r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b93010cbf31ba3ec785b4088e5d0f529
c0f1ab8a2aae3c445a8f24959a4eea433a345caf
2cc1a5865dee7636b82a68deddd3aff8b697e846e37789a694cc3c7c47340590
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2CC1A5865DEE7636B82A68DEDDD3AFF8B697E846E37789A694CC3C7C47340590"
Last-Modified: Wed, 29 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19044
Expires: Fri, 31 Mar 2023 02:01:39 GMT
Date: Thu, 30 Mar 2023 20:44:15 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7af19a5145a4ee99bdf18831bad04bfd
7bdd2a4785b999ef54a2644211d2b2b7190fb8e1
3237bf0111ecdec3615c4d2d49a602f48f800335d0194f52b600bdaefbd63ed0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3237BF0111ECDEC3615C4D2D49A602F48F800335D0194F52B600BDAEFBD63ED0"
Last-Modified: Thu, 30 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15971
Expires: Fri, 31 Mar 2023 01:10:26 GMT
Date: Thu, 30 Mar 2023 20:44:15 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ed282214b024a7895d90e229e92bb1cc
1f447aa59287ce2b45860a1a909d005a41305f77
a35ae9f89cbc77ed5fe849acdc2701592799c335f2674776d69c25bca0a00c2e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Type, Alert, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 30 Mar 2023 20:28:18 GMT
content-type: application/json
age: 957
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 76218c893040d958ae1c4231cdd2133c
6a7b336dee91d4aec26ace0a5883ecdfac52e68f
d35492b04d16ed00e9e195e7c84c99aa6a2b8a93abeb656baae0918986f0a7e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D35492B04D16ED00E9E195E7C84C99AA6A2B8A93ABEB656BAAE0918986F0A7E4"
Last-Modified: Wed, 29 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11525
Expires: Thu, 30 Mar 2023 23:56:20 GMT
Date: Thu, 30 Mar 2023 20:44:15 GMT
Connection: keep-alive
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
188.114.96.1200 OK 11 kB URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (969), with CRLF line terminators
Hash 52ffb744b0aaa553e1f39ddae1d5c381
535112e13f60d62af2837eba3f11a254ec847eec
b344422c4728686efc9b505b1db65b8ae176d6814ff18fecd91c2fc47c64b82d
GET /usps/verification.html HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 30 Mar 2023 20:44:15 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 28 Mar 2023 04:29:01 GMT
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SniZ0ODezCSJq%2BLnIrJGgREYlKii1qEAlj7I1jw2wdpC2HHAtZCKk1FAfoZPUb9zVTtbU12o%2FgTZ1a8vmY%2BWGtozzWCnGgiReN7XArbNGcb3MQ8amxBiqfBfM6PGtOoh1dmF%2FyvaB051NOOLGnKN83J4W0SyRrv1en76IQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b033081ed300afe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: l8bpNqscHisp3hiVZOlt8ZQS/oa0/tzIU6ur49xvzT8mJahaefW8ClUbDbDOVjKlFGYvnZUFU1M=
x-amz-request-id: 959R5WRC31G8F81E
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 30 Mar 2023 20:03:03 GMT
age: 2472
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 30 Mar 2023 20:44:15 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/megamenu-v2.css
188.114.96.1404 Not Found 109 B URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/megamenu-v2.css
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /usps/static/usps/megamenu-v2.css HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:15 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4O6lODMw5d2pHAx78Bc3qE9GffldT33ilxt2TE2S4uWDGXmUSz7VOAH26oNp26PJSEhJg0BxZgVZ7js4psX0vuM30hsMgpZ5hxQ%2BfKm9HodkykBSGItrcBCpfTmHAG6W7TnQBtBOGcEDY67fy3oLNQdOxHGWRuxZBBmJug%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b0330853a53b4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/main-sb.css
188.114.96.1404 Not Found 109 B URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/main-sb.css
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /usps/static/usps/main-sb.css HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:15 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dOjDzLEal6YorVVpWIbQCHW%2FM3HtLugHSUUfD0oenAVxuW5j8VQJg5x0khuBkfoC2xMUEIL0sKAta8A%2Bb5flUCMWSC7iXvomvHiwlYwuC2nsHG0NVa%2BXPXoXi8S9Bz1XmXR9iNXr2LM%2FZSEztsqdWTCGFvo%2Bhz9bFogEQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b03308569181c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/layer/layer.js
188.114.96.1404 Not Found 109 B URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/layer/layer.js
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/layer/layer.js HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:15 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8SRpYdrg7yzjzOoMYfpFqyOV9pVSKkWUt7G9Xnp8%2BPFp%2FAYjGfLEho%2FtfsmNpN%2FB%2FMLm9XuoANf93j14eHveqnBiiqvvQlo7j%2Bt0KFxEOYAsEKSbXTmvbj%2FLuHdKTCFtCoIk4fQqW2DVgD97iQjfC9IkIDjX%2FSjuLq5rvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b03308568f4b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
tools.usps.com/global-elements/footer/images/social-youtube_3.png
192.229.221.165200 OK 2.5 kB URL HTTP/2 tools.usps.com/global-elements/footer/images/social-youtube_3.png
IP 192.229.221.165:0
File type PNG image data, 50 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash e38ff6af4b8ff088fcb2dc92410b759b
529c88413dbc330fa05a0629b2084ca7931f453e
c2b609bbc0ed5b17740df6ab378bfcbe068e3b08d85e85b2d9dfbe6dd3c6be95
GET /global-elements/footer/images/social-youtube_3.png HTTP/1.1
Host: tools.usps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 77454
content-type: image/png
date: Thu, 30 Mar 2023 20:44:15 GMT
etag: "99d-549b12f59b300"
last-modified: Wed, 01 Mar 2017 20:30:36 GMT
server: ECAcc (dcb/7F32)
strict-transport-security: max-age=31536000 ; includeSubDomains
x-cache: HIT
x-frame-options: SAMEORIGIN
x-ruleset-version: 5.1
content-length: 2461
X-Firefox-Spdy: h2
tools.usps.com/global-elements/footer/images/social-twitter_2.png
192.229.221.165200 OK 1.8 kB URL HTTP/2 tools.usps.com/global-elements/footer/images/social-twitter_2.png
IP 192.229.221.165:0
File type PNG image data, 50 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 4f6b06552f2054fecb5a3ab3956d7a79
c1257b76200738ad53147be110920f84efd479b3
248385895aacd78d7a7b045cd5109103c2f849bbaef9cff5980d59823a620c91
GET /global-elements/footer/images/social-twitter_2.png HTTP/1.1
Host: tools.usps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 80699
content-type: image/png
date: Thu, 30 Mar 2023 20:44:15 GMT
etag: "732-549b12f59b300"
last-modified: Wed, 01 Mar 2017 20:30:36 GMT
nncoection: close
server: ECAcc (dcb/7E88)
strict-transport-security: max-age=31536000 ; includeSubDomains
x-cache: HIT
x-frame-options: SAMEORIGIN
x-ruleset-version: 5.1
content-length: 1842
X-Firefox-Spdy: h2
tools.usps.com/global-elements/footer/images/social-pinterest_6.png
192.229.221.165200 OK 2.3 kB URL HTTP/2 tools.usps.com/global-elements/footer/images/social-pinterest_6.png
IP 192.229.221.165:0
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 010bf7d7901ccaa3905cfe4b7c1cb50d
9c174f76a3ed50a173637d44793d6bc15a818112
67d664b844fdba0588665c6f1986b25fcb6d99e5122a455c36da8622f1eaab62
GET /global-elements/footer/images/social-pinterest_6.png HTTP/1.1
Host: tools.usps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 80699
content-type: image/png
date: Thu, 30 Mar 2023 20:44:15 GMT
etag: "915-549b12f59b300"
last-modified: Wed, 01 Mar 2017 20:30:36 GMT
nncoection: close
server: ECAcc (dcb/7F0A)
strict-transport-security: max-age=31536000 ; includeSubDomains
x-cache: HIT
x-frame-options: SAMEORIGIN
x-ruleset-version: 5.1
content-length: 2325
X-Firefox-Spdy: h2
tools.usps.com/global-elements/footer/images/social-facebook_1.png
192.229.221.165200 OK 1.9 kB URL HTTP/2 tools.usps.com/global-elements/footer/images/social-facebook_1.png
IP 192.229.221.165:0
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 5d1fed200f7befa569074a293cf2abed
11bacbc9debe99986d9a6e974e9a819aaa74be29
9d0ef8aa34abec770b6a9fb4358842a29413d08c0d1e4b74f5c4c31ab477c14c
GET /global-elements/footer/images/social-facebook_1.png HTTP/1.1
Host: tools.usps.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 80699
content-type: image/png
date: Thu, 30 Mar 2023 20:44:15 GMT
etag: "751-549b12f4a70c0"
last-modified: Wed, 01 Mar 2017 20:30:35 GMT
nncoection: close
server: ECAcc (dcb/7374)
strict-transport-security: max-age=31536000 ; includeSubDomains
x-cache: HIT
x-frame-options: SAMEORIGIN
x-ruleset-version: 5.1
content-length: 1873
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ae064c74a3769d42109473ad05d56fb9
d48029ab8568cee6ab7416d3b476ed792d780a56
9852216f395a42f7b4792e852f9f9fa83e07d917a979237d5d7406a1d74edc4f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9852216F395A42F7B4792E852F9F9FA83E07D917A979237D5D7406A1D74EDC4F"
Last-Modified: Wed, 29 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13574
Expires: Fri, 31 Mar 2023 00:30:29 GMT
Date: Thu, 30 Mar 2023 20:44:15 GMT
Connection: keep-alive
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/bootstrap.min.css
188.114.96.1404 Not Found 109 B URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/bootstrap.min.css
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /usps/static/usps/bootstrap.min.css HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:15 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OF5lY%2F3KpnZNovPU2O%2BJ5oowaMkAHqDIDLDW1Jn7TEfDDM1nW%2BAUARwn3WB9tL42EXxgBb7ZPOiH7tQIlYNhXcdVG9ti43ybcXA%2FB0wrUsMZCF%2FeYgLXV5ynb5LsjzW3FuAQs7ngJ%2FLWLyezOwdf4OmqW7VTF4Vq2Vn1yg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b033085390e0afe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/main.css
188.114.96.1404 Not Found 109 B URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/main.css
