firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bdb8b66c705a7b996496d780f50c00b5
403ae92039fcc933870f51f913f78ccaf9652256
c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Content-Length, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 21 Oct 2022 22:19:14 GMT
Expires: Fri, 21 Oct 2022 22:44:05 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: nhoVemM2ePi69N1kparVgdzC4OhZ3aWIU_h0Hd5HVvJWVI88TN3mHQ==
Age: 3316
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c19f4a1def760c07cbc4aec1d0d6c050
6ad911a7c02f5e5fdd82fa86cae0453528d53a6d
750bba81910a4bbd78ab484ba03781a36459a0aec147d7c47424e9a9bf152b40
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "750BBA81910A4BBD78AB484BA03781A36459A0AEC147D7C47424E9A9BF152B40"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5540
Expires: Sat, 22 Oct 2022 00:46:50 GMT
Date: Fri, 21 Oct 2022 23:14:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9dc4f23f82148797f6d8041bdda3c7f7
6841ded3e2dd94fd762316d01efd43f7aafb8354
e229db1854a85b320cee574e805210f3adf5797136ea820c0a0ce9abcd63d4dd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E229DB1854A85B320CEE574E805210F3ADF5797136EA820C0A0CE9ABCD63D4DD"
Last-Modified: Thu, 20 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7541
Expires: Sat, 22 Oct 2022 01:20:11 GMT
Date: Fri, 21 Oct 2022 23:14:30 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: AOIH8mhZsrHEZeZ2p84uA+ZRWyfXIVPSq1pbDwlz773QEHn2x6S3vBje62IHh9eDgQIdgqC2f68=
x-amz-request-id: JMWK02WEZJFXHJ94
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 21 Oct 2022 23:07:24 GMT
age: 426
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bbddd1071cc23bd89a6cbf57385d0360
5359d83573f946b4e970e9bbab8dfb4bec711ba2
bec0e289ce18b4e29fd1731c2206ea50df19dc0f8141ed637f971938e642fb9c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BEC0E289CE18B4E29FD1731C2206EA50DF19DC0F8141ED637F971938E642FB9C"
Last-Modified: Wed, 19 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4806
Expires: Sat, 22 Oct 2022 00:34:36 GMT
Date: Fri, 21 Oct 2022 23:14:30 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:30 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 21 Oct 2022 22:43:40 GMT
Cache-Control: max-age=3600
Expires: Fri, 21 Oct 2022 23:02:59 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 4EyWg5SdTbNdvg-BjwvJkGUjoY1d9iw-ryW3kCjp99qexKlR6fZ_zg==
Age: 1851
ocsp.digicert.com/
200 OK 471 B IP
Hash f47cc320695635b544a761f72f3afc6f
b7cee764dcb0a625e0f8e0b4a4fce04548a1bf76
78608be3d0d6aaaf0364aed316b8676ab28d23c9b6a8ac6c147cf5d16e5cc283
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5355
Cache-Control: max-age=123691
Content-Type: application/ocsp-response
Date: Fri, 21 Oct 2022 23:14:31 GMT
Etag: "63525317-1d7"
Expires: Sun, 23 Oct 2022 09:36:02 GMT
Last-Modified: Fri, 21 Oct 2022 08:06:47 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
us-pertsmwe-usa.com/static/index/css/app.26ea219b.css
200 OK 171 B URL HTTP/2 us-pertsmwe-usa.com/static/index/css/app.26ea219b.css
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Hash 3ff850af53643e2213339b1d2d2bd00b
6f4d577557c31c37db3dbc2f9c6365b272017325
456b9ab5db90dbc839cf34f27e9ca3367bf547c7b64220c3aaf9dd354917b569
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/css/app.26ea219b.css HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: text/css
content-length: 171
last-modified: Wed, 25 May 2022 08:28:38 GMT
etag: "628de8b6-ab"
expires: Sat, 22 Oct 2022 11:14:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/css/chunk-43b8fbdd.4ce8c636.css
200 OK 44 B URL HTTP/2 us-pertsmwe-usa.com/static/index/css/chunk-43b8fbdd.4ce8c636.css
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Hash 443d2e2ace27dc25808a6a09c097ab4f
866fe672aa558625e394023a4a303e8b495c52af
f529e879687461cf3b6c62e05af0e4735269bd2bd50ce3964359791b91a8a886
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/css/chunk-43b8fbdd.4ce8c636.css HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: text/css
content-length: 44
last-modified: Wed, 25 May 2022 08:28:40 GMT
etag: "628de8b8-2c"
expires: Sat, 22 Oct 2022 11:14:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/logo-sb.svg
200 OK 3.6 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/logo-sb.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 0418f7120dc6cdd1d7aa0f8219ec9af2
3bb6c6edee3cc1c072117795611e2f67383cdc44
4b5aaf0dc8f59e71849219fae0a225aeb3914bebcc363753f22b5713627b0094
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/images/logo-sb.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/svg+xml
content-length: 3557
last-modified: Wed, 25 May 2022 08:29:58 GMT
etag: "628de906-de5"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/hamburger.svg
200 OK 546 B URL HTTP/2 us-pertsmwe-usa.com/static/index/images/hamburger.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash 37c94e8de8729be2b0b9833bafa28f3b
c675396f6d65666dd6047b6e92cbd5429556dbac
b95f434286744e3dbaf5bc56f41d4ce2640da3038461502f7ac243a5931e9435
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/images/hamburger.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/svg+xml
content-length: 546
last-modified: Wed, 25 May 2022 08:29:56 GMT
etag: "628de904-222"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/logo_mobile.svg
200 OK 2.1 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/logo_mobile.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash f8ad388b3e39b860c97de0029ae98a21
9b032ef4ef4100dda1ba44be4836e6956b11387c
9685d6241f41ac71741d0ee9b242779f640cd3b1e64bb9bbcfb8798c5be503b2
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/images/logo_mobile.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/svg+xml
content-length: 2060
last-modified: Wed, 25 May 2022 08:29:58 GMT
etag: "628de906-80c"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/search.svg
200 OK 1.5 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/search.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash ace472e478185d5f5ecd18c7d821eff7
