Report - 39928-canadapost.com/deposit/sco/

Report Overview

Submitted URL
39928-canadapost.com/deposit/sco/
IP
91.202.233.157
ASN
#200593 Prospero Ooo
Submitted
2024-04-18 20:21:48
Access
public
Website Title
Sign in | Scotiabank
Final URL
39928-canadapost.com/deposit/sco/
Tags
scotiabank financial phishing
urlquery detections
Phishing - Scotiabank

Detections

urlquery
47
Network Intrusion Detection
1
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-18	449 B	32 kB	151.101.2.137
39928-canadapost.com	unknown	2024-02-19	2024-02-24	2024-02-26	26 kB	231 kB	91.202.233.157

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-18 20:21:22	medium	91.202.233.157	Client IP	ET DROP Spamhaus DROP Listed Traffic Inbound group 13

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	39928-canadapost.com/deposit/sco/	Scotiabank

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	39928-canadapost.com/deposit/sco/	67 B	2023-10-13	2024-05-01
Pretty URL 39928-canadapost.com/deposit/sco/ IP 91.202.233.157 ASN #200593 Prospero Ooo Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-13 16:22:12 Last Seen2024-05-01 18:17:48 Times Seen37 Hash bd5abb3efb8b83d4dabd25c330eaaa8d bc8981fabbf42b744cbe74084b936bb062609dd6 b1d9fbdfb9a380355ad06856f6fb34f5048c26f3d5b15d85939e6d690608e579 Loading...

	39928-canadapost.com/assets/js/actions.js?v=1713471683	778 B	2023-03-09	2024-05-01
Pretty URL 39928-canadapost.com/assets/js/actions.js?v=1713471683 IP 91.202.233.157 ASN #200593 Prospero Ooo Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 21:47:40 Last Seen2024-05-01 18:17:48 Times Seen117 Hash a402964267888cb8341280db40c3e42f e52583b6d5d36b7fd5dc88458ff42bc63affe1eb 411a7dde58e7f50627e413a47dda8ef4d5d11ec89ac4b78b8416a66badf7bd60 Loading...

	39928-canadapost.com/deposit/sco/	2.7 kB	2023-10-27	2024-04-27
Pretty URL 39928-canadapost.com/deposit/sco/ IP 91.202.233.157 ASN #200593 Prospero Ooo Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-27 15:36:58 Last Seen2024-04-27 18:08:04 Times Seen8 Hash 0b314f9dcb60e41e1f132b7cd8f04943 3f0cc4f628402e92c68bc9a8414dcf5c5c5b1393 b161232135498f1d6d18ad6fc3c96beba8c5bfe989a29660bb57c586934d78a3 Loading...

	39928-canadapost.com/deposit/sco/	196 B	2023-10-27	2024-04-27
Pretty URL 39928-canadapost.com/deposit/sco/ IP 91.202.233.157 ASN #200593 Prospero Ooo Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-27 15:36:58 Last Seen2024-04-27 18:08:04 Times Seen8 Hash eaabe6df9ef3dae718347c52e5dd2204 16df48a6d72bc1f7b7d2f90e7b36961da9714954 f2ef122b1fe300ef082242dd337548d3493ef7485299d0300ce58761e1b655d9 Loading...

	unknown	27 B	2023-04-10	2024-05-02
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-10 15:53:31 Last Seen2024-05-02 05:28:34 Times Seen30565 Hash 7688ca9eb3ca1c878821b1e3fe2c23d7 2c41fd7e9f8312d6fed18b21e1a0589413e35553 793bae9539499e6e02187febbd2e20fd17dd40260033f5175dbfc2f294440d9a Loading...

	code.jquery.com/jquery-3.6.0.min.js	90 kB	2023-03-07	2024-05-02
Pretty URL code.jquery.com/jquery-3.6.0.min.js IP 151.101.2.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-05-02 05:24:10 Times Seen264452 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

HTTP Transactions (47)

URL IP Response Size

39928-canadapost.com/deposit/sco/

91.202.233.157

200 OK

10 kB

URL User Request GET HTTP/1.1
39928-canadapost.com/deposit/sco/
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (1589), with CRLF line terminators
Size
10 kB (9973 bytes)
Hash
979cf2f560a3c8fd888abf7081019314
07275275e4c09c8aa25d3fe5f82cf8927e58c8a6
1d779d893553d2668a6cf7bceb3b7e1262deaa61de49912fd99df4ce33cf6536

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank
OpenPhish	phishing	Scotiabank

