WEBSITE ANALYSIS REPORT

http://uspss.pages.dev/entreg/LoginAction_input%252CN/A%252Chttps%253A/manage/po-boxes.html

12 Oct 2026 · 02:19:32.000 UTCpublic

Report tags: usps logistics phishing
Submit tags: openphish

Request review

Phishing detected

5 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

02:18:28.877 GET 200 document 82.5 KB 34 ms 4 alerts

02:18:29.132 GET 200 script 0 B 0 ms 4 alerts

02:18:29.133 GET 200 stylesheet 0 B 0 ms 4 alerts

02:18:29.137 GET 200 stylesheet 0 B 0 ms 4 alerts

02:18:29.142 GET 200 script 0 B 0 ms 4 alerts

02:18:29.145 GET 200 script 0 B 0 ms 4 alerts

02:18:29.147 GET 200 script 0 B 0 ms 4 alerts

02:18:29.149 GET 200 script 0 B 0 ms 4 alerts

02:18:29.151 GET 200 script 0 B 0 ms 4 alerts

02:18:29.153 GET 200 script 0 B 0 ms 4 alerts

02:18:29.160 GET 200 script 0 B 0 ms 4 alerts

02:18:29.176 GET 200 stylesheet 0 B 0 ms 4 alerts

02:18:29.196 GET 200 stylesheet 0 B 0 ms 4 alerts

02:18:29.199 GET 200 stylesheet 0 B 0 ms 4 alerts

02:18:29.202 GET 200 script 0 B 0 ms 4 alerts

02:18:29.205 GET 200 script 0 B 0 ms 4 alerts

02:18:29.222 GET 200 script 0 B 0 ms 4 alerts

02:18:29.224 GET 200 script 0 B 0 ms 4 alerts

02:18:29.242 GET 200 img 82.5 KB 19 ms 4 alerts

02:18:29.248 GET 200 img 82.5 KB 21 ms 4 alerts

02:18:29.259 GET 200 img 82.5 KB 18 ms 4 alerts

02:18:29.266 GET 200 img 82.5 KB 25 ms 4 alerts

02:18:29.274 GET 200 img 82.5 KB 20 ms 4 alerts

02:18:29.278 GET 200 img 82.5 KB 22 ms 4 alerts

02:18:29.282 GET 200 img 82.5 KB 20 ms 4 alerts

Transaction #49

Request / response

URL

GET HTTPS

https://uspss.pages.dev/entreg/LoginAction_input%252CN/A%252Chttps%253A/manage/assets/images/home/location.svg

IP / ASN

172.66.44.116

AS13335 · CLOUDFLARENET

Requested by: https://uspss.pages.dev/entreg/LoginAction_input%252CN/A%252Chttps%253A/manage/po-boxes.html

Resource information

File type: HTML document, ASCII text, with very long lines (1246), with CRLF line terminators
MIME type: text/html; charset=utf-8
First seen (UTC): 17 Jul 2024 · 23:43:20.000 UTC
Last seen (UTC): 18 Oct 2026 · 05:48:16.881 UTC
Times seen: 220

Size: 82.5 KB (84454 bytes)
MD5: 86b5274aee49e3d5a9c7e6ff9840fe20
SHA1: 294577ecf670469274ba0f573de2200e30b6feb8
SHA256: 31b548e264ce48708e30541f7210a259da78952559923fb8baef283afddd7722

Certificate information

Issuer: Google Trust Services · WE1
Subject: uspss.pages.dev
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 82:07:2D:A5:BB:28:62:EE:A3:EF:85:1B:8B:A8:A1:4C:AD:2E:95:A4
Valid from: Mon, 24 Aug 2026 21:36:42 GMT
Valid until: Sun, 22 Nov 2026 22:36:25 GMT

Technology fingerprints

Popper (Miscellaneous)
Cloudflare (CDN)
Google Tag Manager (Tag managers)
Bootstrap (UI frameworks)
jQuery:3.5.1 (JavaScript libraries)
RequireJS (JavaScript frameworks)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Phishing - US Postal Service	medium	Phishing
OpenDNS Phishing Block	medium	Phishing
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /entreg/LoginAction_input%252CN/A%252Chttps%253A/manage/assets/images/home/location.svg HTTP/1.1
Host: uspss.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://uspss.pages.dev/entreg/LoginAction_input%252CN/A%252Chttps%253A/manage/po-boxes.html
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=5, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
date: Mon, 12 Oct 2026 02:18:29 GMT
content-encoding: br
content-type: text/html; charset=utf-8
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
priority: u=5,i
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=2IdqgWuBmbimKZs89EKXliaHSshI%2BIC5DSEuykh8GOLpHhVaV0S9%2BoyNes9zKbAht2R331URVuLQnPSGTro%2FGDFfXDtIjh0DXdKBNHfoBnZ3Ugd3d9Gn5VdsAEP4kOVYvaY%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: a4929d3d08c72efa-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

02:18:29.285 GET 200 img 82.5 KB 20 ms 4 alerts

02:18:29.287 GET 200 img 82.5 KB 19 ms 4 alerts

02:18:29.289 GET 200 img 82.5 KB 20 ms 4 alerts

02:18:29.294 GET 200 img 82.5 KB 17 ms 4 alerts

02:18:29.301 GET 200 img 82.5 KB 20 ms 4 alerts

02:18:29.308 GET 200 img 82.5 KB 16 ms 4 alerts

02:18:29.311 GET 200 img 82.5 KB 23 ms 4 alerts

02:18:29.314 GET 200 img 82.5 KB 25 ms 4 alerts

02:18:29.319 GET 200 img 82.5 KB 20 ms 4 alerts

02:18:29.323 GET 200 img 82.5 KB 17 ms 4 alerts

02:18:29.327 GET 200 img 82.5 KB 19 ms 4 alerts

02:18:29.331 GET 200 img 82.5 KB 17 ms 4 alerts

02:18:29.338 GET 200 img 82.5 KB 17 ms 4 alerts

02:18:29.342 GET 200 img 82.5 KB 17 ms 4 alerts

02:18:29.385 GET 200 img 82.5 KB 16 ms 4 alerts

02:18:29.394 GET 200 img 82.5 KB 31 ms 4 alerts

02:18:29.397 GET 200 img 82.5 KB 28 ms 4 alerts

02:18:29.400 GET 200 img 82.5 KB 22 ms 4 alerts

02:18:29.403 GET 200 img 82.5 KB 22 ms 4 alerts

02:18:29.405 GET 200 img 82.5 KB 21 ms 4 alerts

02:18:29.408 GET 200 img 82.5 KB 20 ms 4 alerts

02:18:29.411 GET 200 img 82.5 KB 18 ms 4 alerts

02:18:29.414 GET 200 img 82.5 KB 17 ms 4 alerts

02:18:29.417 GET 200 img 82.5 KB 17 ms 4 alerts

02:18:29.422 GET 200 img 82.5 KB 20 ms 4 alerts

http://uspss.pages.dev/entreg/LoginAction_input%252CN/A%252Chttps%253A/manage/po-boxes.html

Domain graph

Hostnames

Connections