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /usps/static/usps/main.css HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:15 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iDUm8%2F0LNdGnYDxV3oWWKnskLXJ%2Brfmod2CrK7YlyAVWnxDqC2%2FaQdM3yQGRuqqooqd93OU8hbck%2BTNAKwXspyBQ1v1Se5C3QhtUTa1bJGDCHbn8rz7TqsM4ZM70Ct6oxgn0B1RHmdHITnV4hrhea%2BFAYoLtM9rAHs5lFw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b03308538a3b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/jquery-3.2.1.js
188.114.96.1404 Not Found 109 B URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/jquery-3.2.1.js
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/jquery-3.2.1.js HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:15 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZklDy6%2BgvXNhv4kpit9dfcUzxSJL5iDJ0jheyYXL0FcONhRLEHbPHabTkzyoIH1nFCbMQzFNN%2BPj3Lb4TZobXm%2BEMntv2gKdqsxscCGEFp0N%2Fv%2BHMHcra8Mw3BQ4bUcoHmt8WNLOtJgAD%2FB8%2BuKjAsLaiJzTaPm6IUh6Qw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b0330856c2bb511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Last-Modified, Alert, Backoff, Content-Type, ETag, Cache-Control, Retry-After, Expires, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 30 Mar 2023 20:17:26 GMT
age: 1609
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/footer-sb.css
188.114.96.1404 Not Found 109 B URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/footer-sb.css
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /usps/static/usps/footer-sb.css HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:15 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rm5anmY4q4%2BI1XUhdHJTn4jooOVLllFNCW9krr4whJ2OGY27zExnQvWStub6j4epEtGLaM8Ac74rXYhCoQWK8oiOOnLIQ%2Foa56%2FtL32krnoMnmCv%2BpbBUE8PX5Zx0APrNwZFXLgBXH%2Fdic1w1wM3Z8%2FXsmJml84rAmyKkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b0330865babb4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
34.117.65.55101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.117.65.55:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aQ68suXr4cqBJjxjTzYelg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: PheT/rbmO9fAMVwUP0h3P/UJPRA=
Date: Thu, 30 Mar 2023 20:44:15 GMT
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/location.svg
188.114.96.1404 Not Found 5.0 kB URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/location.svg
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (342)
Hash f5382a72d0647d0ea4afa405387f0487
26a063077a780819bd806e90aabf7f1b188dbf1e
09309221c202eaaa4dfcc3f8ed6865689e7f6676d3ec37cc294728404ab50782
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/location.svg HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yxQf%2BvMruGMN7POCAqz3%2F49McWmulaxgI0TgFMJ4JL5b2UFjcExufVs%2B8TijSnHfsI57yM7VA12tzWzymrgka%2F8CMAhVWqWmO8%2Bk4wYvGYNH0T9ax4OxlYjlabNslRqymQZ8DuYHbiHxaZgmLlO57uSt1LlzcFV9HJZg6g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b0330872d2eb4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/jquery-3.2.1.js
188.114.96.1404 Not Found 109 B URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/jquery-3.2.1.js
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/jquery-3.2.1.js HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gs578QZoux3J8f32ODo1GY1Lktd0w8vPUwq3qSPPQkujRvKBKZRjSqeH%2BcaIJ64ClAJrxtWbVkw2aBDzOPLi4Ak3ek%2BnjebImqPDwHYzOMKLMSVPm5dgicIHM8dxF%2Fv3uPSZkeRK%2FxIzVCQCkV80ntUp%2Bvef0PaIS5e4bw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b0330885eb8b4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/hamburger.svg
188.114.96.1404 Not Found 5.0 kB URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/hamburger.svg
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (342)
Hash 0ab12ade2ce9e4345de023e5479934ea
13220a9b651677d6ced5955814aac66ed42220d1
5e97fc6e18e357a433a2e47d33339208551929ab224bf089456a3735ea5dcb49
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/hamburger.svg HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7bCDtRLa%2BcG2F%2B2RXmEFx4htxoExFL9gurqFE084jPcGrJw6myXo%2FdfHdrEaWyziwRblE5KU17gOtWqg2y3H9LAU%2BoM5tBJh%2B8eLK5jq%2BvZIR9bsrdgidPr3shxt4xeOfHGJ%2BbwqnYfOsi0cCKzd3XiWQVNN1SeOs2hwaA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b0330872e8bb511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/layer/layer.js
188.114.96.1404 Not Found 109 B URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/layer/layer.js
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/layer/layer.js HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mV2OXWLRf1oLtdNl%2BM3jBQSvrraSrROD0d2BIcqifzsqmo7%2Fu0FStAMRlP4OsvhC2YpiMfXKTm3xRy8yqMUh2WME2NLkCnlYt92d9k%2FpGZgDF2GHXOYU%2F2VBsdDh9zGGw7OVbP2DSby94ElxBFiFzShJh1PdiWP5OWTNTA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b0330886880b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/go-now(3).png
