 Nov 2023 13:58:55 GMT
etag: "65522b9f-87d"
expires: Tue, 09 Jan 2024 03:20:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/axios.js
107.150.7.113200 OK 13 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/axios.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type gzip compressed data, from Unix
- data
Hash 6728ff539b0c802bee52ca896ccc3755
8cf477a0a513bea8c86ebc3dde59b8e1a139d4db
7710be3bab324b01c64cbc8bb5770784863a27370fe949c5d395c820573a23f7
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/axios.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:53:16 GMT
vary: Accept-Encoding
etag: W/"65522a4c-a6f0"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/images/mailman.svg
107.150.7.113200 OK 1.8 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/images/mailman.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text
Hash 1426a5796b4337302ee498d4a9265b38
c3b2b8042eb536d43101c5281d5aae8244d1e0e1
87f26b59587d5549f99b77e77519bf17b625c6a693931f54f62accac834e6ff1
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/images/mailman.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 1827
last-modified: Mon, 13 Nov 2023 13:59:10 GMT
etag: "65522bae-723"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/featured_clicknship.svg
107.150.7.113200 OK 52 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/featured_clicknship.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document text
- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1599), with CRLF, LF line terminators
Hash 9fde387a3cc3ad2b1744bd0c2139c008
8da30a6ce46c8c85574779d6767bd794368f37f7
665110618ec876acb77cd6bc05665aa1ffe4c90aa62f6063c0fa45b080b5926a
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/featured_clicknship.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 52148
last-modified: Mon, 13 Nov 2023 14:01:35 GMT
etag: "65522c3f-cbb4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/stamps.svg
107.150.7.113200 OK 52 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/stamps.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document text
- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1599), with CRLF, LF line terminators
Hash 9fde387a3cc3ad2b1744bd0c2139c008
8da30a6ce46c8c85574779d6767bd794368f37f7
665110618ec876acb77cd6bc05665aa1ffe4c90aa62f6063c0fa45b080b5926a
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/stamps.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 52148
last-modified: Mon, 13 Nov 2023 14:02:10 GMT
etag: "65522c62-cbb4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/find_zip.svg
107.150.7.113200 OK 52 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/find_zip.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document text
- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1599), with CRLF, LF line terminators
Hash 9fde387a3cc3ad2b1744bd0c2139c008
8da30a6ce46c8c85574779d6767bd794368f37f7
665110618ec876acb77cd6bc05665aa1ffe4c90aa62f6063c0fa45b080b5926a
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/find_zip.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 52148
last-modified: Mon, 13 Nov 2023 14:01:39 GMT
etag: "65522c43-cbb4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/calculate_price.svg
107.150.7.113200 OK 52 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/calculate_price.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document text
- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1599), with CRLF, LF line terminators
Hash 9fde387a3cc3ad2b1744bd0c2139c008
8da30a6ce46c8c85574779d6767bd794368f37f7
665110618ec876acb77cd6bc05665aa1ffe4c90aa62f6063c0fa45b080b5926a
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/calculate_price.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 52148
last-modified: Mon, 13 Nov 2023 14:01:10 GMT
etag: "65522c26-cbb4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/schedule_pickup.svg
107.150.7.113200 OK 52 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/schedule_pickup.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document text
- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1599), with CRLF, LF line terminators
Hash 9fde387a3cc3ad2b1744bd0c2139c008
8da30a6ce46c8c85574779d6767bd794368f37f7
665110618ec876acb77cd6bc05665aa1ffe4c90aa62f6063c0fa45b080b5926a
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/schedule_pickup.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 52148
last-modified: Mon, 13 Nov 2023 14:02:06 GMT
etag: "65522c5e-cbb4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/css/bootstrap.min.css
107.150.7.113200 OK 76 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/css/bootstrap.min.css
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type gzip compressed data, from Unix
- data
Hash 81a9e43960ff8b7603b28d01b9f3ccff
5310a623d04839e69e9a0ea92cf7cf0dcdfb08fb
f35ee0f54fe9927f927551edb1374c8c9cedb8e19555fd6c83bb0b97afe3f0bf
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/css/bootstrap.min.css HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: text/css
last-modified: Mon, 13 Nov 2023 14:02:12 GMT
vary: Accept-Encoding
etag: W/"65522c64-1d8fc"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/tracking.svg
107.150.7.113200 OK 52 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/tracking.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document text
- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1599), with CRLF, LF line terminators
Hash 9fde387a3cc3ad2b1744bd0c2139c008
8da30a6ce46c8c85574779d6767bd794368f37f7
665110618ec876acb77cd6bc05665aa1ffe4c90aa62f6063c0fa45b080b5926a
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/tracking.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 52148
last-modified: Mon, 13 Nov 2023 14:02:11 GMT
etag: "65522c63-cbb4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/search.svg
107.150.7.113200 OK 52 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/search.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document text
- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1599), with CRLF, LF line terminators
Hash 9fde387a3cc3ad2b1744bd0c2139c008
8da30a6ce46c8c85574779d6767bd794368f37f7
