{"report_id":"e08e6777-fe2d-4657-9667-27ce64385685","version":6,"status":"done","tags":[],"date":"2026-05-20T12:52:10Z","url":{"schema":"http","addr":"viewpackagetracking.com","fqdn":"viewpackagetracking.com","domain":"viewpackagetracking.com","tld":"com"},"ip":{"addr":"104.20.24.209","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"viewpackagetracking.com/","fqdn":"viewpackagetracking.com","domain":"viewpackagetracking.com","tld":"com"},"title":"USPS Package Tracking","dom":{"size":4718,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (481)","md5":"3558114edcfe3e5175e6820d340819c1","sha1":"0bb7582e7b7f0ed000078f9c3a2b0c9257ee3dbe","sha256":"6c68b6d23a2072bc0ee0ef38651d8eeaf452093731c2d71cf98eb6b7839606ef","sha512":"241b137352c7780f1ed2a9eea6a8617fbd5ea5b03f76bb22d5b3a63daf31833e123ad432eb42f482dc57cd49a442d59045567d9e6d4a013d6d436e92d4cc088e","ssdeep":"48:nBvWOjO4/mR13IXw9jmxmUbtEBHtOFgvOSS0v24Q0gOAvzsUr8kI86H6fjbUr:nBvW1HR1L0xyNOCFv24Q0g94C6u8r","tlshash":"2aa1251169f14137006381d8b6b3e70a7fa6e90be74ada01b5ee47843fc3e868d0364c","dom_hash":"domhashb61ebb060048ba87a4b772bac373c39b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"viewpackagetracking.com","fqdn":"viewpackagetracking.com","domain":"viewpackagetracking.com","tld":"com"},"ip":{"addr":"104.20.24.209","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-24T12:52:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"viewpackagetracking.com","ip":{"addr":"172.66.164.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-16","domain_rank":0,"first_seen":"2025-11-20T23:16:29.746678Z","last_seen":"2026-05-03T14:05:50.52213Z","alert_count":20,"request_count":5,"received_data":46090,"sent_data":2333,"comment":"","tags":null,"fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Statcounter","description":"","website":"https://www.statcounter.com","common_platform_enumeration":"","icon":"Statcounter.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-05-17T22:41:47.231515Z","alert_count":0,"request_count":2,"received_data":1012,"sent_data":1699,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-17T22:25:57.974982Z","alert_count":0,"request_count":1,"received_data":431547,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"viewpackagetracking.com/","fqdn":"viewpackagetracking.com","domain":"viewpackagetracking.com","tld":"com"},"ip":{"addr":"172.66.164.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c09fd66e5a77b19c2d0d06cfc188441","sha1":"2b41a2f632581f51765a67f70b7c4fea4acfd493","sha256":"799b872409c53d7a1be8a32cdb72502353ab3d036727c621421128a2ab22c4ee","sha512":"c95d116f25d277e5f159b1cc946244b72ed9f0a8a9e5db3d292f221cb6246bfa1104bf6c6be8c3f7f80d34c31f84c1583c830b0065ef905753d7e6c70a703041","ssdeep":"","tlshash":"52c08c89250b0c72a4a72a498f3fb105b006321252e18831291ba3048f21f17e348844","size":165,"data":"","first_seen":"2025-11-20T23:16:34.182369Z","last_seen":"2026-05-20T12:52:15.101356Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-800200940","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c0970b24e4324d26e9d6d529269974c","sha1":"030c0a129d0bc44bb16a2f84bf8747622f7f6ba4","sha256":"dc0dd616767442405fb05830da30f52971bf707156167c7d50aebc566442cf43","sha512":"529dcbd436023cea1f8e7d3f4b2b2e07446250cb7875e4dc86fde94cb5140ba8b42d574c10f285ed27f1cd6b0fb46d039e81f8d0110adff2cfa1dca4f97417ab","ssdeep":"6144:687rjrOm1LZ+cZscMzCEiOqW2kAOFzlCT:BOmL+6sbnby","tlshash":"0c9407cdb3da74625393b478903f018ba57b29e2b48cc899f189c8e42d7465a4277f7c","size":430897,"data":"","first_seen":"2026-05-20T12:52:15.098658Z","last_seen":"2026-05-20T12:52:15.098658Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viewpackagetracking.com/","fqdn":"viewpackagetracking.com","domain":"viewpackagetracking.com","tld":"com"},"ip":{"addr":"172.66.164.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d7d2ce01ecf844a7a4f7dfc418e4369d","sha1":"65b1eaa2504b19814556827f27d7ff7828b04f64","sha256":"14b21f79fb48e101c4324446cb75bc775f2266aecbfa13a34052ca512b6ae0af","sha512":"4d87a764474a8197aca5b9f5141f655c9fb2acfb180c1df79fd0949f1bdc060a8e524b26b3dbd19adf16634b51075f49013c06a6568e0ff18c58f587db63c02c","ssdeep":"","tlshash":"afe0721a30c2003a03b745aa33f7890a2532370fc49e8b127eafc4d61f24ca5040654c","size":309,"data":"","first_seen":"2025-11-20T23:16:34.183579Z","last_seen":"2026-05-20T12:52:15.102937Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viewpackagetracking.com/","fqdn":"viewpackagetracking.com","domain":"viewpackagetracking.com","tld":"com"},"ip":{"addr":"172.66.164.