HTTP Headers

GET /deposit/sco/ HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 20:21:22 GMT
Server: Apache/2.4.59 (Ubuntu)
Set-Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9973
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/login.css

91.202.233.157

200 OK

15 kB

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/login.css
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
Unicode text, UTF-8 text, with very long lines (43136), with CRLF line terminators
Size
15 kB (14566 bytes)
Hash
f8bd0cec1af2aefcfaafb6c506b8b44a
79081c58ab72f40fb2b42469424135eb1a6531e8
e14dd8457326c7eca381dab0e2452461e45fc0a11ec5584058e09350fffdecb9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/login.css HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/deposit/sco/
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 20:21:23 GMT
Server: Apache/2.4.59 (Ubuntu)
Last-Modified: Thu, 12 May 2022 05:02:46 GMT
ETag: "16162-5dec977f6a980-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 14566
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

39928-canadapost.com/assets/js/actions.js?v=1713471683

91.202.233.157

200 OK

318 B

URL GET HTTP/1.1
39928-canadapost.com/assets/js/actions.js?v=1713471683
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
318 B (318 bytes)
Hash
a402964267888cb8341280db40c3e42f
e52583b6d5d36b7fd5dc88458ff42bc63affe1eb
411a7dde58e7f50627e413a47dda8ef4d5d11ec89ac4b78b8416a66badf7bd60

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/js/actions.js?v=1713471683 HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/deposit/sco/
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 20:21:23 GMT
Server: Apache/2.4.59 (Ubuntu)
Last-Modified: Wed, 27 Apr 2022 18:39:38 GMT
ETag: "30a-5dda721afce80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 318
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

code.jquery.com/jquery-3.6.0.min.js

151.101.2.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.6.0.min.js
IP
151.101.2.137:443
ASN
#54113 FASTLY

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
31 kB (30875 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /jquery-3.6.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://39928-canadapost.com
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d9d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 18 Apr 2024 20:21:23 GMT
age: 5929302
x-served-by: cache-lga21931-LGA, cache-hel1410027-HEL
x-cache: HIT, HIT
x-cache-hits: 22, 774004
x-timer: S1713471684.654698,VS0,VE0
vary: Accept-Encoding
content-length: 30875
X-Firefox-Spdy: h2

39928-canadapost.com/assets/sco/files/styles.52548c4754293a7f0b9b.css

91.202.233.157

200 OK

26 kB

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/files/styles.52548c4754293a7f0b9b.css
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
26 kB (26452 bytes)
Hash
9db6ea69fbff05f0693f74c9a091bbd0
78920ad63e59473354d35ffce3dc4aad8c5d8c60
712d0f99ed21135e903b59f7f5003a710547c61801d4c275c06c60fc496362aa

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/files/styles.52548c4754293a7f0b9b.css HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/deposit/sco/
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 20:21:23 GMT
Server: Apache/2.4.59 (Ubuntu)
Last-Modified: Sun, 23 May 2021 03:21:06 GMT
ETag: "28899-5c2f6c88d4c80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 26452
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

39928-canadapost.com/assets/sco/files/7c428f63a00e5bd025fa159e8c94389f.svg

91.202.233.157

200 OK

537 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/files/7c428f63a00e5bd025fa159e8c94389f.svg
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
SVG Scalable Vector Graphics image
Size
537 B (537 bytes)
Hash
7c428f63a00e5bd025fa159e8c94389f
edb555549cbd96f27715260a7afee8e17296acc7
51bf40e3535dee036bec3df6d4b279b4373fb22cdd40632535932d6999f7e37e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/files/7c428f63a00e5bd025fa159e8c94389f.svg HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/deposit/sco/
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 20:21:23 GMT
Server: Apache/2.4.59 (Ubuntu)
Last-Modified: Sun, 23 May 2021 03:21:06 GMT
ETag: "219-5c2f6c88d4c80"
Accept-Ranges: bytes
Content-Length: 537
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/svg+xml

39928-canadapost.com/assets/sco/loading.gif

91.202.233.157

200 OK

166 kB

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/loading.gif
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
GIF image data, version 89a, 498 x 498
Size
166 kB (166466 bytes)
Hash
a742721ea2075bc3956a2ff62c9bfeef
bb72fc6b492cfd37d36a2dca0730c1ccf2e97e06
e07efed33aec4356ba72efae1eea9fbe1e922bd270ddbd0dd1a028b5a6db4140