665110618ec876acb77cd6bc05665aa1ffe4c90aa62f6063c0fa45b080b5926a
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/search.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 52148
last-modified: Mon, 13 Nov 2023 14:02:07 GMT
etag: "65522c5f-cbb4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/css/footer.css
107.150.7.113200 OK 53 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/css/footer.css
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type gzip compressed data, from Unix
- data
Hash ebae2b9ab74f5ab6dbe46527beafd6e8
b395f8640662903dcd58b904094e58733691e154
97d8a37b2b461e7a51ea36f272728819a7f24cdfa3ecf937b86d22dda6002f5e
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/css/footer.css HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: text/css
last-modified: Mon, 13 Nov 2023 14:02:16 GMT
vary: Accept-Encoding
etag: W/"65522c68-b60"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/css/megamenu-v4.css
107.150.7.113200 OK 8.2 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/css/megamenu-v4.css
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type gzip compressed data, from Unix
- data
Hash c56ec985926b1290a5ee7e39ba3d6b0a
7c40cdbc67ec4647a6d0cb3b2aea7da5aac215a6
d4753182ac580fe952528a33cc79afc2c80b7c4ed7371ab4dae4de334c460fdc
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/css/megamenu-v4.css HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: text/css
last-modified: Mon, 13 Nov 2023 14:02:22 GMT
vary: Accept-Encoding
etag: W/"65522c6e-a71c"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/schedule-redelivery.svg
107.150.7.113404 Not Found 146 B URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/schedule-redelivery.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/schedule-redelivery.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/holdmail.svg
107.150.7.113200 OK 52 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/holdmail.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document text
- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1599), with CRLF, LF line terminators
Hash 9fde387a3cc3ad2b1744bd0c2139c008
8da30a6ce46c8c85574779d6767bd794368f37f7
665110618ec876acb77cd6bc05665aa1ffe4c90aa62f6063c0fa45b080b5926a
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/holdmail.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 52148
last-modified: Mon, 13 Nov 2023 14:01:54 GMT
etag: "65522c52-cbb4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/change_address.svg
107.150.7.113200 OK 52 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/change_address.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document text
- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1599), with CRLF, LF line terminators
Hash 9fde387a3cc3ad2b1744bd0c2139c008
8da30a6ce46c8c85574779d6767bd794368f37f7
665110618ec876acb77cd6bc05665aa1ffe4c90aa62f6063c0fa45b080b5926a
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/change_address.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 52148
last-modified: Mon, 13 Nov 2023 14:01:11 GMT
etag: "65522c27-cbb4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/po_box.svg
107.150.7.113200 OK 52 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/po_box.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- HTML document text
- exported SGML document text
- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1599), with CRLF, LF line terminators
Hash 9fde387a3cc3ad2b1744bd0c2139c008
8da30a6ce46c8c85574779d6767bd794368f37f7
665110618ec876acb77cd6bc05665aa1ffe4c90aa62f6063c0fa45b080b5926a
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/po_box.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 52148
last-modified: Mon, 13 Nov 2023 14:02:01 GMT
etag: "65522c59-cbb4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/shipping-supplies.svg
107.150.7.113200 OK 2.6 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/shipping-supplies.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text
Hash 5c5579a50964d4972d1954bff4ee232d
c78b384713cf7a8a5515a54f17c6e70ebdde98fc
c12815f27ecdfd09b2920c1eea21ae7abb8e107349d6bb8b39707a0cd9a3e591
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/shipping-supplies.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 2552
last-modified: Mon, 13 Nov 2023 14:02:07 GMT
etag: "65522c5f-9f8"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/cards-and-envelopes.svg
107.150.7.113200 OK 2.2 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/cards-and-envelopes.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text
Hash ef48ce62cb3d361e1d8b2938c40e71dd
f2c96ac70aab81500fa0d12f5ab61f07b79b8a54
893b5448cdde44b4db29800aeed45e278b1e640ea4585a5f4a5e4725e64bae84
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/cards-and-envelopes.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 2217
last-modified: Mon, 13 Nov 2023 14:01:10 GMT
etag: "65522c26-8a9"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/icon-personalize-stamped-envelopes.svg
107.150.7.113404 Not Found 146 B URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/icon-personalize-stamped-envelopes.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/icon-personalize-stamped-envelopes.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/collectors.svg
107.150.7.113200 OK 1.1 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/collectors.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text
Hash 9105cfa1479096038365d18beb23cb1f
648c5b01118cf059eede56d9dae1713ab26d965c
b2728704f99e68b8edfa2b8efcb1f40e77d3abd5f6f04388c9a09232b1711043
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/collectors.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 1121
last-modified: Mon, 13 Nov 2023 14:01:13 GMT
etag: "65522c29-461"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/gifts.svg
107.150.7.113200 OK 1.0 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/gifts.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, ASCII text
Hash df6fcab6c4caf86e8a1401a4fc36f885
860352cea6899553cb4e7111097b35bd007c65e7
986ebc6c0f0c4b5bdb2513352dbbf3f501a36abd1dcd0c17a9c215efd95191a7
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/gifts.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 1006
last-modified: Mon, 13 Nov 2023 14:01:45 GMT
etag: "65522c49-3ee"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/business.svg
107.150.7.113200 OK 1.2 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/business.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- XML 1.0 document text
- XML document text
- HTML document text
- exported SGML document, Unicode text, UTF-8 text
Hash 0d366834f312798111ebe3990766f8f4
e3ce708bf0b0b1924156674aca900898d407331c
da2e0f69eb8ea4aa9ffe45c2ad6d330eb7922e0e14f8aaca4e577be0fb8b4bea
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/business.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 1234
last-modified: Mon, 13 Nov 2023 14:01:08 GMT
etag: "65522c24-4d2"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/images/loyalty.svg
107.150.7.113200 OK 2.4 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/images/loyalty.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- , ASCII text, with very long lines (746), with CRLF line terminators
Hash 9d4d854be98625230972560f86a80efd
a2528b13522e06172e1ca19bd5640ff22fddb5ec
85b8cb503de253afd195f3775b08df3bad432546ffa918cacff7c97ba8aa801f
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/images/loyalty.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 2429
last-modified: Mon, 13 Nov 2023 13:59:09 GMT
etag: "65522bad-97d"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/images/printcustomsforms.svg
107.150.7.113200 OK 2.5 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/images/printcustomsforms.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- HTML document, ASCII text, with very long lines (2535), with no line terminators
Hash f7337d7d3b1b1af555348038d684bc08
0063ebb65ebec0cd39e3d060d71cfe25398e41e2
8c84efd0a5e9bb67a1ecc895c6ab1ffe3731cf0664d1502d95234b0521cfb797
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/images/printcustomsforms.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 2535
last-modified: Mon, 13 Nov 2023 13:59:16 GMT
etag: "65522bb4-9e7"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/metrics-all.js
107.150.7.113200 OK 3.5 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/metrics-all.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
Hash 34bbbc752c38a085d897eb4d08518e56
f47857ba660bef72853357ebf63c1645ed0e6420
58e2e2233ddbf49425919c629e63a97801067da6538b003f9ecaf0161f9bdd85
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/metrics-all.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:53:32 GMT
vary: Accept-Encoding
etag: W/"65522a5c-2ab1"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/nav-red-chevron.svg
107.150.7.113404 Not Found 146 B URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/nav-red-chevron.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/nav-red-chevron.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/3b303641-706e-4221-94c4-4fb491f4f8ef.woff2
107.150.7.113200 OK 32 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/3b303641-706e-4221-94c4-4fb491f4f8ef.woff2
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type Web Open Font Format (Version 2), TrueType, length 31696, version 2.655
- data
Hash 10290cd4148c956fa2287d2ab5c71631
0186c7c5f9e12701022362effcab5c7f08ef0a29
0419465d8b720ca4a1a4307e1aaf37c9c1fda715473e458a9e7d1a94854c68e3
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/3b303641-706e-4221-94c4-4fb491f4f8ef.woff2 HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/main.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: font/woff2
content-length: 31696
last-modified: Mon, 13 Nov 2023 14:00:08 GMT
etag: "65522be8-7bd0"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
fast.fonts.net/t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612
104.16.250.67200 OK 0 B URL GET HTTP/2 fast.fonts.net/t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612
IP 104.16.250.67:443
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB9:2B:82:F1:50:51:EA:B4:39:81:75:2F:6E:8B:8B:94:55:81:C3:47
ValidityFri, 05 May 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1
Host: fast.fonts.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Cookie: __cf_bm=8pxzWyUVwMqxi2ZhK5s.FFxFZmAuMxWGwdMqzAgdq_8-1702178438-1-ARScqRweBnhNfDcrzjDr+sGhpIHflHk+SbiM2HwtHv/ILdoFoFxzup3jU+OI3aAI3oXYDWk1dOKNj9L0u7TG390=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: text/css; charset=utf-8
content-length: 0
x-amz-id-2: 3MfqsHPaoDtzAO5M60cnj6YppXUBAUSyzeBMzUz6Lxda2ER3pN3Q8agq/kaNUhGTvfCNT/hayTo=
x-amz-request-id: RSCD8TA6YG17HWQG
last-modified: Tue, 23 Mar 2021 12:59:23 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
cache-control: public, max-age=0, s-maxage=604800
x-amz-meta-mtime: 1519217722
x-amz-version-id: null
cf-cache-status: HIT
age: 426567
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 83325a6ecd71712a-OSL
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/b0868b4c-234e-47d3-bc59-41ab9de3c0db.woff2
107.150.7.113200 OK 40 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/b0868b4c-234e-47d3-bc59-41ab9de3c0db.woff2
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type Web Open Font Format (Version 2), TrueType, length 40372, version 2.655
- data
Hash 9bb1ce2aa7fed31792aa1750d0306831
6a538f9d945eaa6f7e8f97b4530183347d20bee5
5e284133b1b11165e7354b29cfabb5f214c473f0ca18198a49c052d8df3f172f
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/b0868b4c-234e-47d3-bc59-41ab9de3c0db.woff2 HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/main.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: font/woff2
content-length: 40372
last-modified: Mon, 13 Nov 2023 14:00:54 GMT
etag: "65522c16-9db4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/462d508d-efc7-478f-b84e-288eeb69a160.woff2
107.150.7.113200 OK 39 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/462d508d-efc7-478f-b84e-288eeb69a160.woff2
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type Web Open Font Format (Version 2), TrueType, length 39112, version 2.655
- data
Hash e37c1d87055e7062c217e73098ab36d9
61f4c682ce807183e59a52ded2c9af89a419fabe
c98cd4bd3267c7d8484044bff1fbffaf0c2362edc04917457244809e1f24e404
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/462d508d-efc7-478f-b84e-288eeb69a160.woff2 HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/main.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: font/woff2
content-length: 39112
last-modified: Mon, 13 Nov 2023 14:00:09 GMT
etag: "65522be9-98c8"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/images/footer-logo.png
107.150.7.113200 OK 5.4 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/images/footer-logo.png
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type PNG image data, 221 x 27, 8-bit/color RGBA, non-interlaced
- data
Hash ccd62119eaa0e3697f60599487c51ad5
8e44d3123b4ce2005c76a2b8dcf7870058d2a82d
1cc43a97be92fddf0fe4244858f5337c80a8d350cd0afcd0c4d2004d3fded0ab
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/images/footer-logo.png HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/footer-sb.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/png
content-length: 5390
last-modified: Mon, 13 Nov 2023 13:59:01 GMT
etag: "65522ba5-150e"
expires: Tue, 09 Jan 2024 03:20:39 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff
107.150.7.113200 OK 47 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type Web Open Font Format, TrueType, length 46657, version 1.0
- data
Hash 3beb1cf49dc702cd4de8618eeb344dd4
080e1b4dc8b43ddb06961a3490857cdb936a8c2a
ffd7af6177837790e2620c429dce0da6dc7d18bbdcf87a7ed2c033a03513e947
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/main-sb.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: font/woff
content-length: 46657
last-modified: Mon, 13 Nov 2023 14:00:14 GMT
etag: "65522bee-b641"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff
107.150.7.113200 OK 59 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type Web Open Font Format, TrueType, length 58690, version 1.0
- data
Hash a6e2d3921c9ea0fd81897d9ae7a33ba4
bc31969f2fb1926a15cd678b3e573c37a44e5421
f2e2ef638dd9aac863f0f6027ceb784cd4c5a14a676bed909c8f2ac4b088d510
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/main-sb.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: font/woff
content-length: 58690
last-modified: Mon, 13 Nov 2023 14:01:16 GMT
etag: "65522c2c-e542"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff
107.150.7.113200 OK 52 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type Web Open Font Format, TrueType, length 51685, version 1.0
- data
Hash a93e96be336c174933e68ef61d56e0d3
48f7a75a367904ff4a9a79689a508e29edda462c
cc469406025b7ce0913cdefc664007cd0fc46bc66a740dc7aff67cc041bccde0
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/main-sb.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: font/woff
content-length: 51685
last-modified: Mon, 13 Nov 2023 14:00:26 GMT
etag: "65522bfa-c9e5"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-MVCC8H
142.250.74.168200 OK 146 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-MVCC8H
IP 142.250.74.168:443
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (65316)
Size 146 kB (145876 bytes)
Hash c54ae4760471e2925c6670af1d47f965
116100146ad47a09a8a896de749076bbec6811ac
3c03ee3e9cb1ee46845c3e731ed20a0b7e9d6f2e68022b48c1813eb215961179
GET /gtm.js?id=GTM-MVCC8H HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: gzip
vary: Accept-Encoding
date: Sun, 10 Dec 2023 03:20:39 GMT
expires: Sun, 10 Dec 2023 03:20:39 GMT
cache-control: private, max-age=900
last-modified: Sun, 10 Dec 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 145876
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.4fia9oweu9fvgirj.xyz/click/addClick?behaviour=
107.150.7.113200 OK 12 B URL OPTIONS HTTP/2 api.4fia9oweu9fvgirj.xyz/click/addClick?behaviour=
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectapi.4fia9oweu9fvgirj.xyz
FingerprintF4:3A:72:81:D4:07:49:57:CB:2E:A8:AD:2F:B6:1C:06:58:FE:AF:A1
ValiditySat, 21 Oct 2023 11:46:58 GMT - Fri, 19 Jan 2024 11:46:57 GMT
File type ASCII text, with no line terminators
Hash 35b0bce9d250429df012c0426f88d0bd
f81d80af9cbeb0011316fbba3da8002b32251f7a
da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
GET /click/addClick?behaviour= HTTP/1.1
Host: api.4fia9oweu9fvgirj.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
sink: USPS2
sinks: 2
Origin: https://upostvtgvoiuya.xyz
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: application/json
content-length: 12
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE
access-control-max-age: 3600
access-control-allow-headers: *
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-cache: MISS
X-Firefox-Spdy: h2
www.usps.com/global-elements/header/script/search-fe.js
192.229.221.165200 OK 930 B URL GET HTTP/2 www.usps.com/global-elements/header/script/search-fe.js
IP 192.229.221.165:443
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerDigiCert Inc
Subject*.usps.com
Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39
ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (2264), with no line terminators
Hash f7f70265f5cf47386622e433317412cb
e1b28284e51c848685c7ea6d19ff551284c58e8a
766a3dfb7dab82af4fae555132f7fdbacb7d167f17015fbb23c9591daaaf698b
GET /global-elements/header/script/search-fe.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 15473
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Sun, 10 Dec 2023 03:20:39 GMT
etag: "8d8-5d77081c47c40+gzip"
last-modified: Mon, 07 Feb 2022 16:58:17 GMT
server: ECAcc (dce/26A2)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 930
X-Firefox-Spdy: h2
www.usps.com/global-elements/lib/script/require-jquery.js
192.229.221.165200 OK 74 B URL GET HTTP/2 www.usps.com/global-elements/lib/script/require-jquery.js
IP 192.229.221.165:443
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerDigiCert Inc
Subject*.usps.com
Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39
ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash ea38e8196b75d9720bc3902d6d735130
165284464c58d7f213c1211f2c433873299e4527
cdbf334e8e860aaf1665d2ac56113f51f1ff304b63cff897beb969c8dd5597d9
GET /global-elements/lib/script/require-jquery.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: https://www.usps.com
age: 15473
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Sun, 10 Dec 2023 03:20:39 GMT
etag: "4a-5057c23aa4c00"
last-modified: Wed, 15 Oct 2014 20:40:16 GMT
server: ECAcc (dce/268C)
strict-transport-security: max-age=31536000 ; includeSubDomains
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 74
X-Firefox-Spdy: h2
www.usps.com/global-elements/lib/script/helpers.js
192.229.221.165200 OK 358 B URL GET HTTP/2 www.usps.com/global-elements/lib/script/helpers.js
IP 192.229.221.165:443
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerDigiCert Inc
Subject*.usps.com
Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39
ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (695), with no line terminators
Hash 5372347b4f98f60b33579180ef6a3567
02064f1641c40b35c14a0da9ee310de54ff76cd5
7fa317b049ed33139394313aba29f27b7f11a226270bf10ce1c26d674c0177e4
GET /global-elements/lib/script/helpers.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 15391
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Sun, 10 Dec 2023 03:20:39 GMT
etag: "2b7-505dad4fe5380+gzip"
last-modified: Mon, 20 Oct 2014 13:38:38 GMT
server: ECAcc (dce/26C8)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 358
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/jquery.min.js
107.150.7.113200 OK 122 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/jquery.min.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type gzip compressed data, from Unix
- data
Size 122 kB (121940 bytes)
Hash 38dc7aa3464753710ed5db35982b6be6
d59bbb4ea228262413f9f304cefb59425a7fb70b
f994aa641ed860958a2f6a55f7564a49792ae140c3ae9fb522859f1d833a3e1a
Analyzer Verdict Alert OpenPhish phishing United States Postal Service
GET /static/js/jquery.min.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:53:27 GMT
vary: Accept-Encoding
etag: W/"65522a57-14b60"
expires: Sun, 10 Dec 2023 15:20:39 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c
142.250.74.168200 OK 89 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c
IP 142.250.74.168:443
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type ASCII text, with very long lines (4179)
Hash 69136cffe2daabce080f4a24215a26e1
7d9125a1e53b72bf59feff2a5f5bec1d7921dea8
cd59378dcba946e357021a3dd25b325e7854880f913e866c1d7792dfbdccc7d3
GET /gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 10 Dec 2023 03:20:39 GMT
expires: Sun, 10 Dec 2023 03:20:39 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 88667
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.usps.com/global-elements/footer/script/jquery-3.5.1.js
192.229.221.165200 OK 31 kB URL GET HTTP/2 www.usps.com/global-elements/footer/script/jquery-3.5.1.js
IP 192.229.221.165:443
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerDigiCert Inc
Subject*.usps.com
Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39
ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash 9ac39dc31635a363e377eda0f6fbe03f
29fa5ad995e9ec866ece1d3d0b698fc556580eee
9a2723c21fb1b7dff0e2aa5dc6be24a9670220a17ae21f70fdbc602d1f8acd38
GET /global-elements/footer/script/jquery-3.5.1.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 15366
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Sun, 10 Dec 2023 03:20:40 GMT
etag: "15d84-5affcd6633ac0+gzip"
last-modified: Wed, 23 Sep 2020 15:35:47 GMT
server: ECAcc (dce/2687)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 30950
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/optimize.js
107.150.7.113200 OK 50 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/optimize.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type ASCII text, with very long lines (1720)
Hash 6885c4ba619a5a6e3f308e008263d08a
abe13ba3d2f2915df6b29bca96c731dad497b3a1
20fad125820428f1183ba4e29090b01096df5cd7fd7ab2975ddcd3b236c86fc1
Analyzer Verdict Alert OpenPhish phishing United States Postal Service
GET /static/js/optimize.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:58:40 GMT
vary: Accept-Encoding
etag: W/"65522b90-1cedc"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
resources.digital-cloud-gov.medallia.com/wdcgov/2/onsite/embed.js
104.110.27.57200 OK 528 B URL GET HTTP/2 resources.digital-cloud-gov.medallia.com/wdcgov/2/onsite/embed.js
IP 104.110.27.57:443
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerDigiCert Inc
Subject*.digital-cloud-gov.medallia.com
FingerprintE2:69:7F:1F:FA:E4:66:7B:09:28:A4:B2:77:12:40:AE:66:2E:74:74
ValidityMon, 27 Feb 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (587)
Hash 66e9e38fd0721669c49f0d88ff40aa51
11e698efb56a1622fcb6964067e0e4ac459290ba
aaf5ccabfc225d36f5d36d13e4062838bf3650dc71c8b5ea614b46a0ab3613b4
GET /wdcgov/2/onsite/embed.js HTTP/1.1
Host: resources.digital-cloud-gov.medallia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: XL30ePxCEkxS5i0RBR5oNlyJa7NcGZBqvYUWVq2aX6shqqudLHKUqLRQxLR01J9JdlZjsb4NJwM=
x-amz-request-id: K7JMGV53KQDBGMT3
last-modified: Thu, 07 Dec 2023 18:28:11 GMT
etag: "66e9e38fd0721669c49f0d88ff40aa51"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
accept-ranges: bytes
content-type: application/javascript
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
expires: Sun, 10 Dec 2023 03:20:40 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 10 Dec 2023 03:20:40 GMT
content-length: 528
access-control-max-age: 86400
access-control-allow-origin: *
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/images/loading-icon-transparent-background-12.jpg
107.150.7.113200 OK 82 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/images/loading-icon-transparent-background-12.jpg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type GIF image data, version 89a, 630 x 637
- data
Hash 9e0373c2b4410c49439dfd822c5fd16e
427f86c03751b7e107fd282bbe32be18fc2e0898
05eb745176d79ec27d52d544582483fc4d0f6378c7ed2060be24dfc4e8990668
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/images/loading-icon-transparent-background-12.jpg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:34 GMT
content-type: image/jpeg
content-length: 81572
last-modified: Mon, 13 Nov 2023 13:59:06 GMT
etag: "65522baa-13ea4"
expires: Tue, 09 Jan 2024 03:20:34 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/bootstrap.min.js
107.150.7.113200 OK 37 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/bootstrap.min.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type ASCII text, with very long lines (36812)
Hash 5a419da48d7b5f7ed34fda267cac899b
5b1552a7baf7a483457cfc229129405f7b6b94ce
6cd4e4ed31432db3cdfdf272f1066de426166a2013598db7cb71b77a47d02148
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/bootstrap.min.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:53:17 GMT
vary: Accept-Encoding
etag: W/"65522a4d-9049"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/css/footer-sb.css
107.150.7.113200 OK 3.1 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/css/footer-sb.css
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type ASCII text, with very long lines (3067), with no line terminators
Hash 68d1409c402b1d6879903e30bcc24b8f
6200b8ff79f3ec08aaef65f882b3c5dcfbac3302
30584a58d960708fca0df28eae169606378cda2281bcadff205fba6efcfd5153
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/css/footer-sb.css HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: text/css
last-modified: Mon, 13 Nov 2023 14:02:15 GMT
vary: Accept-Encoding
etag: W/"65522c67-bef"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/css/conditionalchatlink.css
107.150.7.113200 OK 52 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/css/conditionalchatlink.css
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing United States Postal Service
GET /static/css/conditionalchatlink.css HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: text/css
last-modified: Mon, 13 Nov 2023 14:02:14 GMT
vary: Accept-Encoding
etag: W/"65522c66-cb57"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/jquery-3.5.1.js
107.150.7.113200 OK 90 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/jquery-3.5.1.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type ASCII text, with very long lines (65450), with CRLF line terminators
Hash 9ac39dc31635a363e377eda0f6fbe03f
29fa5ad995e9ec866ece1d3d0b698fc556580eee
9a2723c21fb1b7dff0e2aa5dc6be24a9670220a17ae21f70fdbc602d1f8acd38
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/jquery-3.5.1.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:53:21 GMT
vary: Accept-Encoding
etag: W/"65522a51-15d84"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/ResourceRedConfig.js
107.150.7.113200 OK 34 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/ResourceRedConfig.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing United States Postal Service
GET /static/js/ResourceRedConfig.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:34 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:58:45 GMT
vary: Accept-Encoding
etag: W/"65522b95-85ec"
expires: Sun, 10 Dec 2023 15:20:34 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/images/favicon.ico
107.150.7.113200 OK 32 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/images/favicon.ico
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
- data
Hash 3f0f72ed57a54b97cda500bcf0545efb
2f252619c18e729d98e16b96d37cd7cd567b38eb
67fbe8ef9020e5c776aadf6801a1fef8dc563e2e4dc9ddc740af8010c0c38943
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/images/favicon.ico HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:38 GMT
content-type: image/x-icon
content-length: 32038
last-modified: Mon, 13 Nov 2023 13:58:59 GMT
etag: "65522ba3-7d26"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/modernizr.js
107.150.7.113200 OK 11 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/modernizr.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document, ASCII text, with very long lines (11084)
Hash 66e83c4165a234cdda478a9c55cb90db
22e9211030a1f612ef4acd010185181bde967307
779ab662607b48249e86f3c27e9eafff4bbc808b48899a439d5cd9b2c78f99e6
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/modernizr.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:53:33 GMT
vary: Accept-Encoding
etag: W/"65522a5d-2bfd"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/picture/hamburger.svg
107.150.7.113200 OK 546 B URL GET HTTP/2 upostvtgvoiuya.xyz/static/picture/hamburger.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type SVG Scalable Vector Graphics image
- HTML document, ASCII text, with very long lines (573), with no line terminators
Hash 877d4644f0a505bf30be77169524e441
d85faf0831fb39673ad3733ad6ecf1d8bac778cd
2336a119dddc7aa4b6d54a4ecd251f5a30cf0572816db55b92e9f0b43ee63ecf
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/picture/hamburger.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: image/svg+xml
content-length: 546
last-modified: Mon, 13 Nov 2023 13:53:00 GMT
etag: "65522a3c-222"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/megamenu-v3.js
107.150.7.113200 OK 13 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/megamenu-v3.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type ASCII text, with very long lines (13400), with no line terminators
Hash b62e27b15837b70e7dab99846ac90ab3
9a49415c5e47149a5324705eaf78b4b68ce10edf
50764694ee2da70f2d3ce0e8340eca39b9e2760d293b47e4355c690a4769e781
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/megamenu-v3.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:53:31 GMT
vary: Accept-Encoding
etag: W/"65522a5b-3458"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/landing.js
107.150.7.113200 OK 9.1 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/landing.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type ASCII text, with very long lines (10234), with no line terminators
Hash 0f4184554a83887bcb3f73f463933a90
e093bfdcdf35253d254999395bdaa7ed67a99068
d868a0399477d0d43d7d3caf437be0a1263e7d41b6cdc81b3ff05b6f68d7c5e4
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/landing.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:53:29 GMT
vary: Accept-Encoding
etag: W/"65522a59-235a"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/location.svg
107.150.7.113200 OK 52 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/location.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing United States Postal Service
GET /static/fonts/location.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 52148
last-modified: Mon, 13 Nov 2023 14:01:54 GMT
etag: "65522c52-cbb4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/css/main-sb.css