188.114.96.1404 Not Found 109 B URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/go-now(3).png
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /usps/static/usps/go-now(3).png HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PeTkUWhxHmM4sof3Eld2TGIKLA4G%2F%2Bs26YS%2ByLuRKnBLsapxAiCfzDUoDzKZi14orGNUgBuHLPsNcBAaWOsrIAVIprb7sToxS2VJBLDO%2FvJ1giLvuT3B3qTrEpUOETPdWxBslha3sWecSagzmDtyEZxBX5v5yROiTPLNtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b0330872aae1c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/go-now(2).png
188.114.96.1404 Not Found 109 B URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/go-now(2).png
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /usps/static/usps/go-now(2).png HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hapW9dsL7HhRVZMbzWIyhWGylUPy64QJUoCEnTBIiWtATZq7QWOF2jTBChkiGNCOa6a0lki1NXSBcwEOhNE4zTtOShWj2%2F0UH2NrlwaTqrsKPGgX1Jxhc5YNftnesYp3l1avXwvGX8MtSAE8nwiCZUY0tAZqbEc2z47MWg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b0330872b71b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/main-sb.css
188.114.96.1404 Not Found 109 B URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/main-sb.css
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /usps/static/usps/main-sb.css HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7mTF06MT7uMnslcj%2BKqqKGEdhZHvSu7XJFZOKZbnbxDPiE7aXd3%2BqQtIawuAD9XTmen%2BK%2FuLmPf0kqvw1OYXj92JK9XTCoe8G7e4v5hchAjbzBHtm37QXf9otFVnBqi448YVXYnqvSWzP2%2FVBW84yLz9cG81jMP3FYXztg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b033088cc151c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/footer-sb.css
188.114.96.1404 Not Found 109 B URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/footer-sb.css
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /usps/static/usps/footer-sb.css HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 1
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6%2Ff7RXalsWnj3ST%2FLmDImKygfeqDy1I5HOJsfcLf%2BWDiVFNw46MINvAf%2FwJYAN4NWwUYs1xMfdzjUr70RnlDNyPe4XPewCnfXUP7DhFenks8Vo8nESQurLcUUabnahGRRSgIGzgb%2F3mw9wb4D0Uz4GUh40WMW2XdAli8Dg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b033088cd86b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/search.svg
188.114.96.1404 Not Found 5.0 kB URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/search.svg
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (342)
Hash 035c3cacda83752b075d788d06226afe
4db11c43cdbf535bef65f383fbbb33e5ed7820a7
2e2b1c4cbe3c11cba331ec241bd28e4004e65ccfd8f395c6bf4b6136a7206a23
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/search.svg HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P8GRQ6XC2R5N%2Fhd8TJyS1YlWdu8YVST4RG6rG7xhCzKal3FLPYIDE5hc20Nsk7xEB%2BulSLaByOTnGQzIs7FJEYMoa%2BxzWGM38O9JZtRlRy4oIbIcwrDcXSfZnsg7BXahkjzpCwCjPxBnoRG%2BgewuyeYZUXmzz1YHKkI%2BVw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b0330886edfb4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/logo_mobile.svg
188.114.96.1404 Not Found 5.0 kB URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/logo_mobile.svg
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (342)
Hash 9cbdc0e3a27bdf7e6cd5939647fe3e34
666763074e5f1bf021feb7283e52f1a14c76fe13
4fbc016a6d58fb40b94430c6010d10c51923b8f8ec1de976f73b7eb3be57b571
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/logo_mobile.svg HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JEgS6nvVTOLdbjwiC86D1oNaC0ty7VVEQTqxaHRc61QQ9%2BagkFHOjOMIiTCG%2FZxftHPmJnwzPeNwUf7WzvggiH420v0%2BUzq2tuWt0RtQYLLXqWJVmS%2BaoiRcRLQ7jtdB%2FjfGvjEm0VdQje9ri1U8Fdrr05PeMTiH3Hebyw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b0330872b8db50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/calculate_price.svg
188.114.96.1404 Not Found 5.0 kB URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/calculate_price.svg
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (342)
Hash d8d4a3ef77936320779080c5f3431d1c
a8b7835150b1d1b89674aef6bcc379fe57261ac9
b0dd9e6ea4ba911a72f767b687d8cb9b7e9cf610e2ae79904b77a180edbd0b1c
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/calculate_price.svg HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DWu%2BNDr%2F3ehymTYfwC%2BMp3LS9CQ7mwcMH84AyS0EAxO6PD%2Bhc%2BNrYxB%2BdsjGUuTE92d3Og3X9HpdrCOY%2Fhmfdk4Y3C9EeEQj%2BDVmsUGfT%2FZ%2FSiDrZVn21bfTXc7K%2FNnGJICF0yW2UblRGzGV4elS3HDJS%2FxIKlU6lMfY8w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b033088dda0b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/tracking.svg
188.114.96.1404 Not Found 5.0 kB URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/tracking.svg
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (342)
Hash 65c708cd102d7cb746ad0314f58e6157
54b8ee0ce1f5f9278532e60302b8ece0981d7078
e2cf9f31a246392ddccc091eb57dd9f9d48b3bcb7b9a60a8958eed250820644b
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/tracking.svg HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d5EKpWOw%2BbN2vcZTYjkeRt1q67aALvS%2BqSNhcyET14A%2BiR%2F%2BPPx2OiBFuTLH09N92w7ceI2ZDxhyqfu3xsGuUyD1eFjN01c%2BYTPXX%2Fw6vMkIVjjd9oZ%2Fa43H7GaoIj5RattUtN0zAlMAp5W7EDYlN6ypw0B3467vm8YSfA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b0330887894b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/logo-sb.svg
188.114.96.1404 Not Found 5.0 kB URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/logo-sb.svg
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (342)
Hash e7d2550489127914edc74bd13b588714
ff744e98ac91cab758d22df6ee86a5352113547c
58101191dbeb747bf57c3d714af369ba0f5949681361d982f109a06950d9bba9
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/logo-sb.svg HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uIk%2FwXpwMR3fUE7dxlKGCf83fFqx9BsmjUKfTWwAWSjeD6ULQqCioawZ%2FJ5iOTErNQAaQ557AdPWDQHacKf%2B6VUbJWwbF1OcPHYUZfSf5ir0rAYuJP6LkyrubwbqkdV%2BRMSnesOirTY1BpNOMV%2BIqgTuIJUK3UXZsqekrA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b0330872b3e0afe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/schedule_pickup.svg
188.114.96.1404 Not Found 5.0 kB URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/schedule_pickup.svg
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (342)
Hash 5126eebff1dd918baecae0a682d1dc5d
f6d681d0a26f34f86ddb78489f9f0d3744ad90a4
5f1d6603d564a4becdc58686102c9c879d168d69fc117d989c03c84c35175a2a
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/schedule_pickup.svg HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eGGV0nHXSysya%2BJHfE7RnJFeUnV0Qqi3hOYw0AOlz5YRFZxn4Xbihg83vGKOk180Q1w%2FJaZ21CWxu5gxUPO4Tc5w%2Bd6noLaVw30OYcQShtwSCqohVuQFVXsenSr31aDKIdI7fwpQ9%2BcmmMvrfzZE8zkoCdAFa8546ZVGwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b033088dc291c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/find_zip.svg
188.114.96.1404 Not Found 5.0 kB URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/find_zip.svg
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (342)
Hash 17da922f95b0aed08df64022fe1c233d
492cb508f1907620b3dce0335dbe3a0dd3abde76
761594332d8063c55646e1bab71dd12d4c9f352ab7740e975849042ad0d1cae6
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/find_zip.svg HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QIWKu4%2FqGoz9JqjWNz6vhzVI6n8HyaXsA99NHq5cBMuFeSDDxRviMDcyKMhNjDhHohlQter5%2FmvDEwhyIT8BIas6QTsCYjkF2C7szPmOtysLp9Mj1yOX4nxSLk4aU77B5waTqOl2YRKEslXjGzkY14dGYEUTxrIzFbjnLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b03308a2986b4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/featured_clicknship.svg
188.114.96.1404 Not Found 5.0 kB URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/featured_clicknship.svg
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (342)
Hash 4aeed0a23e62f49ae0e4a6ad5f3e75ec
460dd03a6fdf81f32960bd0789eddca2cc8b1679
c5170b66017413770e664c10414c4aabc73021261aed06de8d9e5b3bf4928024
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/featured_clicknship.svg HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4UWzm%2FVTwyC6d3rpUNXFz9C2eCZNW4Zvjf0LiW9vb0GMGSMBXGrwEmfk1qYSdHG74pru23i%2FO91glkz2%2B9qXylzPHYx1FkyVGRGF9U7sBcDnh%2BHW9xmp%2BYSwS4nkFXusPEHbvuvGzxiqYqnuixJVm7gJPftLU2G4O4Faqg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b03308aadbf1c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/holdmail.svg
188.114.96.1404 Not Found 5.0 kB URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/holdmail.svg
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (342)
Hash 74ad5db237037399421adafca7107c6b
1f5b3f5d13a6ac21b83e40834ba1e7d5e71d005e
fe52eaa43efa55187749a1e0b9fef1521b309c66c2ec9c828a1b10cc8b69fdd6
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/holdmail.svg HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c6YUQg8Y%2FrV8MVlT%2FU3QQUdwKXGbgKPd2tSxDXxerpMU0LYD%2B%2FRCjJA6PGtwhuIg%2BRh%2Bjir8usPhMLfFghZRprMEtQMVyt3vhobflhYx8Uqju%2B%2FbB3NWcaGIAteqbpc6R69gC%2FfsyMo586rlwO5OHlZIc0ydXYm19fb%2BDA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b03308a4835b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/po_box.svg
188.114.96.1404 Not Found 5.0 kB URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/po_box.svg
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (342)
Hash 2f2adeed1a9b3daced7332fc33e4ba6c
06a3ffd16ea39d603e0db3672af7e46fb2462658
4219892bfc5ba9907ee423a19fa00164f22ba491589b3a7222023568e6ee4612
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/po_box.svg HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P2rj1nOUgskMqKRMCObPg%2BF5dGZWnCNOf3RRuZAvWhhNpYtCHzcdxHJuql5RRI2q0jr%2BYoFpaap16N8J6H2eI3fGTIb80vPAtkC2taXcYYdlwp4oT4Pk5hbuJtP9nfSUfo6vi1P5N9Yspm9nzMh82pYZgZR6KTcNK8VD%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b03308a5b4db511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/go-now.png
188.114.96.1404 Not Found 109 B URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/go-now.png
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /usps/static/usps/go-now.png HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZH1nCi1Q%2BXodKC8UjwFK3%2BLrO%2Ff33jTWLmoZvvIdCXyvaTXwXpiVKR9GnfZhEVdUULBB6ZZ1pV%2BEpkD8oQObZaN0j09ZiAbQhPMM6fVXUgtwBMRV5Xn%2Bdhiy%2FNz3kZHKgxU029JXYYZYgRhJ8DPkyF%2FmyyrSrW7MfZ1%2F1A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b03308b4b3fb4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/change_address.svg
188.114.96.1404 Not Found 5.0 kB URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/change_address.svg
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (342)
Hash b71d6d50485eea0b8ece33e65c99febe
b5eab35cf4ac51f1890046028b39b1c6c76e6bdd
ee363c00a2d7ac37ba0202b4ebb4d0fc23cfecce2bfcd892626e7be61a07aa81
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/change_address.svg HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=udW9zcwtEmThCaU7BfpXdYIHgrLIjpTPRfHPdv8VzltEYE5xn1zpKn6oWPmD0zX%2Ffqw8F%2Ft8as3VShAmuqdXoKAm1F7Mkc2E7WKucpo2QHIIEXcIZdQofIE%2BWU5uuOQhKzww7jLmB6g30G%2B4t2kipgmjGZBUOSU%2FStIFXg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b03308a4f5db4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/free_boxes.svg
188.114.96.1404 Not Found 5.0 kB URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/free_boxes.svg
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (342)
Hash f64fa427cc77023e3ea38ce89338bb3d
fe64ee53960877efc7756c6addb718f14581965c
ae7cf28bfa4839d1f22acff97bcc32e1aeebcc234c1e6c3458703e19b2d52e14
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/free_boxes.svg HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JrJs8zLcy9HUDFMSSxFXIFExXAdNsBkRDwaIRQ84uuWZuj81tv2DUkn%2FgXgDnQdmZs8HXe%2F5XcqKjH%2Bmtvv5X4Kvv3ZuDgjNn2L5umWDgnSpfRFyN7xYyqPI5QKueTWfqFp4eAXeA06M12AgEq9PE4NC2DU%2F8CEZBB5dsQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b03308a5eef0afe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/go-now(1).png
188.114.96.1404 Not Found 109 B URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/go-now(1).png
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /usps/static/usps/go-now(1).png HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XghrcQFU5DX3%2FMKVuIIMF4KC%2Fzuov%2Bnol1UAv%2BqXXciai5ANL5aCaxwPGmL%2FYswMOX84sEk5VIsxyHUk7o7oRuyqhsaORsrZy9gejcf99Ufy26eUTwJMWaY2tmX4doskEP7f83hHJ22SGsFF%2F%2FyfHJSYvM0Jtr9%2FItmLnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b03308bbead1c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/mailman.svg
188.114.96.1404 Not Found 5.0 kB URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/mailman.svg
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (342)
Hash 494f6deb9bea28980197105940acc722
fc411c468fb59c29ba724d0c0114ac9773047367
be47de4a64db83be21799b1fdcc4846fe1283284bac210d8a97224545fc49dc1
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/mailman.svg HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UyEMDTpHadIhSJi8DJ7Vt1j9ctS8ZKqEStyjXbTG5i%2Fk17760Hp77OVOvgsiuDsMEJvgyV5VigjSZYfT5dc3DUUnTcelfvvCZDL2TnsI7eId0mxQdMpXQqRkCBW98TD%2BQ4a3wW8qoAzDwAPnesBL%2Ftr9BwWachrYe%2Fsk4w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b03308c2e0fb511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/go-now(4).png
188.114.96.1404 Not Found 109 B URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/go-now(4).png
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /usps/static/usps/go-now(4).png HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oVplIIiMfVZwJ0vf7KLIm%2BCeL%2BIA8EH93KVx8Pxv8LMiTlGSsZYpHOpFXMbg%2BtUs%2FmJ3DWoQQSNoDMuktCxUGm%2Ff9wiaCWBwofjsQugnMk3qJR1XqLB14q9i%2BqI6jvmKuFWA8CL9pLzP8U%2BRCGygtH8%2BZ0zbim%2Fe3Tix2g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b03308c0ad7b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/stamps.svg
188.114.96.1404 Not Found 5.0 kB URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/stamps.svg
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (342)
Hash ff32b9a9811892b605d939ae070087ca
f6e3ede0e767cb978f0dfe6cd97605e8c9372956
d8dae5a43321d7dfb9c9e40623d664226e88b64876886fd82839ba32c7704282
Analyzer Verdict Alert fortinet Phishing
GET /usps/static/usps/stamps.svg HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:16 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s7D5dhozevx6Rh9G8SfMhXT2E8XP7csuw9%2BFIjwaXUU%2F4SmG62rUyfr8xy4%2FQXairyX0DKGN89GQNxf34X4ujMN%2Foc0YwaDKXsANCpPWloucwoHoPjI2LkbxF7KFze1jCARHwDaqwbcRD2Rb1K74Q%2FT3Vf0AqOjCVji6Kw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b03308c2c9db4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/favicon.ico