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/loading.gif HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/deposit/sco/
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 20:21:23 GMT
Server: Apache/2.4.59 (Ubuntu)
Last-Modified: Thu, 14 Apr 2022 15:27:46 GMT
ETag: "28a42-5dc9eef94c080"
Accept-Ranges: bytes
Content-Length: 166466
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/gif

39928-canadapost.com/assets/sco/files/assets/15243e297f5364bd59f4088a864abbf7.woff

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/files/assets/15243e297f5364bd59f4088a864abbf7.woff
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/files/assets/15243e297f5364bd59f4088a864abbf7.woff HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/files/styles.52548c4754293a7f0b9b.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:23 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/files/assets/8fd30bd010d9e2c7677ec339685f958b.woff

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/files/assets/8fd30bd010d9e2c7677ec339685f958b.woff
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/files/assets/8fd30bd010d9e2c7677ec339685f958b.woff HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/files/styles.52548c4754293a7f0b9b.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:23 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/files/assets/00cecde981e3ef7491eba946f4b95fe0.woff

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/files/assets/00cecde981e3ef7491eba946f4b95fe0.woff
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/files/assets/00cecde981e3ef7491eba946f4b95fe0.woff HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/files/styles.52548c4754293a7f0b9b.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:23 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/files/assets/8424a042624210828b0fbe7a8c533b2a.woff2

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/files/assets/8424a042624210828b0fbe7a8c533b2a.woff2
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/files/assets/8424a042624210828b0fbe7a8c533b2a.woff2 HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/files/styles.52548c4754293a7f0b9b.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:23 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/files/assets/1e98970fd9c76545bbf1e1a377f4f3c2.woff2

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/files/assets/1e98970fd9c76545bbf1e1a377f4f3c2.woff2
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/files/assets/1e98970fd9c76545bbf1e1a377f4f3c2.woff2 HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/files/styles.52548c4754293a7f0b9b.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:23 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/files/assets/3ca6c3facf3966b88b55118f7821ee72.woff2

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/files/assets/3ca6c3facf3966b88b55118f7821ee72.woff2
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/files/assets/3ca6c3facf3966b88b55118f7821ee72.woff2 HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/files/styles.52548c4754293a7f0b9b.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:23 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/files/assets/50805f331bb1b697aafb6f0c28b09212.woff2

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/files/assets/50805f331bb1b697aafb6f0c28b09212.woff2
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/files/assets/50805f331bb1b697aafb6f0c28b09212.woff2 HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/files/styles.52548c4754293a7f0b9b.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:23 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/files/assets/64a8523319c68ca5e492309a68af4a9e.woff2

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/files/assets/64a8523319c68ca5e492309a68af4a9e.woff2
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/files/assets/64a8523319c68ca5e492309a68af4a9e.woff2 HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/files/styles.52548c4754293a7f0b9b.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:23 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/files/assets/0a9f36f23c26fbad0827f0a8ec86c908.woff

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/files/assets/0a9f36f23c26fbad0827f0a8ec86c908.woff
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/files/assets/0a9f36f23c26fbad0827f0a8ec86c908.woff HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/files/styles.52548c4754293a7f0b9b.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/files/assets/7e2a698e9980c7ba52f69a2717e97b86.woff

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/files/assets/7e2a698e9980c7ba52f69a2717e97b86.woff
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/files/assets/7e2a698e9980c7ba52f69a2717e97b86.woff HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/files/styles.52548c4754293a7f0b9b.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/assets/15243e297f5364bd59f4088a864abbf7.woff

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/assets/15243e297f5364bd59f4088a864abbf7.woff
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/assets/15243e297f5364bd59f4088a864abbf7.woff HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/login.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/files/assets/811a29d581fc684aa63616499cad4782.ttf

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/files/assets/811a29d581fc684aa63616499cad4782.ttf
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/files/assets/811a29d581fc684aa63616499cad4782.ttf HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/files/styles.52548c4754293a7f0b9b.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/assets/8fd30bd010d9e2c7677ec339685f958b.woff

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/assets/8fd30bd010d9e2c7677ec339685f958b.woff
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/assets/8fd30bd010d9e2c7677ec339685f958b.woff HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/login.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/assets/00cecde981e3ef7491eba946f4b95fe0.woff

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/assets/00cecde981e3ef7491eba946f4b95fe0.woff
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/assets/00cecde981e3ef7491eba946f4b95fe0.woff HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/login.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/files/assets/12b6c5fcbc2e61c7ba17f51cd9c2b8c0.ttf