107.150.7.113200 OK 7.9 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/css/main-sb.css
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type ASCII text, with very long lines (8068), with no line terminators
Hash 240d2c6020f53f231be98f099dfc00cf
b855005ba3a6be537b754a324853a89f53f33150
ea58be7f60a5c2d65f14278ed684965d8c69be76db4562a9eaef78844d271ed6
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/css/main-sb.css HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: text/css
last-modified: Mon, 13 Nov 2023 14:02:17 GMT
vary: Accept-Encoding
etag: W/"65522c69-1f01"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/mailman.svg
107.150.7.113200 OK 52 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/mailman.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing United States Postal Service
GET /static/fonts/mailman.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: image/svg+xml
content-length: 52148
last-modified: Mon, 13 Nov 2023 14:01:55 GMT
etag: "65522c53-cbb4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
fast.fonts.net/t/trackingCode.js
0.0.0.0 0 B URL GET fast.fonts.net/t/trackingCode.js
IP 0.0.0.0:0
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintB9:2B:82:F1:50:51:EA:B4:39:81:75:2F:6E:8B:8B:94:55:81:C3:47
ValidityFri, 05 May 2023 00:00:00 GMT - Sat, 04 May 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/trackingCode.js HTTP/1.1
Host: fast.fonts.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Cookie: __cf_bm=8pxzWyUVwMqxi2ZhK5s.FFxFZmAuMxWGwdMqzAgdq_8-1702178438-1-ARScqRweBnhNfDcrzjDr+sGhpIHflHk+SbiM2HwtHv/ILdoFoFxzup3jU+OI3aAI3oXYDWk1dOKNj9L0u7TG390=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: text/plain; charset=utf-8
x-amz-id-2: zYhKraNibKo66IAlBtLIrsktkibAUzYdxDcd1UBHtMIR3rDILmrzgSBdW+oiKuILrXLJ3lo7Mn4=
x-amz-request-id: PG321HJQEBES9CSD
last-modified: Tue, 23 Mar 2021 09:15:19 GMT
etag: W/"32dd789522cc6923c80141fcf5d3a614"
cache-control: public, max-age=300
x-amz-meta-mtime: 1383840033
x-amz-version-id: null
cf-cache-status: HIT
age: 1376
expires: Sun, 10 Dec 2023 03:25:39 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 83325a6e1d33712a-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
api.4fia9oweu9fvgirj.xyz/websocket/69e624c03ed7a08323747263761bc04d
107.150.7.113101 0 B URL GET HTTP/1.1 api.4fia9oweu9fvgirj.xyz/websocket/69e624c03ed7a08323747263761bc04d
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectapi.4fia9oweu9fvgirj.xyz
FingerprintF4:3A:72:81:D4:07:49:57:CB:2E:A8:AD:2F:B6:1C:06:58:FE:AF:A1
ValiditySat, 21 Oct 2023 11:46:58 GMT - Fri, 19 Jan 2024 11:46:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /websocket/69e624c03ed7a08323747263761bc04d HTTP/1.1
Host: api.4fia9oweu9fvgirj.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://upostvtgvoiuya.xyz
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fwL1ahTUdiQ6RtRsJujGJQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101
Server: nginx
Date: Sun, 10 Dec 2023 03:20:36 GMT
Connection: upgrade
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Max-Age: 3600
Access-Control-Allow-Headers: *
Upgrade: websocket
Sec-WebSocket-Accept: 1ZHJedh+8sQSDktyCpfckJqP5gw=
Sec-WebSocket-Extensions: permessage-deflate
upostvtgvoiuya.xyz/static/js/ResourceConfig.js
107.150.7.113200 OK 14 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/ResourceConfig.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing United States Postal Service
GET /static/js/ResourceConfig.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:58:43 GMT
vary: Accept-Encoding
etag: W/"65522b93-386d"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/jquery.ui.js
107.150.7.113200 OK 284 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/jquery.ui.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type ASCII text, with very long lines (18730)
Size 284 kB (284465 bytes)
Hash 4e7e5ae2451d2efbc3d960b63fa78dbb
1479f717ce0594dde5d020d885a988fcf98b106e
5b55ece99168ef9ba6d8557a4e759ad76f53da94eba1d8f331395ea321441bda
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/jquery.ui.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:53:28 GMT
vary: Accept-Encoding
etag: W/"65522a58-45731"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/data.js
107.150.7.113200 OK 2.3 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/data.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type ASCII text, with very long lines (2588), with no line terminators
Hash 6692d5ea7a27e811825a9159bfaa0210
cc2a3758f56e64554561107df0fbc9765f9ae76a
d1147d04efad54c59c37c66620f4aa33ac1f82665f011b8836ba96bb0ea479be
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/data.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:53:18 GMT
vary: Accept-Encoding
etag: W/"65522a4e-924"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/css/tracking-cross-sell.css
107.150.7.113200 OK 3.1 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/css/tracking-cross-sell.css
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type ASCII text, with very long lines (3072), with no line terminators
Hash 1748fdddbf9576848c632cc84284cb18
9375f807310e395cfb36a1a0d04df4ae78cfb397
504797b896dd4ddf1f976e9b4719bfcec92f5a897a44760c6dcf42fcc40812d3
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/css/tracking-cross-sell.css HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: text/css
last-modified: Mon, 13 Nov 2023 14:02:23 GMT
vary: Accept-Encoding
etag: W/"65522c6f-bec"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/fonts/package-intercept.svg
107.150.7.113404 Not Found 146 B URL GET HTTP/2 upostvtgvoiuya.xyz/static/fonts/package-intercept.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document, ASCII text, with no line terminators
Hash 40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/fonts/package-intercept.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
www.usps.com/global-elements/lib/script/resize-manager.js
192.229.221.165200 OK 1.0 kB URL GET HTTP/2 www.usps.com/global-elements/lib/script/resize-manager.js
IP 192.229.221.165:443
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerDigiCert Inc
Subject*.usps.com
Fingerprint89:34:8F:E5:07:0E:C0:73:96:2D:78:82:D6:7B:BC:D3:C1:AB:60:39
ValidityFri, 21 Apr 2023 00:00:00 GMT - Tue, 21 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (1060), with no line terminators
Hash 2b6525f6d81c39e8a8b69158ba130f6b
818a52c3b32ef29d90d79399c8c8a7bc7c034d87
f535956d15bd59d660b7d27f02f8145c9c92d93cf88b6334e9c6a128eb2766a7
GET /global-elements/lib/script/resize-manager.js HTTP/1.1
Host: www.usps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: https://www.usps.com
age: 15356
content-security-policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:;
content-type: application/javascript
date: Sun, 10 Dec 2023 03:20:40 GMT
etag: "410-5057c23b98e40+gzip"
last-modified: Wed, 15 Oct 2014 20:40:17 GMT
server: ECAcc (dce/26B9)
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-ec-custom-error: 1
x-frame-options: SAMEORIGIN
x-ruleset-version: 3.1
content-length: 468
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/ge-login.js
107.150.7.113200 OK 9.3 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/ge-login.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type ASCII text, with very long lines (10568), with no line terminators
Hash 8e71360989154bfff52eed7385693c97
fef06dd99e04c205b34719c8e60d038327551574
92a38453573da7e18c1db67ab224561714b604b7c517034e3311b65aac11346e
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/ge-login.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:53:19 GMT
vary: Accept-Encoding
etag: W/"65522a4f-2460"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/vue.js
107.150.7.113200 OK 342 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/vue.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
Size 342 kB (342147 bytes)
Hash a9b6fe71cb7cfcd689e1ef345aefba51
5c39dfc37fc42400e4b4557db956f3f218a90ca7
159f0ac0c8f517aaa736003b6e13ebc959b5f7129db87e4e56bf2eec8d6d02d7
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/vue.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:58:51 GMT
vary: Accept-Encoding
etag: W/"65522b9b-53883"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/validator.min.js
107.150.7.113200 OK 7.6 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/validator.min.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type ASCII text, with very long lines (7819), with no line terminators
Hash 8258c52838a1dac42f5196366e329e8b
1fb14021301453d0f28610307b7240623abed6ea
a5dbaaec06f5e1f4d4cf6ee0d97efd97f4e626f891170fc9ecb0bb7fc3aaab4e
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/validator.min.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:58:47 GMT
vary: Accept-Encoding
etag: W/"65522b97-1da0"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/jquery.keyboard-focus.js
107.150.7.113200 OK 1.1 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/jquery.keyboard-focus.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type ASCII text, with very long lines (1163), with no line terminators
Hash f80770d6ef673b444ceb19361315bd76
7f6b37ae017663a9c94251d256d29bcb18a76ac9
f57685215201f98bc879fac89fbd9ec6669a8d88aec2e43d39ed761aa8c87bb2
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/jquery.keyboard-focus.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:53:25 GMT
vary: Accept-Encoding
etag: W/"65522a55-45f"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/require.js
107.150.7.113200 OK 17 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/require.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type ASCII text, with very long lines (17192)
Hash 16e572a4f80526df4bc3cc7ff056a9a8
f23b5c2fd52e855245e3d2586cd911051561e64c
75237772a7bc8c6eaadbe642be69503335c5842af8981688250a8d4f0f61c377
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/require.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:58:42 GMT
vary: Accept-Encoding
etag: W/"65522b92-440f"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/onelinkusps.js
107.150.7.113200 OK 3.6 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/onelinkusps.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type ASCII text, with very long lines (4144), with no line terminators
Hash 2575b25dbdbd1b914b3c983cb24bcf90
31a451e8403be6b3f4fffb0bad224b1e02464c0f
07b3aca05a0a6d91a57cd83bafc5366a099a5719cab8a5a672a4ab732ae3c2f5
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/onelinkusps.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:53:34 GMT
vary: Accept-Encoding
etag: W/"65522a5e-e37"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/images/location.svg
107.150.7.113404 Not Found 146 B URL GET HTTP/2 upostvtgvoiuya.xyz/static/images/location.svg
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type HTML document text
- HTML document text
- HTML document, ASCII text, with no line terminators
Hash 40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/images/location.svg HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/static/css/megamenu-v4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Sun, 10 Dec 2023 03:20:39 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
upostvtgvoiuya.xyz/static/js/megamenu-additions.js
107.150.7.113200 OK 1.3 kB URL GET HTTP/2 upostvtgvoiuya.xyz/static/js/megamenu-additions.js
IP 107.150.7.113:443
ASN #8100 ASN-QUADRANET-GLOBAL
Requested by https://upostvtgvoiuya.xyz/
Certificate IssuerLet's Encrypt
Subjectwww.upostvtgvoiuya.xyz
Fingerprint40:61:E3:2F:80:7B:38:40:02:40:46:6E:5A:7C:97:6C:45:8B:23:6D
ValiditySat, 09 Dec 2023 09:15:46 GMT - Fri, 08 Mar 2024 09:15:45 GMT
File type ASCII text, with very long lines (1447), with no line terminators
Hash 1c913ee614c1d6875a47a3a3bd8e9096
4fc17c58cb33ce9611a86c947deb8ca4abc04e40
ebb943bb747b6f708237a03636f3710d0f120e6cea93f6c3bbb515b0d29fd90a
Analyzer Verdict Alert urlquery phishing Phishing - US Postal Service
OpenPhish phishing United States Postal Service
GET /static/js/megamenu-additions.js HTTP/1.1
Host: upostvtgvoiuya.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://upostvtgvoiuya.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 10 Dec 2023 03:20:37 GMT
content-type: application/javascript
last-modified: Mon, 13 Nov 2023 13:53:30 GMT
vary: Accept-Encoding
etag: W/"65522a5a-541"
expires: Sun, 10 Dec 2023 15:20:37 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2