188.114.96.1404 Not Found 5.0 kB URL HTTP/1.1 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/static/usps/favicon.ico
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (342)
Hash d8fd8e710ccfe6a99549403ac1afbb6f
3b70a9c73cc7319534b2c22c8f4da77b50389008
5804f12014011c51653cc830b3f5d76d3d4c7a41e2a88fc2d01e43bc0131a16d
GET /usps/static/usps/favicon.ico HTTP/1.1
Host: 3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://3p6stcm1x8qbzaayahh8xmerlxuoq.lspower.xyz/usps/verification.html
HTTP/1.1 404 Not Found
Date: Thu, 30 Mar 2023 20:44:17 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eezmuVMPvUQwKeR8pRVZqP4qM9oBCfH%2B0DLDKe3vOuXawNtp621BmVn77VqeVXH2UiiajR7KCl%2BHiTRRdtUhMbStoA0nsgv0Vs9bEHLuC6IjuRsbkwSaH08oXtfOZijLfMiyTLPd8JNCF1qVmhrQnOlrQbAnyf6kNLxiKg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b03308e19521c0a-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 195589ff3c6c50463257f10da16de114
7119aeba010d5c5c224fa544feff6f1761739929
dbb5774621e0eee6f9641f6078a650a78d281019726ade7a52c150f0988cd12b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DBB5774621E0EEE6F9641F6078A650A78D281019726ADE7A52C150F0988CD12B"
Last-Modified: Wed, 29 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20154
Expires: Fri, 31 Mar 2023 02:20:11 GMT
Date: Thu, 30 Mar 2023 20:44:17 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 195589ff3c6c50463257f10da16de114
7119aeba010d5c5c224fa544feff6f1761739929
dbb5774621e0eee6f9641f6078a650a78d281019726ade7a52c150f0988cd12b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DBB5774621E0EEE6F9641F6078A650A78D281019726ADE7A52C150F0988CD12B"
Last-Modified: Wed, 29 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20154
Expires: Fri, 31 Mar 2023 02:20:11 GMT
Date: Thu, 30 Mar 2023 20:44:17 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 195589ff3c6c50463257f10da16de114
7119aeba010d5c5c224fa544feff6f1761739929
dbb5774621e0eee6f9641f6078a650a78d281019726ade7a52c150f0988cd12b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DBB5774621E0EEE6F9641F6078A650A78D281019726ADE7A52C150F0988CD12B"
Last-Modified: Wed, 29 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20154
Expires: Fri, 31 Mar 2023 02:20:11 GMT
Date: Thu, 30 Mar 2023 20:44:17 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 195589ff3c6c50463257f10da16de114
7119aeba010d5c5c224fa544feff6f1761739929
dbb5774621e0eee6f9641f6078a650a78d281019726ade7a52c150f0988cd12b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DBB5774621E0EEE6F9641F6078A650A78D281019726ADE7A52C150F0988CD12B"
Last-Modified: Wed, 29 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20154
Expires: Fri, 31 Mar 2023 02:20:11 GMT
Date: Thu, 30 Mar 2023 20:44:17 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b95f765-7590-4263-b0a3-4db9c87a60df.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b95f765-7590-4263-b0a3-4db9c87a60df.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 424b55535e5fd622b2fc96aac1246324
cf7cf08aa8969a86bf03695af2129686fd62fe86
c4bb26a7b2c431282b53b4df9999b9cc8e61369a79c606688a76499b31a65127
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b95f765-7590-4263-b0a3-4db9c87a60df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10271
x-amzn-requestid: db0d1fe4-060a-4e61-90f3-ec9befee1295
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CkBoXGh5oAMFfzw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6424afce-2e9251552b4acdcb19e02dfc;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Wed, 29 Mar 2023 21:38:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: 1cXec9_e-KpzyTwiHaNAaf0y5i12tw7BkZTXnduS5ek7yAAZ0LXTWw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d0387b833e3ca8cb748a1296b4b4bf2a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 29 Mar 2023 21:48:07 GMT
age: 82570
etag: "cf7cf08aa8969a86bf03695af2129686fd62fe86"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f7d2537-a0a5-4a19-9229-144648b886b8.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f7d2537-a0a5-4a19-9229-144648b886b8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db24198518d1a093c5c03e92e53925a2
288898a60e0a029946e7d770d2b0c64b6f3bf51d
4a15da439fa1a3ccdd3d329f250bacaab581287183293c4e367b05c2a83eb66d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f7d2537-a0a5-4a19-9229-144648b886b8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12233
x-amzn-requestid: 781fd422-c720-49d7-bc90-6f8b18751caf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CkAynHgNoAMFvCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6424ae76-5327bf334c985816289507b9;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Wed, 29 Mar 2023 21:32:38 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: nwdrJGU7u4C_ZtSQkSASfZ2qj8a31rIr87g_K8YvrrsoVN5yeN8CRQ==