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"85c0e9ffa5f579219f7e5087f7df6479","sha1":"57c749f48211d658f9ffa2fdd12c4081418247b9","sha256":"7a35bfae354ecdf6545c6afd433480e5abd9a38c02b5401efc6decc4a6912cf9","sha512":"54e3ac676c3988410ac6a2c5b8207e16b18fcfa686f1dff914885b640f4fbfab3501128ccf2339f73c86ba6d954ce90221484a2fdf3982e7307bb111dfa94624","ssdeep":"","tlshash":"52f0e94a36b267a218bf11bc67475114b33251c3763cf905754e83057f9ae3d8f52789","size":646,"data":"","first_seen":"2025-11-21T02:07:16.354494Z","last_seen":"2026-05-20T12:52:15.104778Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viewpackagetracking.com/scripts/config.js","fqdn":"viewpackagetracking.com","domain":"viewpackagetracking.com","tld":"com"},"ip":{"addr":"172.66.164.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbb534d0a0f17dabaf5a7de61367b648","sha1":"6cb5620260d503033ab04faf5927adc29bb3a32c","sha256":"55616da61fc9846f21b338d4bd195fb47417d111865dffa503ab7ce557deb4f4","sha512":"52b2c353fecc9bb120a738aabffd1c3cbdfdf062c88a41512feaf2384446527a77129d3e050693e5a4629f0f6d959ee0b85e94c961bf34d96401b5d88373acb5","ssdeep":"","tlshash":"674131aa520600b92c3a9302db177518f63b403b6352e8527fddd4812fb1a47e1676eb","size":1992,"data":"","first_seen":"2025-11-21T02:07:16.348872Z","last_seen":"2026-05-20T12:52:15.091408Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viewpackagetracking.com/","fqdn":"viewpackagetracking.com","domain":"viewpackagetracking.com","tld":"com"},"ip":{"addr":"172.66.164.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"25505476fbc84d440e6a7f8fcd62483d","sha1":"34225c296f92101bc4a2a36235e18565c939716d","sha256":"b907f00035bd878c53024971f32d2d5e97fde278e43f5f65a863ad756b89877f","sha512":"8fde03b95a764f012b7cf042d13d22ffa3a18369d0082e9cd69c7f28b4641d50a2dce0a09349ab9ae92f2b36742371a89ac1f11ec69335b2a0aba003967784e5","ssdeep":"","tlshash":"d8b012047735682031a03130b47ff300e0f4a020a11dc2bc481be00e7c0083107384cd","size":100,"data":"","first_seen":"2025-11-20T23:16:34.184615Z","last_seen":"2026-05-20T12:52:15.106279Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"viewpackagetracking.com/","fqdn":"viewpackagetracking.com","domain":"viewpackagetracking.com","tld":"com"},"ip":{"addr":"172.66.164.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-20T12:51:48.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viewpackagetracking.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 21:00:47 GMT","end":"Mon, 10 Aug 2026 22:00:30 GMT"},"fingerprint":{"sha1":"96:35:7A:B8:AE:07:98:30:F5:7E:08:F2:AE:D0:10:1F:74:57:29:FB","sha256":"56:AF:C1:78:91:C7:2B:BA:64:F9:71:27:65:BF:FC:51:E8:10:32:E5:E1:47:F9:22:55:0C:53:76:AF:D9:70:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: viewpackagetracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 12:51:49 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 20 Nov 2025 17:35:35 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9feb79967f090731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Statcounter","description":"","website":"https://www.statcounter.com","common_platform_enumeration":"","icon":"Statcounter.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4820,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"4f5edd3a270843ea91fe7659566cfa28","sha1":"8a7f94ab8e603140b766b23b4a21a0577c65a059","sha256":"da692577126c9d725445451d8addb80540ece329e0e5f914572ce05093de3ed8","sha512":"191d249db0fa88d01aef746f5bb8b67cd17349cede5867aaf1c67d6591fd5d9b03d344b32950432810cfb7e319cf042663b152300bc08f40cdd7cb20a618a12c","ssdeep":"48:tMhHlCnRw9UmpumUutDtBHc8qqRtHhiPmGPxOgW5exvEQDUrQhe6n/ffB0F:G1CGz85ihsmoxOgUS0","tlshash":"83a1e01169c18576007381d8ba72e749fe66920bf74a9a42b9ee478b3ff3e558c03588","first_seen":"2025-11-21T02:07:16.352037Z","last_seen":"2026-05-20T12:52:15.086239Z","times_seen":3,"resource_available":true,"data":null}},"time_used":655,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":610,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"viewpackagetracking.com/style.css","fqdn":"viewpackagetracking.com","domain":"viewpackagetracking.com","tld":"com"},"ip":{"addr":"172.66.164.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://viewpackagetracking.com/","date":"2026-05-20T12:51:49.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viewpackagetracking.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 21:00:47 GMT","end":"Mon, 10 Aug 2026 22:00:30 GMT"},"fingerprint":{"sha1":"96:35:7A:B8:AE:07:98:30:F5:7E:08:F2:AE:D0:10:1F:74:57:29:FB","sha256":"56:AF:C1:78:91:C7:2B:BA:64:F9:71:27:65:BF:FC:51:E8:10:32:E5:E1:47:F9:22:55:0C:53:76:AF:D9:70:83"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: viewpackagetracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viewpackagetracking.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 12:51:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Nov 2025 17:36:56 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9feb799b392b0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15591,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF, LF line terminators","md5":"a089a9a3f6aa851a4c89c9a5f5a0c45f","sha1":"a1709ad6416ce7bf848ddddd7d566bed119f5b0a","sha256":"1cd2f3b38ac65b591ac5f208980a7c51039ce7d3bbf06ae2407b2d38632d5d07","sha512":"cbede7a26b856d2a3429d404a2fb008dc12be5288cb2e7758ab48118afcd5c7bec7ddec15acd5bc166dea9c0a4a203a6ff14e8520fe205f804b554bf8db9b308","ssdeep":"192:PSgxWJNhVOaevw88c4V5OaRISvRXZsQnG3a5HNzbRkSx7qEwohgagDeJA7zZVAMm:PZWJVORY88c4EkbRkYeGgagp7AMXYV","tlshash":"106267449603510d66379f7ca3a25728fb6c8071ce0b8bbdbee53068aac47f41462ecd","first_seen":"2025-11-21T02:07:16.34782Z","last_seen":"2026-05-20T12:52:15.087839Z","times_seen":3,"resource_available":false,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":773,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"viewpackagetracking.com/images/icon2.png","fqdn":"viewpackagetracking.com","domain":"viewpackagetracking.com","tld":"com"},"ip":{"addr":"172.66.164.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viewpackagetracking.com/","date":"2026-05-20T12:51:49.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viewpackagetracking.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 21:00:47 GMT","end":"Mon, 10 Aug 2026 22:00:30 GMT"},"fingerprint":{"sha1":"96:35:7A:B8:AE:07:98:30:F5:7E:08:F2:AE:D0:10:1F:74:57:29:FB","sha256":"56:AF:C1:78:91:C7:2B:BA:64:F9:71:27:65:BF:FC:51:E8:10:32:E5:E1:47:F9:22:55:0C:53:76:AF:D9:70:83"}}},"request":{"raw":"GET /images/icon2.png HTTP/1.1\r\nHost: viewpackagetracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viewpackagetracking.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 12:51:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 11153\r\nlast-modified: Thu, 20 Nov 2025 17:35:34 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9feb799b393e0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11153,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"8231402b98941e7a471bfe50ea7ca971","sha1":"e96ae642feedfa4ec18dad2accffbbe14807c0dc","sha256":"bef8cc6086f0871dc3f97be18168eba23e4ed33bdcf6f548de7ae05eb605a5a0","sha512":"b890240e1e901841945c3a389c6e53bb3835193c2c06995a427278719b550a626728a5d338e9d2e9a8ff7d3987771901ba8618b30daae439aec375315cb59b27","ssdeep":"192:dTsg6A5VbAcojkVfh8qc51aRe2F9id4Sfo3ZNZxhcqTZBXBIBLH9NQAZ4TRC:dTstC2cohqU1aRfvZTxhFLaB3n6TRC","tlshash":"da32cf53f701c2469c76642d3cedb6f69195f60ba44e972c424b628f2a33310b1cdbda","first_seen":"2025-11-20T23:16:34.164311Z","last_seen":"2026-05-20T12:52:15.08886Z","times_seen":7,"resource_available":false,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":659,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"viewpackagetracking.com/scripts/config.js","fqdn":"viewpackagetracking.com","domain":"viewpackagetracking.com","tld":"com"},"ip":{"addr":"172.66.164.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viewpackagetracking.com/","date":"2026-05-20T12:51:49.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viewpackagetracking.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 21:00:47 GMT","end":"Mon, 10 Aug 2026 22:00:30 GMT"},"fingerprint":{"sha1":"96:35:7A:B8:AE:07:98:30:F5:7E:08:F2:AE:D0:10:1F:74:57:29:FB","sha256":"56:AF:C1:78:91:C7:2B:BA:64:F9:71:27:65:BF:FC:51:E8:10:32:E5:E1:47:F9:22:55:0C:53:76:AF:D9:70:83"}}},"request":{"raw":"GET /scripts/config.js HTTP/1.1\r\nHost: viewpackagetracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viewpackagetracking.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 12:51:50 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 20 Nov 2025 17:35:34 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9feb799b39420731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1992,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"fbb534d0a0f17dabaf5a7de61367b648","sha1":"6cb5620260d503033ab04faf5927adc29bb3a32c","sha256":"55616da61fc9846f21b338d4bd195fb47417d111865dffa503ab7ce557deb4f4","sha512":"52b2c353fecc9bb120a738aabffd1c3cbdfdf062c88a41512feaf2384446527a77129d3e050693e5a4629f0f6d959ee0b85e94c961bf34d96401b5d88373acb5","ssdeep":"","tlshash":"674131aa520600b92c3a9302db177518f63b403b6352e8527fddd4812fb1a47e1676eb","first_seen":"2025-11-21T02:07:16.348872Z","last_seen":"2026-05-20T12:52:15.091408Z","times_seen":3,"resource_available":true,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=18\u0026frm=0\u0026auid=1280798760.1779281510\u0026dt=USPS%20Package%20Tracking\u0026en=page_view\u0026dl=https%3A%2F%2Fviewpackagetracking.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1221142959.1779281510\u0026navt=n\u0026npa=1\u0026gtm=45be65i2v9214334416za200zd9214334416xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938466~115938468\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-800200940\u0026tid=AW-800200940\u0026tft=1779281510469\u0026tfd=1639","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://viewpackagetracking.com/","date":"2026-05-20T12:51:50.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:37:23 GMT","end":"Mon, 13 Jul 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CC:9E:F8:1A:CF:E2:AE:BD:CA:7B:1C:86:13:7C:06:64:83:8A:3C:32","sha256":"8A:A3:8B:F8:5B:7F:59:EC:FF:62:94:8B:46:FF:DE:AB:43:6A:29:E0:E9:08:F2:56:40:67:7E:01:E2:56:A9:25"}}},"request":{"raw":"POST /ccm/collect?rcb=18\u0026frm=0\u0026auid=1280798760.1779281510\u0026dt=USPS%20Package%20Tracking\u0026en=page_view\u0026dl=https%3A%2F%2Fviewpackagetracking.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1221142959.1779281510\u0026navt=n\u0026npa=1\u0026gtm=45be65i2v9214334416za200zd9214334416xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938466~115938468\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-800200940\u0026tid=AW-800200940\u0026tft=1779281510469\u0026tfd=1639 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://viewpackagetracking.com/\r\nOrigin: https://viewpackagetracking.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\npragma: no-cache\r\ndate: Wed, 20 May 2026 12:51:50 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://viewpackagetracking.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T16:56:15.989935Z","times_seen":15496273,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":102,"dns":0,"connect":27,"send":0,"wait":31,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-800200940","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://viewpackagetracking.com/","date":"2026-05-20T12:51:49.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"E7:E4:62:10:D0:4A:34:4C:52:81:20:8A:19:37:09:AC:CB:16:42:54","sha256":"08:43:11:5A:D2:42:9C:49:2D:21:51:4F:92:B8:9E:59:04:F2:2D:E8:0F:ED:E7:49:06:D8:6F:61:B9:41:A2:36"}}},"request":{"raw":"GET /gtag/js?id=AW-800200940 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viewpackagetracking.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 20 May 2026 12:51:49 GMT\r\nexpires: Wed, 20 May 2026 12:51:49 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 20 May 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 145953\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":430897,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5929)","md5":"5c0970b24e4324d26e9d6d529269974c","sha1":"030c0a129d0bc44bb16a2f84bf8747622f7f6ba4","sha256":"dc0dd616767442405fb05830da30f52971bf707156167c7d50aebc566442cf43","sha512":"529dcbd436023cea1f8e7d3f4b2b2e07446250cb7875e4dc86fde94cb5140ba8b42d574c10f285ed27f1cd6b0fb46d039e81f8d0110adff2cfa1dca4f97417ab","ssdeep":"6144:687rjrOm1LZ+cZscMzCEiOqW2kAOFzlCT:BOmL+6sbnby","tlshash":"0c9407cdb3da74625393b478903f018ba57b29e2b48cc899f189c8e42d7465a4277f7c","first_seen":"2026-05-20T12:52:15.098658Z","last_seen":"2026-05-20T12:52:15.098658Z","times_seen":1,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":104,"dns":0,"connect":22,"send":0,"wait":41,"receive":60,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"viewpackagetracking.com/images/icon2.png","fqdn":"viewpackagetracking.com","domain":"viewpackagetracking.com","tld":"com"},"ip":{"addr":"172.66.164.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viewpackagetracking.com/","date":"2026-05-20T12:51:50.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"viewpackagetracking.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 21:00:47 GMT","end":"Mon, 10 Aug 2026 22:00:30 GMT"},"fingerprint":{"sha1":"96:35:7A:B8:AE:07:98:30:F5:7E:08:F2:AE:D0:10:1F:74:57:29:FB","sha256":"56:AF:C1:78:91:C7:2B:BA:64:F9:71:27:65:BF:FC:51:E8:10:32:E5:E1:47:F9:22:55:0C:53:76:AF:D9:70:83"}}},"request":{"raw":"GET /images/icon2.png HTTP/1.1\r\nHost: viewpackagetracking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viewpackagetracking.com/\r\nCookie: _gcl_au=1.1.1280798760.1779281510\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 12:51:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 11153\r\nlast-modified: Thu, 20 Nov 2025 17:35:34 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9feb79a0de540731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11153,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"8231402b98941e7a471bfe50ea7ca971","sha1":"e96ae642feedfa4ec18dad2accffbbe14807c0dc","sha256":"bef8cc6086f0871dc3f97be18168eba23e4ed33bdcf6f548de7ae05eb605a5a0","sha512":"b890240e1e901841945c3a389c6e53bb3835193c2c06995a427278719b550a626728a5d338e9d2e9a8ff7d3987771901ba8618b30daae439aec375315cb59b27","ssdeep":"192:dTsg6A5VbAcojkVfh8qc51aRe2F9id4Sfo3ZNZxhcqTZBXBIBLH9NQAZ4TRC:dTstC2cohqU1aRfvZTxhFLaB3n6TRC","tlshash":"da32cf53f701c2469c76642d3cedb6f69195f60ba44e972c424b628f2a33310b1cdbda","first_seen":"2025-11-20T23:16:34.164311Z","last_seen":"2026-05-20T12:52:15.08886Z","times_seen":7,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":6,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"viewpackagetracking.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=18\u0026frm=0\u0026auid=1280798760.1779281510\u0026dt=USPS%20Package%20Tracking\u0026en=page_view\u0026dl=https%3A%2F%2Fviewpackagetracking.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1221142959.1779281510\u0026navt=n\u0026npa=1\u0026gtm=45be65i2v9214334416za200zd9214334416xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938466~115938468\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-800200940\u0026tid=AW-800200940\u0026tft=1779281510469\u0026tfd=1639","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://viewpackagetracking.com/","date":"2026-05-20T12:51:50.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:37:23 GMT","end":"Mon, 13 Jul 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CC:9E:F8:1A:CF:E2:AE:BD:CA:7B:1C:86:13:7C:06:64:83:8A:3C:32","sha256":"8A:A3:8B:F8:5B:7F:59:EC:FF:62:94:8B:46:FF:DE:AB:43:6A:29:E0:E9:08:F2:56:40:67:7E:01:E2:56:A9:25"}}},"request":{"raw":"GET /ccm/collect?rcb=18\u0026frm=0\u0026auid=1280798760.1779281510\u0026dt=USPS%20Package%20Tracking\u0026en=page_view\u0026dl=https%3A%2F%2Fviewpackagetracking.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1221142959.1779281510\u0026navt=n\u0026npa=1\u0026gtm=45be65i2v9214334416za200zd9214334416xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938466~115938468\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-800200940\u0026tid=AW-800200940\u0026tft=1779281510469\u0026tfd=1639 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://viewpackagetracking.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 12:51:50 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T16:56:15.989935Z","times_seen":15496273,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}