c4c97892e41d3dd838912c42fd7a7b212f671d1b
c8b13b10e28b6b420151db578831a416b7c1805d7672eeb57e69dc697fda1e27
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/images/search.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/svg+xml
content-length: 1465
last-modified: Wed, 25 May 2022 08:30:04 GMT
etag: "628de90c-5b9"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/tracking.svg
200 OK 1.6 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/tracking.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 2fb7b372aea93502ca192e5a633d1aa1
ce358703cce32b2176cf6ec94e17341cb6f93f03
58ad849f3ea489d0b2ee4f0dd1e4fd0b613a5248fd6b127a4479646ce4735593
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/images/tracking.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/svg+xml
content-length: 1561
last-modified: Wed, 25 May 2022 08:30:06 GMT
etag: "628de90e-619"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/mailman.svg
200 OK 1.8 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/mailman.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1426a5796b4337302ee498d4a9265b38
c3b2b8042eb536d43101c5281d5aae8244d1e0e1
87f26b59587d5549f99b77e77519bf17b625c6a693931f54f62accac834e6ff1
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/images/mailman.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/svg+xml
content-length: 1827
last-modified: Wed, 25 May 2022 08:30:00 GMT
etag: "628de908-723"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/location.svg
200 OK 2.6 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/location.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 9b913bc84d41ec1c78da5889d36e1431
21b0075c9ec43a7ec769dde1d1ec8149b0686c0f
87d11356a8f76ef3af3c6d46bc4958cf3746e9a5b69e81d1df952b274319f539
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/images/location.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/svg+xml
content-length: 2586
last-modified: Wed, 25 May 2022 08:29:58 GMT
etag: "628de906-a1a"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: IxMYEC7kpNQLQWUgDDvwJA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: NCSty9rDK//1C0BEF7ulw0quBOg=
ocsp.digicert.com/
200 OK 280 B IP
Hash 7d01036e50641ce0abfc35d8f0afdf54
f92fd7ac1c97d927bfa3ef2d46cfebaea1ded699
3f355b687c2c61970c4e9c2e5e0c52dd57195d250cce2ab90f1a57d3ef5508ef
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3618
Cache-Control: max-age=161914
Content-Type: application/ocsp-response
Date: Fri, 21 Oct 2022 23:14:31 GMT
Etag: "6352ef2f-118"
Expires: Sun, 23 Oct 2022 20:13:05 GMT
Last-Modified: Fri, 21 Oct 2022 19:12:47 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 280
fast.fonts.net/t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0
200 OK 0 B URL HTTP/2 fast.fonts.net/t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0 HTTP/1.1
Host: fast.fonts.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: text/css; charset=utf-8
content-length: 0
x-amz-id-2: T0ZH1hXNoB6jtguc1LneBuShAW+pnL1xXkATYgstf9s/Ek+CPWrz2AkHZOlSFb4Uzx1M4Yl24Z8=
x-amz-request-id: PR33JFF0ZQ6CYPJT
last-modified: Tue, 23 Mar 2021 12:59:23 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
cache-control: public, max-age=0, s-maxage=604800
x-amz-meta-mtime: 1519217722
x-amz-version-id: null
cf-cache-status: HIT
age: 579045
accept-ranges: bytes
set-cookie: __cf_bm=RPzwPDzh1EWl0lN8gHrQ1mJESgqUqoUdSSccRaQfEaE-1666394071-0-Aciap1LAP70q7CXGAQG0ORI8qpL2NIagOk2YvmgR8gjtrMrj+De/7pEr1tPwYmyoaBrNQ0T/U0huDfyXBGtPkOg=; path=/; expires=Fri, 21-Oct-22 23:44:31 GMT; domain=.fonts.net; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ddb0a43a32b511-OSL
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/stamps.svg
200 OK 1.1 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/stamps.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 2e722b55bb31b83042310fbf5b45128d
cb6cd5c99c06ba8c04c7795dea4d13241eaaa045
0b68e5b64999ab2e6d137a1886410cc9e8bed0b3863aacd838a3eb008f2bb516
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/images/stamps.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/svg+xml
content-length: 1103
last-modified: Wed, 25 May 2022 08:30:06 GMT
etag: "628de90e-44f"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/schedule_pickup.svg
200 OK 1.8 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/schedule_pickup.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash d627861a77e755da093cae9b4db00b7b
fc5ac7d6bc6bf06f53b399848be232b35aa2c5b1
2a5e1fdc8e264327be71c3063cc6bf1dd8a618576310a5d26dc31ba8d6f83616
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/images/schedule_pickup.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/svg+xml
content-length: 1775
last-modified: Wed, 25 May 2022 08:30:02 GMT
etag: "628de90a-6ef"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/calculate_price.svg
200 OK 2.3 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/calculate_price.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 6204f7fb48ef86964b4b1cce343ebdde
d60b7e47e22615fdea2a24e102200090b466b862
edbb6a59137018b9a8229184aac04a2661787564cdf4484229bee96d7c11e771
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/images/calculate_price.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/svg+xml
content-length: 2302
last-modified: Wed, 25 May 2022 08:29:46 GMT
etag: "628de8fa-8fe"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/find_zip.svg
200 OK 1.5 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/find_zip.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash e30aab66bad715f4fef4b6c42f8490d2
40be7a560b0687cf57c7ef0c0600ca08203a680c
aa6ff55c203834f667cbb01cedb0d409ff3b8f1b5a4de8c89a79b2e7034a8001
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/images/find_zip.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/svg+xml
content-length: 1471
last-modified: Wed, 25 May 2022 08:29:50 GMT
etag: "628de8fe-5bf"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/holdmail.svg
200 OK 1.4 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/holdmail.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 4c8f3d7064524311ef86ddd0ded768d1
53ca5f29f603435821d07019cf123e430626f54e
2d45f10e1a6925e9500a4fb6e0223ce4ddfb492a914472ca8229fa01e3f94afa
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/images/holdmail.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/svg+xml
content-length: 1448
last-modified: Wed, 25 May 2022 08:29:56 GMT
etag: "628de904-5a8"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/change_address.svg
200 OK 1.9 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/change_address.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 3955e49630deb78cc1212ba20d83bafc
881ba502127d57c48784703683869abf4c8e28d8
b84842a014070d9363a46638e512476260162014c9bde4bcca7a9ade4177ea12
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/images/change_address.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/svg+xml
content-length: 1869
last-modified: Wed, 25 May 2022 08:29:48 GMT
etag: "628de8fc-74d"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/po_box.svg
200 OK 1.6 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/po_box.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash d3793852de4f419211843c1f4c05ddb4
8c7eccab4e3865a04553d720c150e4506d8990a0
7487a4b55d8cb9a837520dcb7ea5e50c915b5797c165f9bf7a7a3f8fe468a0a0
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/images/po_box.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/svg+xml
content-length: 1639
last-modified: Wed, 25 May 2022 08:30:02 GMT
etag: "628de90a-667"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/free_boxes.svg
200 OK 1.1 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/free_boxes.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash dc788e0d1e8c7d9463a99882e622730c
a079d9612a9c119a9419b620d9dcfc141dd7e011
a3f1dfab56de547e28606e3e2150167339be6a35c8385486066924874d14df47
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/images/free_boxes.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/svg+xml
content-length: 1066
last-modified: Wed, 25 May 2022 08:29:50 GMT
etag: "628de8fe-42a"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/featured_clicknship.svg
200 OK 1.1 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/featured_clicknship.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1078), with no line terminators
Hash 375ed61778c1a49c8d1ea21f31748719
476785aa7126fbd9dcaa3bce84b57c3c120bd5a4
23edd9ac5dba678e1e5f97f2397a69d295e257c4a56e462c686557246081ffa2
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/images/featured_clicknship.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/svg+xml
content-length: 1078
last-modified: Wed, 25 May 2022 08:29:50 GMT
etag: "628de8fe-436"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/go-now.png
200 OK 20 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/go-now.png
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type PNG image data, 210 x 142, 8-bit/color RGBA, non-interlaced\012- data
Hash d0dad9004bae0df70b06b75557b1df62
4a080764de6b97902413f5c836432a30da348517
2ff8048ab175abf501e134d00a973ca31a7b0de09c2777eab0a2c9dc07ca0289
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/images/go-now.png HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/png
content-length: 20334
last-modified: Wed, 25 May 2022 08:29:54 GMT
etag: "628de902-4f6e"
expires: Sun, 20 Nov 2022 23:14:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/go-now(1).png
200 OK 8.0 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/go-now(1).png
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type PNG image data, 227 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash 49754396635190a6532dd376acc76ee1
526df243e2adbf5719b082c5e04190ed40209ccd
0962cc2915393132882747bf55b069572324019764af92ec02d5d0249bfdff99
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/images/go-now(1).png HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/png
content-length: 8026
last-modified: Wed, 25 May 2022 08:29:52 GMT
etag: "628de900-1f5a"
expires: Sun, 20 Nov 2022 23:14:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/go-now(2).png
200 OK 27 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/go-now(2).png
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type PNG image data, 210 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash b596424d2e958b51d7a68b46cadb6855
77eeeff212b8cd75a31beb954907e20bc5f8c831
daaeb825e97d878d0b5d5dfce37a2dd592ac0e1c5b887e24705835442d317365
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/images/go-now(2).png HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/png
content-length: 26972
last-modified: Wed, 25 May 2022 08:29:52 GMT
etag: "628de900-695c"
expires: Sun, 20 Nov 2022 23:14:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/go-now(3).png
200 OK 20 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/go-now(3).png
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type PNG image data, 210 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash 6311ef7a60f86d77aa48fcc48a675a31
96bc8b2fe87b126ffbf0d7b7ad8419661cb6bd9c
70d715475fb0a4756fc65c50cbb2cf0ca15f7311efc6c54b18e045e6ab202251
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/images/go-now(3).png HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/png
content-length: 19969
last-modified: Wed, 25 May 2022 08:29:52 GMT
etag: "628de900-4e01"
expires: Sun, 20 Nov 2022 23:14:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/go-now(4).png
200 OK 22 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/go-now(4).png
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type PNG image data, 227 x 170, 8-bit/color RGBA, non-interlaced\012- data
Hash 22ab573e325c944450873345437b0887
0446e4d20c824d38ef4d427cf7e025c8f034f11a
d8573e3e13b1fb40173ea39d5e7fc1b935ae1239b9ca37ac3d7fedf3d966f4ed
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/images/go-now(4).png HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/png
content-length: 22133
last-modified: Wed, 25 May 2022 08:29:54 GMT
etag: "628de902-5675"
expires: Sun, 20 Nov 2022 23:14:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/progress.gif
200 OK 15 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/progress.gif
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type GIF image data, version 89a, 138 x 138\012- data
Hash 38b64d47a4b15d848bc5f138d4fe888e
ead63c4a221437d07dfff1c512253309544386b9
07c93cd3e95f583d77a28052ab34558d9e136ff401bfb43f7b3d13a11bd8221f
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/images/progress.gif HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: image/gif
content-length: 15039
last-modified: Wed, 25 May 2022 08:30:02 GMT
etag: "628de90a-3abf"
expires: Sun, 20 Nov 2022 23:14:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/favicon.ico
200 OK 1.2 kB URL HTTP/2 us-pertsmwe-usa.com/favicon.ico
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 178819cc32a7774822e3550c57cd20aa
c8050ec440e8cc1367a6115934edc0bf94a0d343
8565aaa87282f585b8a021ee0e693f662eb179df62890d01e086cc9f23dec1d2
Analyzer Verdict Alert openphish United States Postal Service
GET /favicon.ico HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Wed, 25 May 2022 08:34:14 GMT
etag: "628dea06-47e"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/utility_languages.png
200 OK 1.5 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/utility_languages.png
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced\012- data
Hash 410956805d5701e87299cff412827e1a
5de9a390649dfc12e3d6df431140d499ad8abd67
6e727dbf5b0f4a3ec76762e445ad2c5cb750f7de41afb8b0342f903124d09826
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/images/utility_languages.png HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/static/index/css/megamenu-v2.css
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: image/png
content-length: 1456
last-modified: Wed, 25 May 2022 08:30:18 GMT
etag: "628de91a-5b0"
expires: Sun, 20 Nov 2022 23:14:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/images/utility_customer_service.png
200 OK 1.3 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/images/utility_customer_service.png
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 3500d365cd94527c71fe9c70d5cda435
0c7bede628d74cefaf5fce1b675c0ce3c72c78c9
34b28a24c5414dab68a15be6613536d905faf33fbf1aed8ee4702caa60be9bca
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/images/utility_customer_service.png HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/static/index/css/megamenu-v2.css
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: image/png
content-length: 1307
last-modified: Wed, 25 May 2022 08:30:18 GMT
etag: "628de91a-51b"
expires: Sun, 20 Nov 2022 23:14:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/fonts/featured_clicknship.svg
200 OK 91 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/fonts/featured_clicknship.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (512)
Hash d9638861c2540eb38a7646f4532b45ae
531eb9e896933cd7f308fe0a9c1eb90290dc562b
f6e8bfb1f1203b144d63cee45a6f2e572f47efda0bef699ec17c6744dca7d6f0
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/fonts/featured_clicknship.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/static/index/css/megamenu-v2.css
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: image/svg+xml
content-length: 91041
last-modified: Wed, 25 May 2022 08:29:32 GMT
etag: "628de8ec-163a1"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/fonts/stamps.svg
200 OK 91 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/fonts/stamps.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (512)
Hash d9638861c2540eb38a7646f4532b45ae
531eb9e896933cd7f308fe0a9c1eb90290dc562b
f6e8bfb1f1203b144d63cee45a6f2e572f47efda0bef699ec17c6744dca7d6f0
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/fonts/stamps.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/static/index/css/megamenu-v2.css
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: image/svg+xml
content-length: 91041
last-modified: Wed, 25 May 2022 08:30:30 GMT
etag: "628de926-163a1"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/fonts/calculate_price.svg
200 OK 91 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/fonts/calculate_price.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (512)
Hash d9638861c2540eb38a7646f4532b45ae
531eb9e896933cd7f308fe0a9c1eb90290dc562b
f6e8bfb1f1203b144d63cee45a6f2e572f47efda0bef699ec17c6744dca7d6f0
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/fonts/calculate_price.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/static/index/css/megamenu-v2.css
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: image/svg+xml
content-length: 91041
last-modified: Wed, 25 May 2022 08:29:22 GMT
etag: "628de8e2-163a1"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/fonts/location.svg
200 OK 91 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/fonts/location.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (512)
Hash d9638861c2540eb38a7646f4532b45ae
531eb9e896933cd7f308fe0a9c1eb90290dc562b
f6e8bfb1f1203b144d63cee45a6f2e572f47efda0bef699ec17c6744dca7d6f0
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/fonts/location.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/static/index/css/megamenu-v2.css
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: image/svg+xml
content-length: 91041
last-modified: Wed, 25 May 2022 08:29:42 GMT
etag: "628de8f6-163a1"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/css/footer-sb.css
200 OK 92 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/css/footer-sb.css
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Hash 1966c0de554fd949b0da7ed77cd49705
72e580f89d4342153fbc374855c8fd2f7bf2b8aa
f34e7ec1a2c434ea323a24933291795d65d2fca49f204a3cafc0413b10b35e02
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/css/footer-sb.css HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: text/css
last-modified: Wed, 25 May 2022 08:28:42 GMT
vary: Accept-Encoding
etag: W/"628de8ba-f66"
expires: Sat, 22 Oct 2022 11:14:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/fonts/mailman.svg
200 OK 91 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/fonts/mailman.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (512)
Hash d9638861c2540eb38a7646f4532b45ae
531eb9e896933cd7f308fe0a9c1eb90290dc562b
f6e8bfb1f1203b144d63cee45a6f2e572f47efda0bef699ec17c6744dca7d6f0
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/fonts/mailman.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/static/index/css/megamenu-v2.css
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: image/svg+xml
content-length: 91041
last-modified: Wed, 25 May 2022 08:29:44 GMT
etag: "628de8f8-163a1"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/fonts/package-intercept.svg
200 OK 91 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/fonts/package-intercept.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (512)
Hash d9638861c2540eb38a7646f4532b45ae
531eb9e896933cd7f308fe0a9c1eb90290dc562b
f6e8bfb1f1203b144d63cee45a6f2e572f47efda0bef699ec17c6744dca7d6f0
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/fonts/package-intercept.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/static/index/css/megamenu-v2.css
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: image/svg+xml
content-length: 91041
last-modified: Wed, 25 May 2022 08:30:28 GMT
etag: "628de924-163a1"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/js/vue.min.js
200 OK 128 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/js/vue.min.js
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Size 128 kB (128362 bytes)
Hash a556e6be588157bec2a4bc9af499468c
1a98ffdd8ba35b7cf192595e64ddd365aa21d6bb
39c3dc86262a4ea9f046c7da04ff06cc8d89d590573b77c451d21a2f354f990b
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/js/vue.min.js HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: application/javascript
last-modified: Wed, 25 May 2022 08:30:26 GMT
vary: Accept-Encoding
etag: W/"628de922-167d1"
expires: Sat, 22 Oct 2022 11:14:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/js/axios.min.js
200 OK 98 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/js/axios.min.js
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Hash 0c517bdb6d9c4260a70663db496a57ca
081532704b31e86c4373adcf1ec5f8446a4d6b14
5722d067795b99563fc47b88bd229d5a0d983d0fdae6419990b0bc2a3b9701ca
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/js/axios.min.js HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: application/javascript
last-modified: Wed, 25 May 2022 08:30:22 GMT
vary: Accept-Encoding
etag: W/"628de91e-4559"
expires: Sat, 22 Oct 2022 11:14:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/css/footer.css
200 OK 92 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/css/footer.css
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Hash fd0b419927541afbd96affb83a3ae003
53035ea34c19f0f1bd3c15c957c5c9775bd3cd03
21ef788702b7ec5cb289f9b419790c701536b82abdb7da207404553d1f9fb544
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/css/footer.css HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: text/css
last-modified: Wed, 25 May 2022 08:28:42 GMT
vary: Accept-Encoding
etag: W/"628de8ba-e08"
expires: Sat, 22 Oct 2022 11:14:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/css/bootstrap.min.css
200 OK 118 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/css/bootstrap.min.css
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Size 118 kB (118040 bytes)
Hash 515b0258e434d50f290a85ec1fd6ae27
e447553e5140868c62ca5901ee2f30cf4fb462ae
3b44fd8798f6493b25ac236837926c03235ad7a431dc87034324ae12f877a8bd
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/css/bootstrap.min.css HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: text/css
last-modified: Wed, 25 May 2022 08:28:38 GMT
vary: Accept-Encoding
etag: W/"628de8b6-24c67"
expires: Sat, 22 Oct 2022 11:14:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/css/calendar.css
200 OK 103 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/css/calendar.css
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Size 103 kB (103261 bytes)
Hash 019f5a73bf2326c992d5e5074672f525
c809e7d1cc02614f89839fdaa4720d4055a1443a
3b9e774ce0ce78cf4b771801149d914e178d7c69b8c5315dc986d7c8da3b4123
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/css/calendar.css HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: text/css
last-modified: Wed, 25 May 2022 08:28:38 GMT
vary: Accept-Encoding
etag: W/"628de8b6-d1d1"
expires: Sat, 22 Oct 2022 11:14:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/css/tracking-cross-sell.css
200 OK 92 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/css/tracking-cross-sell.css
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Hash 0085f1e3eb119bf18f357eb65d0c8f51
e35e67c90a1d5a8860222187eafe2de4534def76
89476249ad0c82e2b1417f7e55e5f70eea8cea8d711cb5877edd4b1691670cab
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/css/tracking-cross-sell.css HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: text/css
last-modified: Wed, 25 May 2022 08:28:46 GMT
vary: Accept-Encoding
etag: W/"628de8be-ef9"
expires: Sat, 22 Oct 2022 11:14:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/fonts/collectors.svg
200 OK 91 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/fonts/collectors.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (512)
Hash d9638861c2540eb38a7646f4532b45ae
531eb9e896933cd7f308fe0a9c1eb90290dc562b
f6e8bfb1f1203b144d63cee45a6f2e572f47efda0bef699ec17c6744dca7d6f0
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/fonts/collectors.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/static/index/css/megamenu-v2.css
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: image/svg+xml
content-length: 91041
last-modified: Wed, 25 May 2022 08:29:24 GMT
etag: "628de8e4-163a1"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/css/datepicker3.css
200 OK 94 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/css/datepicker3.css
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Hash dd4f8a1015a80ef10664b0c752e0e25f
407a025207a34d48e9ab7f4865e1188930ba06d5
9baf557d624b9dd5c782a9dc09dd1defcf6571ffa9a6ab2188c0bcb5e4ae566b
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/css/datepicker3.css HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: text/css
last-modified: Wed, 25 May 2022 08:28:42 GMT
vary: Accept-Encoding
etag: W/"628de8ba-5dad"
expires: Sat, 22 Oct 2022 11:14:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff
200 OK 47 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type Web Open Font Format, TrueType, length 46657, version 1.0\012- data
Hash 3beb1cf49dc702cd4de8618eeb344dd4
080e1b4dc8b43ddb06961a3490857cdb936a8c2a
ffd7af6177837790e2620c429dce0da6dc7d18bbdcf87a7ed2c033a03513e947
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/static/index/css/main-sb.css
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: font/woff
content-length: 46657
last-modified: Wed, 25 May 2022 08:28:58 GMT
etag: "628de8ca-b641"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff
200 OK 59 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type Web Open Font Format, TrueType, length 58690, version 1.0\012- data
Hash a6e2d3921c9ea0fd81897d9ae7a33ba4
bc31969f2fb1926a15cd678b3e573c37a44e5421
f2e2ef638dd9aac863f0f6027ceb784cd4c5a14a676bed909c8f2ac4b088d510
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/static/index/css/main-sb.css
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: font/woff
content-length: 58690
last-modified: Wed, 25 May 2022 08:29:24 GMT
etag: "628de8e4-e542"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/fonts/3b303641-706e-4221-94c4-4fb491f4f8ef.woff2
200 OK 32 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/fonts/3b303641-706e-4221-94c4-4fb491f4f8ef.woff2
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type Web Open Font Format (Version 2), TrueType, length 31696, version 2.655\012- data
Hash 10290cd4148c956fa2287d2ab5c71631
0186c7c5f9e12701022362effcab5c7f08ef0a29
0419465d8b720ca4a1a4307e1aaf37c9c1fda715473e458a9e7d1a94854c68e3
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/fonts/3b303641-706e-4221-94c4-4fb491f4f8ef.woff2 HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/static/index/css/main.css
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: font/woff2
content-length: 31696
last-modified: Wed, 25 May 2022 08:28:56 GMT
etag: "628de8c8-7bd0"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/fonts/b0868b4c-234e-47d3-bc59-41ab9de3c0db.woff2
200 OK 40 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/fonts/b0868b4c-234e-47d3-bc59-41ab9de3c0db.woff2
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type Web Open Font Format (Version 2), TrueType, length 40372, version 2.655\012- data
Hash 9bb1ce2aa7fed31792aa1750d0306831
6a538f9d945eaa6f7e8f97b4530183347d20bee5
5e284133b1b11165e7354b29cfabb5f214c473f0ca18198a49c052d8df3f172f
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/fonts/b0868b4c-234e-47d3-bc59-41ab9de3c0db.woff2 HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/static/index/css/main.css
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: font/woff2
content-length: 40372
last-modified: Wed, 25 May 2022 08:29:14 GMT
etag: "628de8da-9db4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/css/megamenu-v2.css
200 OK 48 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/css/megamenu-v2.css
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Hash 7eceabbbc01913e153eb9c4c444a49a2
8ba6526d9b6ad1ccdac3db3f6a6da56df9bdf08d
7087f4232f00849a34f73ddd86ffb63dd7864c103d3e3091ce5a4d9a52a9d24b
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/css/megamenu-v2.css HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: text/css
last-modified: Wed, 25 May 2022 08:28:44 GMT
vary: Accept-Encoding
etag: W/"628de8bc-dada"
expires: Sat, 22 Oct 2022 11:14:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff
200 OK 52 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
File type Web Open Font Format, TrueType, length 51685, version 1.0\012- data
Hash a93e96be336c174933e68ef61d56e0d3
48f7a75a367904ff4a9a79689a508e29edda462c
cc469406025b7ce0913cdefc664007cd0fc46bc66a740dc7aff67cc041bccde0
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/static/index/css/main-sb.css
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: font/woff
content-length: 51685
last-modified: Wed, 25 May 2022 08:29:04 GMT
etag: "628de8d0-c9e5"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/css/main-sb.css
200 OK 3.6 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/css/main-sb.css
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Hash f8776807878f11c243851d2f5e19fb0d
cf34ffa3e54ea2fdbe7161f39c6b31f2abc7174a
8a8e0477ee2d1de6b25c3ebe4bdfe789747a7d54184d7724f90fc65ae5f9195a
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/css/main-sb.css HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: text/css
last-modified: Wed, 25 May 2022 08:28:44 GMT
vary: Accept-Encoding
etag: W/"628de8bc-2404"
expires: Sat, 22 Oct 2022 11:14:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/css/main.css
200 OK 24 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/css/main.css
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Hash 759182b6291a6125e1762cc5ab81efea
50857d267d3e411793fa5d1f06d599fae7d39947
5e2493b7fa88266ffe814ab1fea1372c7ef251df19dd1afc762abad374c8df36
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/css/main.css HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: text/css
last-modified: Wed, 25 May 2022 08:28:44 GMT
vary: Accept-Encoding
etag: W/"628de8bc-18c05"
expires: Sat, 22 Oct 2022 11:14:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/css/jquery-ui.min.css
200 OK 95 kB URL HTTP/2 us-pertsmwe-usa.com/static/index/css/jquery-ui.min.css
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Hash 41c999c13494bc63b673ba9370ec6893
a22542793ae806c9ef1a17cb20e448068a0d1521
4c771f35a6454a803c1495cd2c074f18154740a11c1fea3a89e8bf0d51775771
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/css/jquery-ui.min.css HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: text/css
last-modified: Wed, 25 May 2022 08:28:44 GMT
vary: Accept-Encoding
etag: W/"628de8bc-4d22"
expires: Sat, 22 Oct 2022 11:14:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 56aa4d33e288d7ec3acf3ac1a61ef7f9
ac2e2f3609cc604dde554e37471567c042bf8191
544823f794ac3e837c81449d896a9dcbe94f4d59a13e293d84b5af44531141d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "544823F794AC3E837C81449D896A9DCBE94F4D59A13E293D84B5AF44531141D0"
Last-Modified: Wed, 19 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19184
Expires: Sat, 22 Oct 2022 04:34:16 GMT
Date: Fri, 21 Oct 2022 23:14:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 56aa4d33e288d7ec3acf3ac1a61ef7f9
ac2e2f3609cc604dde554e37471567c042bf8191
544823f794ac3e837c81449d896a9dcbe94f4d59a13e293d84b5af44531141d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "544823F794AC3E837C81449D896A9DCBE94F4D59A13E293D84B5AF44531141D0"
Last-Modified: Wed, 19 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19184
Expires: Sat, 22 Oct 2022 04:34:16 GMT
Date: Fri, 21 Oct 2022 23:14:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 56aa4d33e288d7ec3acf3ac1a61ef7f9
ac2e2f3609cc604dde554e37471567c042bf8191
544823f794ac3e837c81449d896a9dcbe94f4d59a13e293d84b5af44531141d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "544823F794AC3E837C81449D896A9DCBE94F4D59A13E293D84B5AF44531141D0"
Last-Modified: Wed, 19 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19184
Expires: Sat, 22 Oct 2022 04:34:16 GMT
Date: Fri, 21 Oct 2022 23:14:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 56aa4d33e288d7ec3acf3ac1a61ef7f9
ac2e2f3609cc604dde554e37471567c042bf8191
544823f794ac3e837c81449d896a9dcbe94f4d59a13e293d84b5af44531141d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "544823F794AC3E837C81449D896A9DCBE94F4D59A13E293D84B5AF44531141D0"
Last-Modified: Wed, 19 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19184
Expires: Sat, 22 Oct 2022 04:34:16 GMT
Date: Fri, 21 Oct 2022 23:14:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 56aa4d33e288d7ec3acf3ac1a61ef7f9
ac2e2f3609cc604dde554e37471567c042bf8191
544823f794ac3e837c81449d896a9dcbe94f4d59a13e293d84b5af44531141d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "544823F794AC3E837C81449D896A9DCBE94F4D59A13E293D84B5AF44531141D0"
Last-Modified: Wed, 19 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19184
Expires: Sat, 22 Oct 2022 04:34:16 GMT
Date: Fri, 21 Oct 2022 23:14:32 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93090b5a-5307-421c-8902-654efd5f9769.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93090b5a-5307-421c-8902-654efd5f9769.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bb1054cc59fc865911630fd27da6be69
b9c69a4be7d6747f33e10ff8df22901baced3b3c
90d8f004bbecb20c3d6e0379202dc5d32fbfe0eb81e1da9a142f6e96582d6a5a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93090b5a-5307-421c-8902-654efd5f9769.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9337
x-amzn-requestid: b28a9696-dea4-411f-b5f9-48b2c4463913
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aX-pTEpdoAMFXeg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6353116e-11c9f335631c64cf5ee3c582;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 21:38:54 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: LRYMcBK7mMR3fMdHFWS_uLc9GCgaxLsr0qzRuNn8rxByJoIe9RbwAg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Fri, 21 Oct 2022 22:02:19 GMT
age: 4333
etag: "b9c69a4be7d6747f33e10ff8df22901baced3b3c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe483f228-39c4-47f0-a896-a8e068a8e128.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe483f228-39c4-47f0-a896-a8e068a8e128.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f0c231ec92860d4904212d6629102eb5
f1a5bdcfc17d101f97bec17d312b60f6a012e833
10a5b0192165bdbcbc52dfa2d3ba928e0f8f8d51cbba037cdf326391d77f973d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe483f228-39c4-47f0-a896-a8e068a8e128.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14641
x-amzn-requestid: 7d857583-c433-4627-80a3-adbd17617218
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aX-MSHNWoAMFfhg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635310b4-44c233a100a26cda663cf850;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 21:35:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: F4nD1gpKmgeDR74chfL73p-GozN6nOwgK3TWt14-we44Gi92pM11nQ==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 21 Oct 2022 22:00:16 GMT
age: 4456
etag: "f1a5bdcfc17d101f97bec17d312b60f6a012e833"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f5552d5-4394-409a-9a9c-43e4ebf38ee1.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f5552d5-4394-409a-9a9c-43e4ebf38ee1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cdaacab30d73a7d05180cc16f4a96a3f
6cc0e39e0decbc20c765f171f63affd85fc9e6da
f015c3b1d838bd7d100ee104551bed2bb06a512b20ce3e5ac419d54b747fadd0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f5552d5-4394-409a-9a9c-43e4ebf38ee1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10720
x-amzn-requestid: 96267527-f482-4bfa-ba7a-12467408efe9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aX-MvGutIAMFc8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635310b7-25f2624559b0fb7d62ced3a3;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 21:35:51 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 4--AiSTKMMOm9HnJL_ervFnd5rkQ-WZfGM-FNkxXKO892SPw67cxXA==
via: 1.1 1f6e68152880a39d72e6bf2996cd6a60.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 21 Oct 2022 22:11:42 GMT
age: 3770
etag: "6cc0e39e0decbc20c765f171f63affd85fc9e6da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac68ee8c-aa22-4fb4-882b-cc2feda223cc.jpeg
200 OK 3.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac68ee8c-aa22-4fb4-882b-cc2feda223cc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d3efbae0a83231a84308e78e8995bd5a
2df1ef7a179c9eae33bebad4160642080db196fa
27e4ea4d8d3eba19cb4af8f35ef974203be0c05382aff51f4f04b11f33030e99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac68ee8c-aa22-4fb4-882b-cc2feda223cc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3847
x-amzn-requestid: 3a701421-d0d7-4e96-adb5-34ed97921aef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aX-kPFxzoAMF5Iw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6353114e-606f6bb50778fa513b9f6f21;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 21:38:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: uXF08Q8sGayYlZ6SBkoYy25JjaTck_3iuLirri4gZLQ2e3IwRzh4zQ==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 21 Oct 2022 22:11:53 GMT
age: 3759
etag: "2df1ef7a179c9eae33bebad4160642080db196fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf03028b-ea27-4e03-96d1-1345edf9b1fa.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf03028b-ea27-4e03-96d1-1345edf9b1fa.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c3ce2aa0bfcd181c02a91d31eeaf1ba2
823c1926ab3607d8545f366d7615656ba380a086
aadd1973d55fd990c3ff2a1b666b63a9d235fbf3bdaffdf98d824093c04a7e56
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf03028b-ea27-4e03-96d1-1345edf9b1fa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5261
x-amzn-requestid: 31eab25b-d360-4732-b652-07ef45f3a75e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aX-okH40IAMFuig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63531169-299e2d3e157c1f0a7ba89f0e;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 21:38:49 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: G6LpQY-pDghuTYCDyn4P4Qt5wvTzwQb-LU7WSodtJq6vva4DN7Qfdg==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Fri, 21 Oct 2022 22:11:49 GMT
age: 3763
etag: "823c1926ab3607d8545f366d7615656ba380a086"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5f34cfb-1029-497a-8d09-65db888e6f11.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5f34cfb-1029-497a-8d09-65db888e6f11.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f4fb0f4c9ac5a88678baf456107f5341
f6c54dbdfad7e243fe38c03f004c4c79f96b2892
b2fc6c453d7ed610521fcf34d7736a20191d86b485fd57236d2d2c4849cbb8d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5f34cfb-1029-497a-8d09-65db888e6f11.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7821
x-amzn-requestid: b3b72561-80fd-4b73-862c-ad070f135634
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aX-LzEkrIAMFmrQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635310b1-73f427947c17f35667c0b443;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 21:35:45 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Mq7h4TJkHKd-I9c01ao1yJ3izpJLRiMG_Sk3_e2pQDGCyunY2RlI3Q==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 21 Oct 2022 22:02:32 GMT
age: 4320
etag: "f6c54dbdfad7e243fe38c03f004c4c79f96b2892"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/fonts/schedule_pickup.svg
200 OK 0 B URL HTTP/2 us-pertsmwe-usa.com/static/index/fonts/schedule_pickup.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/fonts/schedule_pickup.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/static/index/css/megamenu-v2.css
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: image/svg+xml
content-length: 91041
last-modified: Wed, 25 May 2022 08:30:28 GMT
etag: "628de924-163a1"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/
200 OK 0 B IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET / HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
set-cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e; path=/
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/fonts/find_zip.svg
200 OK 0 B URL HTTP/2 us-pertsmwe-usa.com/static/index/fonts/find_zip.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/fonts/find_zip.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/static/index/css/megamenu-v2.css
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: image/svg+xml
content-length: 91041
last-modified: Wed, 25 May 2022 08:29:32 GMT
etag: "628de8ec-163a1"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/fonts/schedule-redelivery.svg
200 OK 0 B URL HTTP/2 us-pertsmwe-usa.com/static/index/fonts/schedule-redelivery.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/fonts/schedule-redelivery.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/static/index/css/megamenu-v2.css
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: image/svg+xml
content-length: 91041
last-modified: Wed, 25 May 2022 08:30:28 GMT
etag: "628de924-163a1"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/css/schedule-redelivery.css
200 OK 0 B URL HTTP/2 us-pertsmwe-usa.com/static/index/css/schedule-redelivery.css
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Analyzer Verdict Alert openphish United States Postal Service
GET /static/index/css/schedule-redelivery.css HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:31 GMT
content-type: text/css
last-modified: Wed, 25 May 2022 08:28:46 GMT
vary: Accept-Encoding
etag: W/"628de8be-6a8c"
expires: Sat, 22 Oct 2022 11:14:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
us-pertsmwe-usa.com/static/index/fonts/search.svg
200 OK 0 B URL HTTP/2 us-pertsmwe-usa.com/static/index/fonts/search.svg
IP
ASN #139646 HONG KONG Megalayer Technology Co.,Limited
Analyzer Verdict Alert openphish United States Postal Service
fortinet Phishing
GET /static/index/fonts/search.svg HTTP/1.1
Host: us-pertsmwe-usa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us-pertsmwe-usa.com/static/index/css/megamenu-v2.css
Cookie: PHPSESSID=a92a0eca10600f0f3aa0989a8d32c49e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 21 Oct 2022 23:14:32 GMT
content-type: image/svg+xml
content-length: 91041
last-modified: Wed, 25 May 2022 08:30:28 GMT
etag: "628de924-163a1"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
154.31.41.196
93.184.220.29
104.17.224.78
23.36.76.226