via: 1.1 185f4b03b711932fc7e735c08fdc5abe.cloudfront.net (CloudFront), 1.1 fec77e486350d1bd33f526a760d8b5a4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 29 Mar 2023 21:52:11 GMT
age: 82326
etag: "288898a60e0a029946e7d770d2b0c64b6f3bf51d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash da174e6ccc9451c5071ba10eeb97f6f6
c38827a9ac1218768839877263e1f2984fbdc454
76da406c8ae8cd6ca8471928f3aec3876aed2c21bc10edc0fbdaef5c100c1030
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9859
x-amzn-requestid: c00efe5b-7fdb-445a-a924-75ddd461b72b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: COQPtHizoAMF7-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641bfa64-3eb90ae703b78e8a06130540;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 07:06:12 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: nZfXy-IsoHliuLodEocEZlH-IvmIV9G-noSmSEU1wmuMPfBx3rLJ9w==
via: 1.1 02f1a759e4ec9fab6fc17c080dd851dc.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Thu, 30 Mar 2023 11:37:45 GMT
age: 32792
etag: "c38827a9ac1218768839877263e1f2984fbdc454"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2075fc9-4e24-4d01-853a-8aa29cb2b832.jpeg
34.120.237.76200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2075fc9-4e24-4d01-853a-8aa29cb2b832.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2021c271f9290204bd14cd2a3a1680fc
39b68cbcaba381d63dc67bc289fb67c849adb9ff
a84c5dd1e52d7cd535e04cb455891a1442000eb0e4381031c976b4cf3be96f2f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc2075fc9-4e24-4d01-853a-8aa29cb2b832.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4549
x-amzn-requestid: 70e07309-5fc5-4307-b455-29a187eae0d6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CkBoBHFFoAMFx5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6424afcc-298f18fd0cf0b37465a74c13;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Wed, 29 Mar 2023 21:38:20 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 0bqn9l0Lqaavg48Uv9xRI7-zbdu1OfBuxITVjbhnIhmT79W_dzC72g==
via: 1.1 f193acd25f2604e189bfbfaf539aaa06.cloudfront.net (CloudFront), 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 29 Mar 2023 21:41:40 GMT
age: 82957
etag: "39b68cbcaba381d63dc67bc289fb67c849adb9ff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffda18d5e-b73e-4202-b1f8-d36a10bc29f6.jpeg
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffda18d5e-b73e-4202-b1f8-d36a10bc29f6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8de7c61ab5f849628db707ae7587904
f040cba140c3510c5e6fc0ae1e56505c3749d525
492ea40ba548983fcd3bc41a1e29b6337e4e4e83b1248dcccf82cc1e7e22df88
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffda18d5e-b73e-4202-b1f8-d36a10bc29f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6975
x-amzn-requestid: bd3a35e2-22bc-4b5d-8c46-74f21205e512
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CkA4qHKCoAMFR4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6424ae9d-7f1dd1175a4580f75a614254;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Wed, 29 Mar 2023 21:33:17 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: Q39PWwkZfIyNwmE_PBk86LfcqDKgLlbLsU2ewpLgeCv9hehTL9Gvsw==
via: 1.1 8731d2a1a7d15f67b588bf58f652f9f0.cloudfront.net (CloudFront), 1.1 d16c3f15bd14953a9d4109eaaa991de2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 29 Mar 2023 22:04:53 GMT
age: 81564
etag: "f040cba140c3510c5e6fc0ae1e56505c3749d525"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85885238-8732-476a-b37c-1eac5dbc3e90.jpeg
34.120.237.76200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85885238-8732-476a-b37c-1eac5dbc3e90.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 253f48aa7cbf667d52cb37fda10cdb1f
e29478b866f90402b48d2b516d01d60a863c9cf9
b4a73ab71250b9e4a3f95e28dbf50dd000e1f338c7c3ac9f3351c1f6d6d3bfff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85885238-8732-476a-b37c-1eac5dbc3e90.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6049
x-amzn-requestid: 2d1a2a66-8b63-44f0-83ec-10628a5fcac6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CgvBFFMGIAMFhCg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64235ed3-2a90bf0365925acb3b348489;Sampled=0
x-amzn-remapped-date: Tue, 28 Mar 2023 21:40:35 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: bXiCIy2ZqOyLvougeQikdsmaIJ9BfMPpOO4oU-3nEGY33FQGCm0ZoQ==
via: 1.1 c28e01aa413e9ea602538ccda1511062.cloudfront.net (CloudFront), 1.1 49cdeca097624936e070b73619df7da8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 29 Mar 2023 21:50:29 GMT
age: 82428
etag: "e29478b866f90402b48d2b516d01d60a863c9cf9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2