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/files/assets/12b6c5fcbc2e61c7ba17f51cd9c2b8c0.ttf
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/files/assets/12b6c5fcbc2e61c7ba17f51cd9c2b8c0.ttf HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/files/styles.52548c4754293a7f0b9b.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/assets/3ca6c3facf3966b88b55118f7821ee72.woff2

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/assets/3ca6c3facf3966b88b55118f7821ee72.woff2
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/assets/3ca6c3facf3966b88b55118f7821ee72.woff2 HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/login.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/assets/8424a042624210828b0fbe7a8c533b2a.woff2

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/assets/8424a042624210828b0fbe7a8c533b2a.woff2
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/assets/8424a042624210828b0fbe7a8c533b2a.woff2 HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/login.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/assets/50805f331bb1b697aafb6f0c28b09212.woff2

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/assets/50805f331bb1b697aafb6f0c28b09212.woff2
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/assets/50805f331bb1b697aafb6f0c28b09212.woff2 HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/login.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/assets/64a8523319c68ca5e492309a68af4a9e.woff2

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/assets/64a8523319c68ca5e492309a68af4a9e.woff2
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/assets/64a8523319c68ca5e492309a68af4a9e.woff2 HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/login.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/assets/1e98970fd9c76545bbf1e1a377f4f3c2.woff2

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/assets/1e98970fd9c76545bbf1e1a377f4f3c2.woff2
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/assets/1e98970fd9c76545bbf1e1a377f4f3c2.woff2 HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/login.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/assets/15243e297f5364bd59f4088a864abbf7.woff

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/assets/15243e297f5364bd59f4088a864abbf7.woff
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/assets/15243e297f5364bd59f4088a864abbf7.woff HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/login.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/assets/0a9f36f23c26fbad0827f0a8ec86c908.woff

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/assets/0a9f36f23c26fbad0827f0a8ec86c908.woff
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/assets/0a9f36f23c26fbad0827f0a8ec86c908.woff HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/login.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/assets/7e2a698e9980c7ba52f69a2717e97b86.woff

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/assets/7e2a698e9980c7ba52f69a2717e97b86.woff
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/assets/7e2a698e9980c7ba52f69a2717e97b86.woff HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/login.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/assets/8fd30bd010d9e2c7677ec339685f958b.woff

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/assets/8fd30bd010d9e2c7677ec339685f958b.woff
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/assets/8fd30bd010d9e2c7677ec339685f958b.woff HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/login.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/assets/00cecde981e3ef7491eba946f4b95fe0.woff

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/assets/00cecde981e3ef7491eba946f4b95fe0.woff
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/assets/00cecde981e3ef7491eba946f4b95fe0.woff HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/login.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/assets/3ca6c3facf3966b88b55118f7821ee72.woff2

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/assets/3ca6c3facf3966b88b55118f7821ee72.woff2
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/assets/3ca6c3facf3966b88b55118f7821ee72.woff2 HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/login.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/assets/811a29d581fc684aa63616499cad4782.ttf

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/assets/811a29d581fc684aa63616499cad4782.ttf
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/assets/811a29d581fc684aa63616499cad4782.ttf HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/login.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/assets/12b6c5fcbc2e61c7ba17f51cd9c2b8c0.ttf

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/assets/12b6c5fcbc2e61c7ba17f51cd9c2b8c0.ttf
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/assets/12b6c5fcbc2e61c7ba17f51cd9c2b8c0.ttf HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/login.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/assets/50805f331bb1b697aafb6f0c28b09212.woff2

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/assets/50805f331bb1b697aafb6f0c28b09212.woff2
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/assets/50805f331bb1b697aafb6f0c28b09212.woff2 HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/login.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/assets/sco/assets/64a8523319c68ca5e492309a68af4a9e.woff2

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/assets/sco/assets/64a8523319c68ca5e492309a68af4a9e.woff2
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /assets/sco/assets/64a8523319c68ca5e492309a68af4a9e.woff2 HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/assets/sco/login.css
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/favicon.ico

91.202.233.157

404 Not Found

31 B

URL GET HTTP/1.1
39928-canadapost.com/favicon.ico
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with CRLF line terminators
Size
31 B (31 bytes)
Hash
dc1a4596e4bc27c4de6598ba3e6a1f10
a7bd958197902620fb8046d97c150ffba596d020
f7712d669184cbf9da44b15ceacfdc3c4bbcfc683d0b7a248d823636f57748e8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/deposit/sco/
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Thu, 18 Apr 2024 20:21:24 GMT
Server: Apache/2.4.59 (Ubuntu)
Content-Length: 31
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/apis/lr/action

91.202.233.157

4 B

URL POST
39928-canadapost.com/apis/lr/action
IP
91.202.233.157:0
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with no line terminators
Size
4 B (4 bytes)
Hash
37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

POST /apis/lr/action HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 19
Origin: https://39928-canadapost.com
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/deposit/sco/
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 20:21:25 GMT
Server: Apache/2.4.59 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 4
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/apis/lr/active

91.202.233.157

200 OK

4 B

URL POST HTTP/1.1
39928-canadapost.com/apis/lr/active
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with no line terminators
Size
4 B (4 bytes)
Hash
37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

POST /apis/lr/active HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://39928-canadapost.com
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/deposit/sco/
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 20:21:29 GMT
Server: Apache/2.4.59 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 4
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/apis/lr/action

91.202.233.157

4 B

URL POST
39928-canadapost.com/apis/lr/action
IP
91.202.233.157:0
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with no line terminators
Size
4 B (4 bytes)
Hash
37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

POST /apis/lr/action HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 19
Origin: https://39928-canadapost.com
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/deposit/sco/
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 20:21:30 GMT
Server: Apache/2.4.59 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 4
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/apis/lr/active

91.202.233.157

200 OK

4 B

URL POST HTTP/1.1
39928-canadapost.com/apis/lr/active
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with no line terminators
Size
4 B (4 bytes)
Hash
37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

POST /apis/lr/active HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://39928-canadapost.com
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/deposit/sco/
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 20:21:34 GMT
Server: Apache/2.4.59 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 4
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/apis/lr/action

91.202.233.157

4 B

URL POST
39928-canadapost.com/apis/lr/action
IP
91.202.233.157:0
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with no line terminators
Size
4 B (4 bytes)
Hash
37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

POST /apis/lr/action HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 19
Origin: https://39928-canadapost.com
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/deposit/sco/
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 20:21:35 GMT
Server: Apache/2.4.59 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 4
Keep-Alive: timeout=5, max=83
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/apis/lr/active

91.202.233.157

200 OK

4 B

URL POST HTTP/1.1
39928-canadapost.com/apis/lr/active
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with no line terminators
Size
4 B (4 bytes)
Hash
37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

POST /apis/lr/active HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://39928-canadapost.com
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/deposit/sco/
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 20:21:39 GMT
Server: Apache/2.4.59 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 4
Keep-Alive: timeout=5, max=82
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/apis/lr/action

91.202.233.157

4 B

URL POST
39928-canadapost.com/apis/lr/action
IP
91.202.233.157:0
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with no line terminators
Size
4 B (4 bytes)
Hash
37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

POST /apis/lr/action HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 19
Origin: https://39928-canadapost.com
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/deposit/sco/
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 20:21:40 GMT
Server: Apache/2.4.59 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 4
Keep-Alive: timeout=5, max=81
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/apis/lr/active

91.202.233.157

200 OK

4 B

URL POST HTTP/1.1
39928-canadapost.com/apis/lr/active
IP
91.202.233.157:443
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with no line terminators
Size
4 B (4 bytes)
Hash
37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

POST /apis/lr/active HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://39928-canadapost.com
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/deposit/sco/
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 20:21:44 GMT
Server: Apache/2.4.59 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 4
Keep-Alive: timeout=5, max=80
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

39928-canadapost.com/apis/lr/action

91.202.233.157

4 B

URL POST
39928-canadapost.com/apis/lr/action
IP
91.202.233.157:0
ASN
#200593 Prospero Ooo

Requested by
https://39928-canadapost.com/deposit/sco/
Certificate
IssuerLet's Encrypt
Subject39928-canadapost.com
Fingerprint3D:83:57:1C:FC:03:D7:4E:99:24:3B:BA:8B:EF:C5:3B:13:3F:0B:15
ValiditySat, 24 Feb 2024 15:05:29 GMT - Fri, 24 May 2024 15:05:28 GMT

File type
ASCII text, with no line terminators
Size
4 B (4 bytes)
Hash
37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Scotiabank

HTTP Headers

POST /apis/lr/action HTTP/1.1
Host: 39928-canadapost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 19
Origin: https://39928-canadapost.com
DNT: 1
Connection: keep-alive
Referer: https://39928-canadapost.com/deposit/sco/
Cookie: PHPSESSID=ds9jjeu2i8r5h8d415qqtgvau4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 20:21:45 GMT
Server: Apache/2.4.59 (Ubuntu)
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 4
Keep-Alive: timeout=5, max=79
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (47)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate